$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a4b2c529-df23-3728-8d97-31dd3e788678.roa File: a4b2c529-df23-3728-8d97-31dd3e788678.roa (raw, json) Hash identifier: pR25pRSAh4881DtEuvYT5W8njrK3vLc2ZmF9PnWGUzA= Subject key identifier: 43:A7:6D:98:CA:08:7E:CA:78:42:87:08:25:73:A5:CC:F6:9C:34:7A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B5141BE64EEC9B0F0C85A1C40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a4b2c529-df23-3728-8d97-31dd3e788678.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 68.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:be:64:ee:c9:b0:f0:c8:5a:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=8d976a8b-981d-45db-a1ca-c964ce7475ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:fc:cc:49:9d:18:3a:2d:88:6f:03:76:cb: 57:60:af:c6:e9:2d:45:99:ed:a0:60:03:a3:c0:83: 62:45:b6:ec:12:2d:c2:f3:1f:1f:da:af:ca:0f:67: 27:e9:72:ff:5d:12:2a:55:fe:64:d0:b1:5c:ba:3f: a1:9b:36:6a:b7:52:72:63:c4:b9:d2:d8:ba:50:89: 9c:88:26:22:b0:b8:7f:0c:18:c1:01:93:91:92:37: c4:7d:67:e3:df:3a:b7:2a:39:28:51:2f:85:46:70: 7d:b6:d5:13:d2:a3:50:23:25:86:83:02:d9:04:61: dc:02:c4:b0:78:ba:54:39:f1:eb:ae:b0:69:c5:94: 8a:22:55:ba:fd:50:e0:53:39:97:d3:f5:a4:04:f1: 7b:9f:23:f3:ee:9b:8d:7d:e5:ab:53:6c:3d:c5:12: f3:0b:c3:41:8c:49:c6:a3:eb:96:be:33:ee:d7:4e: f6:ec:3b:8f:38:67:18:2c:fe:a9:99:69:d0:bb:7c: a4:dc:e2:62:5d:52:4f:fe:cc:75:8f:1b:52:29:67: c0:47:ca:6e:e2:c5:9e:54:be:64:5f:73:4d:d4:57: 48:d2:d5:35:3e:0a:51:55:96:4e:97:3e:6e:8e:62: 40:f2:a2:a8:7b:0b:4e:1c:05:63:9b:08:46:41:8e: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A7:6D:98:CA:08:7E:CA:78:42:87:08:25:73:A5:CC:F6:9C:34:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a4b2c529-df23-3728-8d97-31dd3e788678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:f7:2e:d4:ca:2d:d1:c0:23:b0:44:87:2e:75:b3:65:30:27: a9:83:83:7e:74:0e:c8:57:fc:48:22:cf:4e:6c:78:1f:7c:a9: f5:b8:34:80:02:e4:ad:15:30:1c:f7:9f:17:e0:18:0b:c2:87: 34:18:8f:49:cf:63:d8:2e:46:68:26:c8:13:8b:63:e7:a6:e0: 6b:0b:c5:52:f5:d3:15:0c:c2:0a:ac:29:8c:14:13:3d:43:6f: e9:e3:66:11:08:1f:d1:9e:8d:6e:bd:39:25:39:f4:ae:2a:0b: aa:1f:ec:79:a3:6c:fc:14:17:8c:b7:14:96:36:8c:20:d1:71: 9a:c6:50:57:70:e2:09:9c:7a:44:f2:79:46:de:08:49:bb:4d: 10:e2:20:46:06:d8:94:f7:dc:90:2d:63:c8:68:1f:ee:21:b6: 58:39:e2:ff:cd:78:77:97:f4:6b:06:60:19:d2:8a:57:8d:9d: 35:72:bb:89:c0:c5:84:6a:e9:08:af:b4:e0:58:65:84:60:79: 0b:71:db:bc:9b:a9:ad:16:1f:97:a9:7a:ca:61:b9:98:e1:64: c0:5d:3d:53:30:37:b1:cd:e2:79:72:62:69:97:0c:7f:a8:db: 96:b1:b2:58:79:16:69:d9:f3:b1:dc:15:78:a8:04:43:f0:74: 60:64:0f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQb5k7smw8MhaHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk OGQ5NzZhOGItOTgxZC00NWRiLWExY2EtYzk2NGNlNzQ3NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2P8zEmdGDotiG8DdstXYK/G6S1Fme2gYAOj wINiRbbsEi3C8x8f2q/KD2cn6XL/XRIqVf5k0LFcuj+hmzZqt1JyY8S50ti6UImc iCYisLh/DBjBAZORkjfEfWfj3zq3KjkoUS+FRnB9ttUT0qNQIyWGgwLZBGHcAsSw eLpUOfHrrrBpxZSKIlW6/VDgUzmX0/WkBPF7nyPz7puNfeWrU2w9xRLzC8NBjEnG o+uWvjPu10727DuPOGcYLP6pmWnQu3yk3OJiXVJP/sx1jxtSKWfAR8pu4sWeVL5k X3NN1FdI0tU1PgpRVZZOlz5ujmJA8qKoewtOHAVjmwhGQY5uwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOnbZjKCH7KeEKHCCVzpcz2nDR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTRiMmM1MjktZGYyMy0z NzI4LThkOTctMzFkZDNlNzg4Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL33LtTKLdHAI7BEhy51s2UwJ6mDg350DshX/Egiz05seB98qfW4NIAC 5K0VMBz3nxfgGAvChzQYj0nPY9guRmgmyBOLY+em4GsLxVL10xUMwgqsKYwUEz1D b+njZhEIH9GejW69OSU59K4qC6of7HmjbPwUF4y3FJY2jCDRcZrGUFdw4gmcekTy eUbeCEm7TRDiIEYG2JT33JAtY8hoH+4htlg54v/NeHeX9GsGYBnSileNnTVyu4nA xYRq6QivtOBYZYRgeQtx27ybqa0WH5epesphuZjhZMBdPVMwN7HN4nlyYmmXDH+o 25axslh5FmnZ87HcFXioBEPwdGBkD4c= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:23 2025 by rpki-client