$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa File: 6de1fbab-8ba5-3ece-969d-b6be65026f84.roa (raw, json) Hash identifier: FcvtNsIKZh7zpp1SDI+EtKNlPGgu/8KeCVdNp0ZVGXE= Subject key identifier: 70:A4:6E:0E:D9:54:53:33:04:1B:0B:2C:3E:D4:63:35:27:FB:C3:77 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B56D72DE091E94952AD2286C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 68.64.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2d:e0:91:e9:49:52:ad:22:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=bc04330e-6d9a-419b-ba2b-9af7967d05d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:a2:ac:d5:00:e5:38:92:f6:53:a7:1f:ef: d0:5c:d7:c9:eb:47:44:c7:23:15:c7:b5:b6:16:f8: f1:8c:8e:75:88:f4:8a:9e:81:c7:26:a5:6f:cf:97: a1:16:ee:d7:5a:19:e2:87:28:46:46:82:88:45:5c: f5:a6:f6:a1:4b:bc:fb:bc:b9:0d:f1:00:02:54:51: f3:95:c4:72:f7:e8:06:58:7c:d2:86:d2:80:1e:ac: 7c:ee:60:cb:e2:8c:17:54:d2:8f:ba:73:1d:7e:95: d3:bc:1b:00:da:c1:14:96:9f:bd:66:d8:8c:b5:d7: ac:34:e8:a1:6f:81:35:b1:c2:7b:bd:08:b0:b2:fa: 95:18:8e:3e:75:13:76:eb:4a:43:53:69:44:98:83: b3:56:c4:b0:d0:35:a3:4e:37:f4:a6:7a:bf:c1:d7: 8d:0b:11:93:9a:65:ea:3d:49:f1:2c:ce:7f:42:29: 3e:ac:30:fd:5e:d1:c0:fd:19:c7:b1:7f:b7:9f:a9: 9d:51:5c:df:05:3e:56:c0:9e:48:34:b1:f4:fb:c5: 0a:c3:63:c9:da:24:42:3e:62:39:a3:25:fd:85:8b: 46:8b:b9:1d:83:b9:42:fa:e8:45:93:f4:1e:96:20: 31:f6:28:8a:60:e9:3c:2e:6f:69:d9:a2:75:e1:af: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:6E:0E:D9:54:53:33:04:1B:0B:2C:3E:D4:63:35:27:FB:C3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:62:01:17:1a:41:f7:13:64:00:a9:57:6e:c1:23:74:ba:0e: 91:fe:7f:1b:e2:7e:4c:8f:37:a0:06:5b:51:01:b1:c4:70:61: 0a:d6:72:5f:28:ff:37:ee:b5:8f:97:b3:09:5c:46:d3:81:89: 1d:0e:48:b8:c4:be:cb:42:35:b8:66:10:bb:c1:45:d8:39:34: 12:91:1b:7c:c2:84:f3:5a:41:6e:e2:cf:62:6e:53:f6:f0:cc: 07:6f:93:74:d2:3b:da:a0:82:ce:55:50:ec:b3:f5:1e:fd:d8: 22:06:a0:c8:a9:88:54:75:03:4d:7b:20:13:9b:c0:d8:1b:7d: 1a:de:ba:59:a0:46:e4:93:cd:e8:38:7c:71:c7:5f:74:2e:e2: a2:1f:72:2b:48:92:b1:bf:61:75:aa:78:4a:8f:d5:84:35:0e: 0c:4f:4b:96:47:f0:74:25:32:14:75:0d:78:b9:92:9b:51:e8: 79:dd:4b:57:6c:ad:fd:02:a9:a1:3c:98:a7:9d:c7:21:a7:9b: 35:44:61:9b:66:ef:1b:fd:ee:26:8f:f1:3e:a9:9b:7a:0a:63: bf:0c:bd:1c:64:0e:d9:57:20:10:60:a5:02:0b:36:24:98:81: f5:3e:3f:3c:f1:18:0c:a9:52:5f:ab:cf:ba:9e:45:ea:3a:83: 0e:dc:17:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1y3gkelJUq0ihsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YmMwNDMzMGUtNmQ5YS00MTliLWJhMmItOWFmNzk2N2QwNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AiirNUA5TiS9lOnH+/QXNfJ60dExyMVx7W2 FvjxjI51iPSKnoHHJqVvz5ehFu7XWhnihyhGRoKIRVz1pvahS7z7vLkN8QACVFHz lcRy9+gGWHzShtKAHqx87mDL4owXVNKPunMdfpXTvBsA2sEUlp+9ZtiMtdesNOih b4E1scJ7vQiwsvqVGI4+dRN260pDU2lEmIOzVsSw0DWjTjf0pnq/wdeNCxGTmmXq PUnxLM5/Qik+rDD9XtHA/RnHsX+3n6mdUVzfBT5WwJ5INLH0+8UKw2PJ2iRCPmI5 oyX9hYtGi7kdg7lC+uhFk/QeliAx9iiKYOk8Lm9p2aJ14a/SpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCkbg7ZVFMzBBsLLD7UYzUn+8N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmRlMWZiYWItOGJhNS0z ZWNlLTk2OWQtYjZiZTY1MDI2Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9iARcaQfcTZACpV27BI3S6DpH+fxvifkyPN6AGW1EBscRwYQrWcl8o /zfutY+XswlcRtOBiR0OSLjEvstCNbhmELvBRdg5NBKRG3zChPNaQW7iz2JuU/bw zAdvk3TSO9qggs5VUOyz9R792CIGoMipiFR1A017IBObwNgbfRreulmgRuSTzeg4 fHHHX3Qu4qIfcitIkrG/YXWqeEqP1YQ1DgxPS5ZH8HQlMhR1DXi5kptR6HndS1ds rf0CqaE8mKedxyGnmzVEYZtm7xv97iaP8T6pm3oKY78MvRxkDtlXIBBgpQILNiSY gfU+PzzxGAypUl+rz7qeReo6gw7cF9I= -----END CERTIFICATE-----Generated at Sun Oct 19 23:24:22 2025 by rpki-client