$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa File: 4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa (raw, json) Hash identifier: r0BwHBxcq7i8VIYX16XRWORO/9tj/kLHSk6OV5APgf8= Subject key identifier: 38:B5:D1:F7:8F:6F:72:B2:4E:ED:92:C7:5B:2E:58:A1:88:9D:92:69 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584B758C916F9139B81FD6C9AB20 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 834 IP address blocks: 68.67.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:91:6f:91:39:b8:1f:d6:c9:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=468cd843-4078-4bf4-bf6c-dae5e671cf25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:7e:f4:d6:24:97:34:f2:5e:47:46:34:3b: 04:38:a7:57:2b:fe:94:50:d3:1b:37:64:a5:63:cd: 64:9f:35:3b:f3:ae:1e:f2:83:d9:25:12:6f:38:4a: d5:c7:9a:cb:76:50:92:d3:40:0d:48:0e:cb:78:ff: 17:2a:79:61:b6:cb:08:b9:46:18:3c:5c:b9:66:af: ce:b3:47:4e:ad:6a:57:d2:87:86:d4:58:db:0b:db: a4:3f:2a:73:11:64:cf:ef:ad:49:4d:a7:f6:7b:58: e3:43:ac:0f:5c:6e:0c:96:5c:d6:53:9f:f0:27:76: e1:30:54:49:b5:5c:9e:d8:37:51:84:4d:a9:f6:9e: 8d:64:29:4b:15:38:fb:51:75:cd:2e:62:ba:c8:ec: 4c:4f:15:fb:6b:eb:5e:f2:7e:f5:2d:b1:c7:3d:84: 62:59:98:21:8c:99:12:e7:1d:cf:1d:d3:c2:04:58: f1:25:9f:9f:02:ab:39:04:c7:d2:67:d4:e6:27:0f: fd:1c:83:ae:51:6d:51:02:8e:7b:00:61:ff:1d:e4: e2:13:d9:73:58:5d:c8:fa:18:cf:7b:63:25:20:48: ad:7d:ee:0c:31:8e:fe:24:63:05:38:e1:1f:f1:13: 3c:43:e4:5f:3e:ff:b7:39:e9:8a:f7:ec:27:10:a5: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:D1:F7:8F:6F:72:B2:4E:ED:92:C7:5B:2E:58:A1:88:9D:92:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:20:f1:57:ed:0f:eb:23:56:06:55:a6:37:5e:98:2b:ba:38: 82:cd:09:d4:8c:0e:07:0f:85:71:eb:b7:64:29:c1:b2:1f:ce: 97:a9:55:1b:18:21:40:cf:99:7b:e1:2c:9e:12:f6:d2:47:ed: d8:68:d9:26:d0:9d:a4:58:de:99:b8:0c:94:0e:ad:6b:15:ed: ea:12:41:5b:32:f8:a4:d6:ed:c7:7a:41:08:10:37:cd:e4:da: eb:22:c4:cf:94:9d:6b:0d:b8:fc:92:b6:fb:5d:c4:bf:ae:6b: ac:68:f0:6b:1e:5f:ff:4b:db:b1:b1:7d:23:07:b3:fd:e2:31: 4f:ec:18:f7:4d:9b:ca:48:89:8a:93:19:4e:f1:52:af:ce:93: 33:f9:1e:13:6d:a0:c1:46:95:90:bf:92:26:77:7c:18:0d:40: 2d:f8:8f:1a:7a:ee:59:7f:30:bf:65:02:88:59:95:ed:82:09: 7d:d5:78:4f:61:a9:2e:96:ae:4e:b3:50:8c:67:30:1e:9a:9f: 2a:56:3a:03:19:3b:d6:3b:63:ae:d6:24:c2:21:99:aa:30:6e: e6:96:ee:8f:ee:7c:e0:c4:42:09:0b:c1:04:1e:44:b4:7e:a3: a8:a9:ed:97:41:09:f2:41:08:63:b0:03:fa:35:40:18:39:e4: 69:33:ba:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJFvkTm4H9bJqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NDY4Y2Q4NDMtNDA3OC00YmY0LWJmNmMtZGFlNWU2NzFjZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIZ+9NYklzTyXkdGNDsEOKdXK/6UUNMbN2Sl Y81knzU7864e8oPZJRJvOErVx5rLdlCS00ANSA7LeP8XKnlhtssIuUYYPFy5Zq/O s0dOrWpX0oeG1FjbC9ukPypzEWTP761JTaf2e1jjQ6wPXG4MllzWU5/wJ3bhMFRJ tVye2DdRhE2p9p6NZClLFTj7UXXNLmK6yOxMTxX7a+te8n71LbHHPYRiWZghjJkS 5x3PHdPCBFjxJZ+fAqs5BMfSZ9TmJw/9HIOuUW1RAo57AGH/HeTiE9lzWF3I+hjP e2MlIEitfe4MMY7+JGMFOOEf8RM8Q+RfPv+3OemK9+wnEKXmxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi10fePb3KyTu2Sx1suWKGInZJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNGU1ZTZhMmMtYmQyNS0z ZDAwLThhMWEtNDNiOGJlYjdhMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALog8VftD+sjVgZVpjdemCu6OILNCdSMDgcPhXHrt2QpwbIfzpepVRsY IUDPmXvhLJ4S9tJH7dho2SbQnaRY3pm4DJQOrWsV7eoSQVsy+KTW7cd6QQgQN83k 2usixM+UnWsNuPyStvtdxL+ua6xo8GseX/9L27GxfSMHs/3iMU/sGPdNm8pIiYqT GU7xUq/OkzP5HhNtoMFGlZC/kiZ3fBgNQC34jxp67ll/ML9lAohZle2CCX3VeE9h qS6Wrk6zUIxnMB6anypWOgMZO9Y7Y67WJMIhmaowbuaW7o/ufODEQgkLwQQeRLR+ o6ip7ZdBCfJBCGOwA/o1QBg55GkzujA= -----END CERTIFICATE-----Generated at Tue Nov 4 20:56:46 2025 by rpki-client