$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4b38712d-d189-31fc-bc63-0bccffcd7422.roa File: 4b38712d-d189-31fc-bc63-0bccffcd7422.roa (raw, json) Hash identifier: K14nunGQHWs4qRDoR9SS+vz+W2YX0L+98BLCD8AKhFM= Subject key identifier: 8B:69:0F:99:50:20:88:0F:0A:99:4E:23:E3:D7:EC:89:93:6C:34:55 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584B540C9B2CA186161A069B5540 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4b38712d-d189-31fc-bc63-0bccffcd7422.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 68.71.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:9b:2c:a1:86:16:1a:06:9b:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=fd291d74-daa7-4206-b857-f13c681a8f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:27:d9:d2:96:38:37:94:a6:9f:46:80:43: 2f:2a:94:a2:66:6c:48:f4:24:20:2d:0d:c7:9a:51: 6a:26:70:f4:4a:a3:75:87:cd:48:fd:3b:5d:db:58: 23:1c:20:28:71:6f:78:71:d9:a6:d0:c2:fa:5d:9a: b1:98:a4:f8:48:ba:88:68:18:45:3f:8c:80:de:c5: 04:c7:f7:3f:ab:b7:7b:da:20:ce:3f:30:49:60:09: 79:b7:c1:b8:f5:09:60:a4:6c:20:d3:f8:d0:9f:a2: 9e:9a:e0:8c:cb:93:83:15:f0:e0:23:42:e5:c1:54: de:c0:0c:35:22:47:df:2f:a9:3d:f9:b1:de:ae:66: af:32:e1:a1:f5:07:43:ed:0a:88:94:5d:07:b9:4b: d8:e1:75:f3:da:ec:38:4a:d7:83:7d:5d:b3:23:91: de:11:3a:c7:82:9c:6f:2e:ae:81:de:2d:08:07:91: d6:73:9d:d3:73:e1:e3:c8:2a:39:47:65:d5:f1:8b: e6:ef:c0:6c:0c:97:61:23:4b:63:4e:1f:e8:ab:c6: 2b:7a:df:a1:04:b0:d2:7d:00:af:f2:bd:28:65:2a: c8:5c:43:8b:29:f5:a5:c9:cf:39:4a:f3:b3:f9:dd: b4:eb:38:bd:7c:61:f3:bd:cc:ad:8d:8d:ae:25:3a: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:69:0F:99:50:20:88:0F:0A:99:4E:23:E3:D7:EC:89:93:6C:34:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4b38712d-d189-31fc-bc63-0bccffcd7422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7e:cd:f1:ee:e9:b0:0e:0c:f6:28:7d:0d:97:da:78:60:03: c2:b9:3d:64:85:bf:eb:56:d3:c1:12:bd:92:0f:b3:48:78:33: 70:ab:1c:73:f7:e6:9b:7d:4d:10:78:3b:7a:d2:d8:36:0a:aa: 39:7a:41:03:5c:21:80:6f:f2:a5:10:a1:64:64:ce:8e:6f:71: e2:38:b3:53:06:9f:7f:57:04:79:00:a8:ef:67:be:e1:3b:b6: 38:29:a7:e3:9d:99:fc:c3:c0:dd:04:70:50:2c:6b:40:03:1e: 02:78:20:72:93:c0:c1:01:40:9d:eb:bb:4e:ca:12:86:26:50: a9:1a:c1:62:c5:83:7f:96:14:c7:11:63:aa:39:74:fa:d9:9a: f7:7b:22:35:4c:c1:ed:11:36:de:47:16:03:e6:bb:68:0e:86: 86:ec:99:2e:f2:2c:8e:1c:ea:f8:5b:ab:24:ab:02:8f:9d:20: a8:25:53:4c:cc:ee:f5:95:a8:98:d7:be:99:2d:60:ff:83:08: b9:cf:bf:87:74:db:35:05:07:2b:03:cb:c0:95:73:b8:0c:0e: 0b:3f:6d:23:70:22:a1:b0:48:58:4c:2b:05:3a:66:81:ce:5b: f1:e3:36:dd:ba:e0:7e:e1:30:52:9b:33:bd:01:aa:0a:98:ee: db:0b:b3:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJssoYYWGgabVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmQyOTFkNzQtZGFhNy00MjA2LWI4NTctZjEzYzY4MWE4Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAcn2dKWODeUpp9GgEMvKpSiZmxI9CQgLQ3H mlFqJnD0SqN1h81I/Ttd21gjHCAocW94cdmm0ML6XZqxmKT4SLqIaBhFP4yA3sUE x/c/q7d72iDOPzBJYAl5t8G49QlgpGwg0/jQn6KemuCMy5ODFfDgI0LlwVTewAw1 IkffL6k9+bHermavMuGh9QdD7QqIlF0HuUvY4XXz2uw4SteDfV2zI5HeETrHgpxv Lq6B3i0IB5HWc53Tc+HjyCo5R2XV8Yvm78BsDJdhI0tjTh/oq8Yret+hBLDSfQCv 8r0oZSrIXEOLKfWlyc85SvOz+d206zi9fGHzvcytjY2uJTqqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItpD5lQIIgPCplOI+PX7ImTbDRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNGIzODcxMmQtZDE4OS0z MWZjLWJjNjMtMGJjY2ZmY2Q3NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ+zfHu6bAODPYofQ2X2nhgA8K5PWSFv+tW08ESvZIPs0h4M3CrHHP3 5pt9TRB4O3rS2DYKqjl6QQNcIYBv8qUQoWRkzo5vceI4s1MGn39XBHkAqO9nvuE7 tjgpp+OdmfzDwN0EcFAsa0ADHgJ4IHKTwMEBQJ3ru07KEoYmUKkawWLFg3+WFMcR Y6o5dPrZmvd7IjVMwe0RNt5HFgPmu2gOhobsmS7yLI4c6vhbqySrAo+dIKglU0zM 7vWVqJjXvpktYP+DCLnPv4d02zUFBysDy8CVc7gMDgs/bSNwIqGwSFhMKwU6ZoHO W/HjNt264H7hMFKbM70BqgqY7tsLs8g= -----END CERTIFICATE-----Generated at Mon Oct 20 04:03:48 2025 by rpki-client