$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa File: 24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa (raw, json) Hash identifier: qT02AVe4ympZfZ0ypkDpymtcfBDulWJwxn+wYr+n2yU= Subject key identifier: B4:82:2B:90:92:2C:07:BA:BA:5D:00:85:32:BB:33:AF:B2:25:8A:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0FA6B90630B556EADCF5D000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8072 IP address blocks: 104.44.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:b9:06:30:b5:56:ea:dc:f5:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=08c4ccc3-bd3e-4c62-a865-8f11a2b62d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:9e:da:1c:61:28:d8:fe:12:bb:c5:88:c7: 52:96:85:0c:89:60:37:0f:ff:6b:21:80:b5:96:a7: 16:8a:19:e5:79:f0:77:f7:74:37:60:85:c5:bc:0a: 00:07:44:16:8f:48:22:8c:de:ec:70:0a:fb:c0:ba: d5:ad:2f:9e:a2:be:1c:8c:03:f6:b2:e7:ff:37:66: 66:a3:2b:58:ea:af:e5:78:32:b1:e8:4b:c8:1d:5a: 34:9a:d5:45:84:be:5b:8d:86:04:76:76:f8:d3:90: 0d:4e:54:ab:c7:55:3d:ae:a9:81:50:82:d2:5d:bb: a4:ab:a2:2a:09:7b:94:08:8e:07:0a:aa:60:af:1b: 71:35:63:09:63:1c:12:88:e9:cc:43:f9:b2:66:93: b3:dd:c9:87:f7:e9:18:f7:2b:b1:6a:eb:67:b9:f8: 36:5c:13:c4:3a:c0:f0:57:f5:88:ef:13:a4:41:23: b8:15:a0:2c:5d:ce:e7:60:0f:69:ee:54:32:55:29: de:c5:4a:a2:27:6c:0d:ec:af:57:f2:9a:c6:64:59: 02:92:cb:32:34:3d:d4:ad:f3:21:16:d5:94:c7:c3: 42:ca:4f:83:7a:96:c2:63:10:8a:63:38:a8:c9:e7: 49:67:b5:c5:b2:f0:f0:7b:ad:cf:eb:93:39:de:c3: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:82:2B:90:92:2C:07:BA:BA:5D:00:85:32:BB:33:AF:B2:25:8A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24ff9cdf-36ed-3cbd-9b0a-2d9bb4814c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 104.44.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e2:8c:8a:19:20:9a:70:4e:84:45:43:19:86:4c:ad:84:3e: 76:e8:d8:3e:d7:97:c6:f9:85:74:66:40:19:71:d5:41:de:68: 3e:80:24:b5:3d:02:da:ee:38:a2:2b:c7:3e:22:8f:d4:39:3d: cf:22:22:84:01:99:aa:d2:7d:aa:8d:e3:94:8e:86:31:20:22: 27:89:23:45:22:f4:15:80:d5:d1:9d:04:95:ff:fa:1f:9d:45: bb:eb:28:56:1c:b9:d5:06:b0:6c:01:3b:d1:21:2a:b3:83:65: a4:20:9f:b3:aa:ec:50:6d:33:1b:c8:74:d3:20:d2:47:fc:22: 2b:aa:aa:fb:06:b6:2d:e4:fa:5d:0c:79:60:a8:91:37:2f:cd: a8:f5:c3:19:7e:d3:8f:fa:9d:7b:bf:45:8e:e5:77:d0:ea:2c: b2:8e:6f:4c:92:a1:b1:dd:18:66:34:d5:2f:1c:e9:73:2c:45: 50:6a:b7:24:0a:a0:71:71:e3:c8:d3:07:c6:c5:cb:70:8c:83: 7c:e5:30:a9:ae:3e:91:f0:f9:10:e7:c2:e7:0e:40:33:db:d6: 70:2c:ee:3f:15:3f:8e:e4:9f:0c:a4:3d:b9:bb:93:d4:cf:59: 05:27:cb:11:59:8d:71:57:4e:15:70:0d:bf:c9:0c:bd:14:15: 60:8b:65:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPprkGMLVW6tz10AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MDhjNGNjYzMtYmQzZS00YzYyLWE4NjUtOGYxMWEyYjYyZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBie2hxhKNj+ErvFiMdSloUMiWA3D/9rIYC1 lqcWihnlefB393Q3YIXFvAoAB0QWj0gijN7scAr7wLrVrS+eor4cjAP2suf/N2Zm oytY6q/leDKx6EvIHVo0mtVFhL5bjYYEdnb405ANTlSrx1U9rqmBUILSXbukq6Iq CXuUCI4HCqpgrxtxNWMJYxwSiOnMQ/myZpOz3cmH9+kY9yuxautnufg2XBPEOsDw V/WI7xOkQSO4FaAsXc7nYA9p7lQyVSnexUqiJ2wN7K9X8prGZFkCkssyND3UrfMh FtWUx8NCyk+DepbCYxCKYzioyedJZ7XFsvDwe63P65M53sNJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSCK5CSLAe6ul0AhTK7M6+yJYrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjRmZjljZGYtMzZlZC0z Y2JkLTliMGEtMmQ5YmI0ODE0YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCxBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3ijIoZIJpwToRFQxmGTK2EPnbo2D7Xl8b5hXRmQBlx1UHeaD6AJLU9 AtruOKIrxz4ij9Q5Pc8iIoQBmarSfaqN45SOhjEgIieJI0Ui9BWA1dGdBJX/+h+d RbvrKFYcudUGsGwBO9EhKrODZaQgn7Oq7FBtMxvIdNMg0kf8IiuqqvsGti3k+l0M eWCokTcvzaj1wxl+04/6nXu/RY7ld9DqLLKOb0ySobHdGGY01S8c6XMsRVBqtyQK oHFx48jTB8bFy3CMg3zlMKmuPpHw+RDnwucOQDPb1nAs7j8VP47knwykPbm7k9TP WQUnyxFZjXFXThVwDb/JDL0UFWCLZUU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:38 2025 by rpki-client