$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/0517b2a9-7af0-33ff-b0bb-3e1a356d036e.roa File: 0517b2a9-7af0-33ff-b0bb-3e1a356d036e.roa (raw, json) Hash identifier: HDoGds6h7SkTnY/XzoEXw/N+hr1ucjAX8gzS9YLOLfw= Subject key identifier: 33:56:9B:2D:A3:59:FF:DD:E9:9A:6E:0F:7A:D5:15:78:5C:8C:0B:6F Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584BBE40653C095902093A06E980 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/0517b2a9-7af0-33ff-b0bb-3e1a356d036e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 834 IP address blocks: 68.67.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:65:3c:09:59:02:09:3a:06:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=189108ac-8442-4c29-8a7c-8ab2542d5571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:5d:cd:95:d1:96:71:8e:5e:23:d1:82:cf: 42:23:68:7b:3f:ab:76:c6:91:c6:60:d1:ea:f1:f3: 39:74:a5:f5:e0:d2:c0:90:19:e4:65:06:d1:3b:1f: 14:af:ed:ea:bd:7c:88:0a:73:49:63:3a:f4:e9:bb: 5f:05:ce:8b:cd:db:ee:52:64:18:cf:fd:63:72:b8: 7b:ac:e4:d8:10:7b:2c:ee:13:1c:6c:83:8a:22:d9: 87:2c:54:45:2a:01:1b:39:d2:a3:fd:4a:24:48:b2: 10:ff:06:95:c7:ff:b3:90:3e:b8:fe:8b:40:cb:4a: 1f:ad:ef:7c:fa:0c:43:ee:a7:a4:c0:89:1d:25:a3: e4:d0:de:ff:a8:13:1e:be:07:d5:c4:f1:d6:e4:d1: 13:ac:92:29:d2:a9:4b:f9:ae:ff:6e:17:6d:6f:1f: 33:99:2e:cf:bb:8f:21:d4:50:8c:55:a7:e1:a8:ac: 4d:f4:4d:c0:42:86:9b:f6:c7:89:39:41:0f:c8:bb: 4e:8f:4b:f9:06:08:db:69:13:db:8a:12:ca:3e:e6: 1b:42:2a:a9:25:1f:a9:b6:92:bc:eb:7f:19:4e:8e: 92:a1:41:ee:e0:90:76:5b:ea:f6:72:66:1a:0b:92: 29:e5:0d:75:80:be:55:08:3e:25:f0:94:89:a4:32: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:9B:2D:A3:59:FF:DD:E9:9A:6E:0F:7A:D5:15:78:5C:8C:0B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/0517b2a9-7af0-33ff-b0bb-3e1a356d036e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:4c:4c:59:9c:85:14:04:18:42:98:cc:fe:fe:e3:8e:93:04: b6:94:e0:11:34:88:29:2c:75:95:ba:0c:26:5c:46:93:e3:f6: b0:cd:c7:62:63:65:a8:43:00:20:39:fb:a3:a5:cd:81:a2:69: 41:f9:70:ef:56:c5:d4:7c:f5:23:97:2b:88:8a:3f:7c:3e:21: 43:26:66:49:59:21:3d:92:fa:04:d2:14:b4:20:89:c0:6e:f5: 9f:9c:e0:42:22:aa:7f:98:69:84:84:35:15:5b:20:68:42:85: fa:6c:f5:70:f2:a6:ec:23:35:06:78:e4:24:84:06:17:53:06: ee:ca:e5:bc:dd:bf:de:9c:05:68:90:9b:f2:5e:6b:15:20:fe: ec:7a:67:9c:0b:54:ea:76:d8:19:f6:98:f5:d3:a6:e7:f0:45: 6a:4e:99:cb:ea:45:55:36:50:1e:d4:82:6a:10:be:4d:a0:18: e9:31:2a:ad:b3:c2:4b:b9:97:f9:84:97:5a:87:05:7f:4c:59: 99:24:14:79:d2:b7:d9:1c:02:cd:ce:0f:ec:fc:54:4a:87:48: 42:4e:7d:f0:bc:36:c7:9e:17:2b:89:cf:01:51:84:ee:17:ad: e5:04:ff:a4:4c:63:9a:f5:17:02:e9:db:c9:f9:a7:32:d8:28: 79:bf:3f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGU8CVkCCToG6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MTg5MTA4YWMtODQ0Mi00YzI5LThhN2MtOGFiMjU0MmQ1NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUtdzZXRlnGOXiPRgs9CI2h7P6t2xpHGYNHq 8fM5dKX14NLAkBnkZQbROx8Ur+3qvXyICnNJYzr06btfBc6LzdvuUmQYz/1jcrh7 rOTYEHss7hMcbIOKItmHLFRFKgEbOdKj/UokSLIQ/waVx/+zkD64/otAy0ofre98 +gxD7qekwIkdJaPk0N7/qBMevgfVxPHW5NETrJIp0qlL+a7/bhdtbx8zmS7Pu48h 1FCMVafhqKxN9E3AQoab9seJOUEPyLtOj0v5BgjbaRPbihLKPuYbQiqpJR+ptpK8 638ZTo6SoUHu4JB2W+r2cmYaC5Ip5Q11gL5VCD4l8JSJpDLBEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNWmy2jWf/d6ZpuD3rVFXhcjAtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMDUxN2IyYTktN2FmMC0z M2ZmLWIwYmItM2UxYTM1NmQwMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdMTFmchRQEGEKYzP7+446TBLaU4BE0iCksdZW6DCZcRpPj9rDNx2Jj ZahDACA5+6OlzYGiaUH5cO9WxdR89SOXK4iKP3w+IUMmZklZIT2S+gTSFLQgicBu 9Z+c4EIiqn+YaYSENRVbIGhChfps9XDypuwjNQZ45CSEBhdTBu7K5bzdv96cBWiQ m/JeaxUg/ux6Z5wLVOp22Bn2mPXTpufwRWpOmcvqRVU2UB7UgmoQvk2gGOkxKq2z wku5l/mEl1qHBX9MWZkkFHnSt9kcAs3OD+z8VEqHSEJOffC8NseeFyuJzwFRhO4X reUE/6RMY5r1FwLp28n5pzLYKHm/P04= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:13 2025 by rpki-client