$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa File: 720fe758-0773-30cb-9198-89fb2cfd9468.roa (raw, json) Hash identifier: stjOsu0l7s9n/ohDR6zBcFanqKFxUpu9FaLHUszabVE= Subject key identifier: 6B:64:3D:63:FF:08:D9:A9:3E:11:94:37:13:54:38:4D:51:7A:4A:6A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B56D72DA2CF674F44AF236180 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 68.64.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2d:a2:cf:67:4f:44:af:23:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=2e915534-a038-43d2-96d1-f1fb6c9c1205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f4:69:64:f7:a9:cc:7b:3d:99:4d:9e:d9:56: 62:39:0c:78:f9:88:28:d3:98:51:e7:cc:a5:8b:a3: c2:c4:ad:d8:14:92:3e:31:25:df:a4:f6:e5:83:c3: 73:3a:dc:9c:0b:e1:64:35:96:24:6b:04:0a:2d:b4: 94:42:aa:20:8d:91:ab:ec:86:64:ce:33:2d:8b:61: d7:4e:4c:16:5d:ba:a0:ff:37:a9:c0:37:4e:3c:2f: 9b:29:ff:eb:ef:87:56:bb:34:53:18:b9:8e:06:37: fc:96:24:9e:2b:30:8e:3c:ab:0f:b9:e6:40:f3:7b: 65:95:e8:21:39:f3:32:0e:db:64:63:a8:79:0f:7d: d6:97:f5:e1:e5:31:f2:35:b8:90:cb:e0:b9:7d:8d: 5a:25:a3:a6:3f:7e:34:35:ee:79:9f:c2:1d:5d:56: b4:3b:97:6a:b1:c5:9f:34:58:f3:1b:7f:8f:78:7f: 26:da:29:85:0f:f6:e3:fb:36:17:99:39:4d:50:69: a9:72:a4:39:a3:b4:02:e0:23:e0:a1:07:aa:ee:f5: 11:5a:95:5e:9d:72:5e:b1:35:86:2d:52:c6:53:56: 3a:17:de:bd:7b:ee:4c:ab:5c:b3:6e:2c:12:4e:9e: c9:2f:9b:84:d6:64:b8:a9:ff:08:eb:36:0c:4c:15: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:64:3D:63:FF:08:D9:A9:3E:11:94:37:13:54:38:4D:51:7A:4A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:51:44:94:b1:b0:23:3f:50:46:5a:68:14:64:b8:2a:68:5e: 46:ad:ed:cf:fc:01:e1:79:ec:1b:bd:22:af:4a:ff:bd:12:17: 67:92:20:48:7b:35:a0:78:e5:81:a0:13:a4:ec:bb:eb:4a:25: 0d:e5:d4:ca:16:c2:10:b6:5f:85:55:cf:0b:60:07:0a:70:e6: a7:a6:11:ed:99:cb:17:aa:d5:9c:f5:57:87:d4:02:1e:26:4b: 9f:38:1e:25:ca:6f:a6:7c:1b:f2:e4:7f:a5:d6:8b:db:e7:1e: 2d:2a:01:40:ae:c2:8b:c6:6d:4e:92:80:50:06:2c:a2:96:b3: 33:38:e3:52:c3:09:db:3c:b2:7c:22:5f:b0:0c:d1:4b:6b:35: 59:b6:09:90:21:46:a1:18:d4:24:54:df:9a:00:38:05:0a:08: c5:4f:87:cf:1b:0b:91:22:06:7e:ed:fa:4f:62:4d:e0:fa:ad: 6c:f3:37:9e:60:90:25:67:87:f8:89:c8:c9:83:50:b0:ea:cf: 4e:5e:5c:b3:1b:dd:58:95:58:5c:bf:e3:57:19:51:e4:7a:20: 78:de:bf:b8:ba:c9:ec:87:ae:cb:a5:dc:86:1f:7c:b9:a9:d0: 01:31:b3:4d:66:a3:a0:a0:6c:5e:3b:b3:5b:68:8b:5b:f8:cd: 32:20:1d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1y2iz2dPRK8jYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MmU5MTU1MzQtYTAzOC00M2QyLTk2ZDEtZjFmYjZjOWMxMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vRpZPepzHs9mU2e2VZiOQx4+Ygo05hR58yl i6PCxK3YFJI+MSXfpPblg8NzOtycC+FkNZYkawQKLbSUQqogjZGr7IZkzjMti2HX TkwWXbqg/zepwDdOPC+bKf/r74dWuzRTGLmOBjf8liSeKzCOPKsPueZA83tllegh OfMyDttkY6h5D33Wl/Xh5THyNbiQy+C5fY1aJaOmP340Ne55n8IdXVa0O5dqscWf NFjzG3+PeH8m2imFD/bj+zYXmTlNUGmpcqQ5o7QC4CPgoQeq7vURWpVenXJesTWG LVLGU1Y6F969e+5Mq1yzbiwSTp7JL5uE1mS4qf8I6zYMTBXmdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtkPWP/CNmpPhGUNxNUOE1RekpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzIwZmU3NTgtMDc3My0z MGNiLTkxOTgtODlmYjJjZmQ5NDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItRRJSxsCM/UEZaaBRkuCpoXkat7c/8AeF57Bu9Iq9K/70SF2eSIEh7 NaB45YGgE6Tsu+tKJQ3l1MoWwhC2X4VVzwtgBwpw5qemEe2Zyxeq1Zz1V4fUAh4m S584HiXKb6Z8G/Lkf6XWi9vnHi0qAUCuwovGbU6SgFAGLKKWszM441LDCds8snwi X7AM0UtrNVm2CZAhRqEY1CRU35oAOAUKCMVPh88bC5EiBn7t+k9iTeD6rWzzN55g kCVnh/iJyMmDULDqz05eXLMb3ViVWFy/41cZUeR6IHjev7i6yeyHrsul3IYffLmp 0AExs01mo6CgbF47s1toi1v4zTIgHew= -----END CERTIFICATE-----Generated at Mon Oct 20 10:52:10 2025 by rpki-client