$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa File: 7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa (raw, json) Hash identifier: Ip+i4lApbvG4MgI3NUhaJQxFo0WjKgPLf9QcUXiRx4I= Subject key identifier: 9A:44:17:6E:56:44:9A:B7:83:D5:FB:81:27:C1:4C:4E:55:CC:F2:8A Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AF0F1434BF7B1743D547371C0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 53291 IP address blocks: 68.168.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:43:4b:f7:b1:74:3d:54:73:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=5030fd05-22cc-49eb-a8a5-5ba2e84cae6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:02:46:75:cb:a7:f2:71:35:e9:52:75:31: 6a:c5:be:b5:45:bc:d4:66:3b:0b:e4:62:8e:e0:39: 5e:ca:da:0e:c4:c6:1f:0f:4f:db:75:bf:2f:b2:f6: 2f:c8:38:94:9e:7c:f0:c2:d8:3c:b8:cd:12:68:63: ea:26:62:59:c8:6b:aa:8c:88:f0:e1:71:b3:b8:27: a7:b6:7a:e4:b4:52:cf:2f:02:b2:e5:41:a4:ce:df: 84:06:a5:04:11:f8:f0:32:b6:91:6d:ed:9f:88:81: f4:76:31:a2:7b:bf:2a:3c:04:00:6c:42:fc:4f:c8: 37:36:ec:bc:c9:0f:13:e3:a2:44:6c:19:97:62:da: 73:a2:53:3c:38:62:d1:a5:91:ef:a2:54:8e:b9:a3: dd:99:e9:df:9d:3b:56:93:bb:eb:62:8f:af:3c:06: f9:44:ed:d4:14:1a:49:e6:c8:85:a2:f2:29:35:19: d6:6d:01:f0:08:64:b8:e2:73:34:bc:fd:9f:43:07: 53:7c:57:df:c0:db:25:3a:5c:1d:d6:19:ee:2d:51: ed:b9:7f:7f:a1:40:a2:4a:bc:ab:b7:63:04:fa:c7: 30:56:79:3d:1d:31:f7:7c:5f:d7:a8:3d:ab:f4:62: 44:a8:65:dd:fb:49:d8:8f:e8:b9:8e:aa:5e:c8:17: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:17:6E:56:44:9A:B7:83:D5:FB:81:27:C1:4C:4E:55:CC:F2:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b7:90:be:c0:38:0b:4e:15:c5:5e:f6:2e:83:6f:bc:ad:4c: ee:5b:05:02:55:1a:09:61:e9:c4:6e:d8:7b:ca:71:39:ab:8e: 9e:c3:e1:b5:28:ec:f2:32:cb:00:68:b2:64:39:88:bf:b6:1b: 8c:10:f3:22:f0:30:99:d9:e1:d2:c9:55:53:98:95:58:b3:f7: 60:a4:88:f4:5b:6d:b9:61:a0:83:3c:f7:f5:02:ee:28:c6:a0: 01:f6:d8:2c:d9:1d:69:1d:dc:66:7f:a9:03:6a:9a:38:5b:d8: b6:0f:83:7b:38:89:a4:37:fa:37:ea:54:d3:2e:96:94:7b:b7: b5:92:89:93:0d:a0:77:33:3b:93:1c:06:c0:52:08:b1:ff:2b: af:fd:d6:4d:db:21:15:d2:5b:dd:84:e8:ab:88:e7:a0:ee:9d: 20:a6:73:be:fa:75:bf:89:c3:e0:3d:4c:0c:7a:de:db:b8:9e: 6c:d9:cb:85:37:cf:1b:70:bc:ed:01:18:fa:7a:4c:94:27:dd: d9:3f:81:71:17:e2:dc:8d:6e:be:e6:76:47:ce:62:4c:03:e0: 5f:85:18:71:e9:3f:2e:f7:07:e3:5e:a4:a2:64:ae:b4:4d:6c: 11:d5:90:7b:3f:f3:25:95:11:10:89:1b:86:22:d9:ed:ac:1d: c6:7b:58:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UNL97F0PVRzccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTAzMGZkMDUtMjJjYy00OWViLWE4YTUtNWJhMmU4NGNhZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ACRnXLp/JxNelSdTFqxb61RbzUZjsL5GKO 4DleytoOxMYfD0/bdb8vsvYvyDiUnnzwwtg8uM0SaGPqJmJZyGuqjIjw4XGzuCen tnrktFLPLwKy5UGkzt+EBqUEEfjwMraRbe2fiIH0djGie78qPAQAbEL8T8g3Nuy8 yQ8T46JEbBmXYtpzolM8OGLRpZHvolSOuaPdmenfnTtWk7vrYo+vPAb5RO3UFBpJ 5siFovIpNRnWbQHwCGS44nM0vP2fQwdTfFffwNslOlwd1hnuLVHtuX9/oUCiSryr t2ME+scwVnk9HTH3fF/XqD2r9GJEqGXd+0nYj+i5jqpeyBeI6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpEF25WRJq3g9X7gSfBTE5VzPKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvN2YwMzNhYTEtMGY2NC0z ZDM3LTg5NWItOGE0YzlhOTQ3M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+3kL7AOAtOFcVe9i6Db7ytTO5bBQJVGglh6cRu2HvKcTmrjp7D4bUo 7PIyywBosmQ5iL+2G4wQ8yLwMJnZ4dLJVVOYlViz92CkiPRbbblhoIM89/UC7ijG oAH22CzZHWkd3GZ/qQNqmjhb2LYPg3s4iaQ3+jfqVNMulpR7t7WSiZMNoHczO5Mc BsBSCLH/K6/91k3bIRXSW92E6KuI56DunSCmc776db+Jw+A9TAx63tu4nmzZy4U3 zxtwvO0BGPp6TJQn3dk/gXEX4tyNbr7mdkfOYkwD4F+FGHHpPy73B+NepKJkrrRN bBHVkHs/8yWVERCJG4Yi2e2sHcZ7WAc= -----END CERTIFICATE-----Generated at Sun Aug 24 03:55:29 2025 by rpki-client