$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa File: 3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa (raw, json) Hash identifier: KYKlJt8y1qtolqli9a3KvU+ZHlejgOF7mxKsAdzCC5M= Subject key identifier: A6:EB:21:00:4E:51:75:EF:55:B6:6A:F7:EB:48:0A:24:C9:D4:03:B5 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584BBB75A586D0937A3BFFE23C80 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 834 IP address blocks: 68.67.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a5:86:d0:93:7a:3b:ff:e2:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=dcb43b8e-850b-43d3-b57b-cf758e296693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d7:ec:18:12:90:c8:a9:6f:9d:17:99:1f:73: be:07:3e:2a:80:59:da:1b:b3:15:df:2d:06:84:91: 52:ad:85:46:e5:c8:c0:a8:fb:c6:32:77:89:1c:d7: 64:5d:e9:e9:53:dd:5b:0e:7e:d6:26:4d:69:3e:70: 82:a5:6f:9f:f8:6c:6e:e7:73:00:4f:df:8d:95:f5: c1:f6:b9:de:5a:95:28:25:31:87:03:ec:c9:b2:b1: 73:03:33:cf:0c:b3:19:ec:89:ad:d0:06:3e:f9:a1: 50:e6:5e:28:36:8f:dd:9d:e7:ad:11:ba:1b:d1:bf: 61:b7:84:d7:0e:bb:21:92:38:d5:9f:77:d1:89:35: e5:20:eb:b0:31:99:9b:6c:5d:9e:48:0c:5e:7f:c0: d3:83:48:41:df:57:0d:56:18:a8:cb:a9:f6:36:8f: fa:57:8b:83:66:d2:be:39:36:75:e3:9b:79:58:43: 37:5d:41:8e:57:7b:ed:f0:fc:75:92:d5:fe:96:41: 32:e6:48:61:f0:a5:6e:fc:5e:26:11:09:73:c1:fa: 81:8f:69:a3:25:5b:cb:53:3c:02:05:bf:6b:9a:91: 08:33:db:8e:40:1b:23:49:83:54:d7:a6:be:a3:6c: 73:6d:a1:a1:5b:15:fb:c3:d4:81:9c:dc:e8:df:67: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:21:00:4E:51:75:EF:55:B6:6A:F7:EB:48:0A:24:C9:D4:03:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3a3ae330-53cb-3620-abcb-6a65fbe4a7ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6a:e7:17:ef:34:c7:60:94:b9:c9:af:ca:52:d8:67:1c:3c: df:81:8c:b8:0c:22:dd:9c:23:60:3f:a9:05:8b:32:84:cb:2d: 5b:33:f9:b5:ef:8d:a4:5d:ae:40:8d:11:70:ec:6c:38:6d:a0: 42:93:04:8f:d0:53:1f:74:56:a7:04:15:5c:d3:cc:fe:be:5c: a7:91:21:da:d3:c2:2f:4f:18:fd:04:b2:b7:33:99:21:b5:19: ce:82:e9:5c:ca:ac:d3:e4:c5:00:01:30:45:b5:50:b7:f0:d4: 09:a0:c2:cf:32:35:c2:06:da:15:a1:db:48:8e:21:2d:89:2a: e1:40:3a:4d:53:00:0b:2e:92:52:34:e4:aa:b7:45:67:a5:10: 70:ad:ca:a0:c4:68:bb:89:f9:32:04:2f:87:02:64:b9:94:9c: 63:16:34:0b:d8:54:6e:e7:62:0e:f1:e8:d8:58:b5:1e:00:b2: fe:07:4e:73:89:b8:14:14:ff:03:14:4f:18:18:4c:ac:05:ed: 85:20:62:b4:5d:26:dd:65:23:19:61:b0:86:42:da:f8:0f:26: ce:5c:dd:75:d2:b4:cf:2a:44:df:ec:ec:e9:a2:92:6a:a9:d3: 32:15:0e:8d:3d:05:8a:60:23:2f:59:90:a9:96:c8:ec:65:3a: 7f:00:7f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7daWG0JN6O//iPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGNiNDNiOGUtODUwYi00M2QzLWI1N2ItY2Y3NThlMjk2NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNfsGBKQyKlvnReZH3O+Bz4qgFnaG7MV3y0G hJFSrYVG5cjAqPvGMneJHNdkXenpU91bDn7WJk1pPnCCpW+f+Gxu53MAT9+NlfXB 9rneWpUoJTGHA+zJsrFzAzPPDLMZ7Imt0AY++aFQ5l4oNo/dneetEbob0b9ht4TX DrshkjjVn3fRiTXlIOuwMZmbbF2eSAxef8DTg0hB31cNVhioy6n2No/6V4uDZtK+ OTZ145t5WEM3XUGOV3vt8Px1ktX+lkEy5khh8KVu/F4mEQlzwfqBj2mjJVvLUzwC Bb9rmpEIM9uOQBsjSYNU16a+o2xzbaGhWxX7w9SBnNzo32exCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbrIQBOUXXvVbZq9+tICiTJ1AO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvM2EzYWUzMzAtNTNjYi0z NjIwLWFiY2ItNmE2NWZiZTRhN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNq5xfvNMdglLnJr8pS2GccPN+BjLgMIt2cI2A/qQWLMoTLLVsz+bXv jaRdrkCNEXDsbDhtoEKTBI/QUx90VqcEFVzTzP6+XKeRIdrTwi9PGP0EsrczmSG1 Gc6C6VzKrNPkxQABMEW1ULfw1Amgws8yNcIG2hWh20iOIS2JKuFAOk1TAAsuklI0 5Kq3RWelEHCtyqDEaLuJ+TIEL4cCZLmUnGMWNAvYVG7nYg7x6NhYtR4Asv4HTnOJ uBQU/wMUTxgYTKwF7YUgYrRdJt1lIxlhsIZC2vgPJs5c3XXStM8qRN/s7Omikmqp 0zIVDo09BYpgIy9ZkKmWyOxlOn8Afz0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:34:59 2025 by rpki-client