$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d18a79e9-12b4-3790-b0c0-fb07074880a9.roa File: d18a79e9-12b4-3790-b0c0-fb07074880a9.roa (raw, json) Hash identifier: /gTg7RI4VFsK4tkVPVMIWHfI2xaBFT5A6xi3kxVyRRM= Subject key identifier: 1B:85:D1:3C:5A:74:A0:95:F2:17:96:A1:9D:5B:AE:7C:2E:BD:22:40 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584B3AEC551302E25BF0BE659520 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d18a79e9-12b4-3790-b0c0-fb07074880a9.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 139659 IP address blocks: 68.64.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:55:13:02:e2:5b:f0:be:65:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=5e26efdc-f291-4dd3-b65e-d770797c7bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:2d:b8:0e:a3:c4:02:ad:78:30:5e:71:ac: c5:01:c1:5b:df:df:50:83:68:33:54:bf:ef:a5:d4: d1:33:98:1e:fe:44:4b:fe:22:c0:f9:88:2f:88:c8: 5a:d3:b0:01:a9:4e:a6:01:30:94:3d:ab:ad:24:91: 51:a1:b2:85:ab:9d:cb:ac:30:fc:98:20:b7:25:1d: 20:98:7c:3d:a1:ea:75:c3:4d:64:a6:84:36:2f:5c: a4:b6:ca:3a:b8:e4:85:ad:76:c5:ae:09:41:05:48: 9b:b5:80:a4:55:a7:99:4f:71:78:35:e5:50:c1:db: dc:f2:d4:fd:fd:f6:46:7c:4b:a4:c4:13:73:c1:a3: 8a:ee:cd:82:f1:10:47:cd:a7:ca:42:ca:12:60:92: 98:f5:07:68:cb:59:56:7f:78:29:c6:e9:74:a8:93: 9c:16:9b:f7:2e:c3:a8:f0:8d:5a:5a:f4:b8:3c:b3: 22:21:8b:8c:0d:9e:5d:a2:38:51:52:01:e2:c6:11: f3:a2:58:2a:e5:75:56:ee:e8:35:55:b4:93:37:10: db:12:22:c5:57:95:32:d1:d0:98:93:7f:8c:a5:a8: 6e:3d:d8:81:fe:76:c0:80:17:78:43:e4:23:61:14: 6c:cf:56:a4:84:7a:3e:db:02:6f:30:09:0e:5b:40: be:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:85:D1:3C:5A:74:A0:95:F2:17:96:A1:9D:5B:AE:7C:2E:BD:22:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d18a79e9-12b4-3790-b0c0-fb07074880a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 68.64.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a5:96:f8:ed:f8:68:43:cd:64:51:7c:de:e7:14:7f:6e:19: b2:53:30:67:07:9a:87:d2:c6:2a:de:f8:7a:4b:01:2c:e6:64: ac:68:36:e3:55:f3:ad:9c:36:bc:91:fa:97:dc:b5:11:d8:72: 79:e9:e5:2d:bf:d9:0f:68:d1:03:69:81:1e:6b:2b:a8:8c:70: 3a:0a:31:df:e4:1d:36:b1:92:e3:40:23:46:58:29:c2:8f:c6: 24:1d:30:5a:8b:05:83:2b:84:b3:d5:14:1f:1f:87:a0:e0:83: cd:ff:ce:89:28:ab:ae:0d:a0:4e:97:21:76:8b:60:6d:47:ce: a0:73:01:16:fc:39:02:60:09:4c:72:a0:97:af:f7:06:bb:d1: 0a:fe:8b:58:3f:83:94:bb:ce:d8:3a:65:0d:c0:6c:e9:52:c2: 36:61:b7:a1:3a:5b:35:e8:ed:26:e6:a5:e2:c8:43:c3:e7:e6: 10:80:bb:08:a0:f4:e8:a6:ba:2e:e7:a9:37:5a:ff:4b:db:18: 93:52:bd:aa:bc:48:12:27:a2:cc:3f:c6:fe:ad:cf:56:62:0f: de:07:0d:c0:ed:e7:86:aa:d9:89:5b:c5:09:05:72:a5:b9:59: 67:b7:a3:02:3a:ee:58:87:a0:35:10:79:de:93:8b:02:a0:5e: 25:e9:16:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67FUTAuJb8L5llSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk NWUyNmVmZGMtZjI5MS00ZGQzLWI2NWUtZDc3MDc5N2M3YmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+4tuA6jxAKteDBecazFAcFb399Qg2gzVL/v pdTRM5ge/kRL/iLA+YgviMha07ABqU6mATCUPautJJFRobKFq53LrDD8mCC3JR0g mHw9oep1w01kpoQ2L1yktso6uOSFrXbFrglBBUibtYCkVaeZT3F4NeVQwdvc8tT9 /fZGfEukxBNzwaOK7s2C8RBHzafKQsoSYJKY9Qdoy1lWf3gpxul0qJOcFpv3LsOo 8I1aWvS4PLMiIYuMDZ5dojhRUgHixhHzolgq5XVW7ug1VbSTNxDbEiLFV5Uy0dCY k3+MpahuPdiB/nbAgBd4Q+QjYRRsz1akhHo+2wJvMAkOW0C+EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuF0TxadKCV8heWoZ1brnwuvSJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZDE4YTc5ZTktMTJiNC0z NzkwLWIwYzAtZmIwNzA3NDg4MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRECwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqllvjt+GhDzWRRfN7nFH9uGbJTMGcHmofSxire+HpLASzmZKxoNuNV 862cNryR+pfctRHYcnnp5S2/2Q9o0QNpgR5rK6iMcDoKMd/kHTaxkuNAI0ZYKcKP xiQdMFqLBYMrhLPVFB8fh6Dgg83/zokoq64NoE6XIXaLYG1HzqBzARb8OQJgCUxy oJev9wa70Qr+i1g/g5S7ztg6ZQ3AbOlSwjZht6E6WzXo7SbmpeLIQ8Pn5hCAuwig 9Oimui7nqTda/0vbGJNSvaq8SBInosw/xv6tz1ZiD94HDcDt54aq2YlbxQkFcqW5 WWe3owI67liHoDUQed6TiwKgXiXpFvY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:18 2025 by rpki-client