$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f50f8870-ed18-3963-a512-a57d2535f359.roa File: f50f8870-ed18-3963-a512-a57d2535f359.roa (raw, json) Hash identifier: ru/H7VFTpFILR1kSF6MX+/zqcllLmP5hih+gbZTsdDc= Subject key identifier: 27:9D:31:18:77:7B:D6:84:6D:3C:F0:4C:2B:16:CF:C8:83:6E:29:6E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BA0D24E698C9FE9566B776700 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f50f8870-ed18-3963-a512-a57d2535f359.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16815 IP address blocks: 68.64.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4e:69:8c:9f:e9:56:6b:77:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=4cccf978-36c4-42cd-8698-fa0f083a6d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:0c:50:47:5c:63:5b:ee:ee:1f:20:26:12: 01:d1:b5:8c:78:47:35:4b:e1:36:69:e0:4d:62:ba: 53:5d:54:20:7a:5b:71:ac:37:71:43:e0:fe:b0:16: 6f:bd:b3:b2:2e:a4:7c:cd:c4:93:2b:09:28:58:5a: e8:f2:7d:d0:6d:9f:01:6e:37:89:9a:ff:22:9a:f2: a8:4e:c4:71:cd:6d:cc:c1:81:c1:42:6b:06:d1:81: bb:69:24:28:3f:59:b0:b9:dd:b5:7d:fa:82:aa:41: 49:9e:01:fe:b9:a8:f9:6d:38:7e:f0:59:65:c3:ac: 42:71:f6:04:8a:07:e0:fe:d2:f5:75:b6:9f:c9:55: 39:95:08:19:4b:44:3d:64:66:ee:1a:f7:f7:63:6b: 77:43:72:95:11:5c:91:3d:4b:a6:90:f1:4d:70:29: 1a:25:84:07:48:c2:2b:86:b9:e2:74:ff:4c:b1:bb: b3:25:96:25:36:0d:d7:6b:03:29:90:95:6a:3d:27: 97:69:f3:3b:7c:f6:88:75:68:c0:e7:a6:a8:ef:51: d7:2c:6c:05:7d:77:ba:ec:95:1f:39:be:0e:dd:6c: f7:17:e7:c6:03:fe:e3:2c:c4:e5:e9:ec:5a:5d:40: e3:cb:af:82:ea:cd:d1:00:d5:54:77:e6:7d:f3:47: db:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9D:31:18:77:7B:D6:84:6D:3C:F0:4C:2B:16:CF:C8:83:6E:29:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f50f8870-ed18-3963-a512-a57d2535f359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6b:f4:93:90:d0:01:d1:20:56:ae:a6:d2:28:ca:af:b9:1c: f4:b4:96:1f:67:7e:74:8f:d8:f4:eb:fa:ca:3e:fb:ad:13:df: bc:fb:a7:88:6c:01:23:1c:06:40:13:56:54:df:62:ec:1d:b0: c8:09:ee:44:15:7b:4b:73:cf:15:71:35:58:81:6d:04:e7:66: b8:e6:cf:ac:8d:5d:20:26:6d:8c:ee:90:2b:1c:db:b2:09:e5: cd:c3:c6:1f:56:b6:46:dd:66:17:77:27:5c:aa:65:c3:1b:2c: bb:a6:05:03:93:5d:5a:cd:6e:de:b1:0f:48:61:17:11:41:a9: 62:f2:5b:db:c9:3f:a7:61:6b:83:68:b5:94:13:1e:7b:e4:84: a6:c5:7f:90:44:08:40:92:eb:60:61:d3:c0:48:4e:c1:2b:db: 60:62:64:f7:4e:67:06:9e:1f:d8:61:41:bd:10:32:f6:00:e0: 67:11:53:61:61:53:30:1b:cb:2f:a7:dd:91:13:ad:f3:03:6f: 8a:37:30:d3:82:1c:7e:94:cb:0f:3e:38:2d:b9:13:51:a9:c8: 6a:e3:52:92:aa:1d:e1:49:f3:9e:b9:26:de:e8:c5:ee:32:6b: 0e:d2:7d:8a:e7:65:a7:ab:81:1f:eb:2a:31:a4:a6:91:a1:2a: 48:e9:4f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0k5pjJ/pVmt3ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NGNjY2Y5NzgtMzZjNC00MmNkLTg2OTgtZmEwZjA4M2E2ZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRYMUEdcY1vu7h8gJhIB0bWMeEc1S+E2aeBN YrpTXVQgeltxrDdxQ+D+sBZvvbOyLqR8zcSTKwkoWFro8n3QbZ8BbjeJmv8imvKo TsRxzW3MwYHBQmsG0YG7aSQoP1mwud21ffqCqkFJngH+uaj5bTh+8Fllw6xCcfYE igfg/tL1dbafyVU5lQgZS0Q9ZGbuGvf3Y2t3Q3KVEVyRPUumkPFNcCkaJYQHSMIr hrnidP9MsbuzJZYlNg3XawMpkJVqPSeXafM7fPaIdWjA56ao71HXLGwFfXe67JUf Ob4O3Wz3F+fGA/7jLMTl6exaXUDjy6+C6s3RANVUd+Z980fb9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCedMRh3e9aEbTzwTCsWz8iDbiluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZjUwZjg4NzAtZWQxOC0z OTYzLWE1MTItYTU3ZDI1MzVmMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFREAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlr9JOQ0AHRIFauptIoyq+5HPS0lh9nfnSP2PTr+so++60T37z7p4hs ASMcBkATVlTfYuwdsMgJ7kQVe0tzzxVxNViBbQTnZrjmz6yNXSAmbYzukCsc27IJ 5c3Dxh9WtkbdZhd3J1yqZcMbLLumBQOTXVrNbt6xD0hhFxFBqWLyW9vJP6dha4No tZQTHnvkhKbFf5BECECS62Bh08BITsEr22BiZPdOZwaeH9hhQb0QMvYA4GcRU2Fh UzAbyy+n3ZETrfMDb4o3MNOCHH6Uyw8+OC25E1GpyGrjUpKqHeFJ8565Jt7oxe4y aw7SfYrnZaergR/rKjGkppGhKkjpTyg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:04 2025 by rpki-client