$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa File: dfaa2688-c8ee-3021-915c-efda099beed5.roa (raw, json) Hash identifier: 3oGHUVtb1BkLkZ5VNge0+Yk/K+oVlXIFTrYxvVugfaQ= Subject key identifier: 11:79:D0:0B:36:68:B5:91:FC:08:3E:91:14:C6:46:B2:62:6A:7A:46 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B76F22781E0018F69BAABDB40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 31898 IP address blocks: 68.64.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:27:81:e0:01:8f:69:ba:ab:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=cba9f67f-009f-41af-bcdb-4d4b2a83bf0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:3c:e6:c0:cf:53:e1:65:36:5a:4d:ad:c6: ae:48:de:4d:15:86:44:5e:63:2e:f0:56:d8:0f:0f: 15:34:d5:1c:62:42:d0:50:cd:c7:7e:94:af:81:ae: f4:38:e5:ea:ee:53:da:e7:3c:33:d8:cb:d6:63:5b: d9:c4:30:b9:3d:db:f3:26:0d:f6:8b:a0:37:8f:18: cd:61:19:fe:50:45:cd:9e:46:0e:07:b2:33:f9:ab: 42:5b:b6:79:1b:2d:61:5a:e6:4c:d7:9d:99:77:70: 30:be:b3:9f:cb:20:99:83:90:16:22:7a:90:43:6c: 25:2b:71:eb:bd:1b:5b:f0:82:d8:40:45:f1:cc:e7: 79:d8:72:3a:1d:1f:43:6b:6f:79:ef:a4:67:57:32: cc:89:8d:8a:06:2a:e7:a1:76:bd:e3:29:36:ec:84: 00:87:41:4d:6b:31:7f:db:7c:3a:8f:8d:7b:eb:6d: 99:d0:30:d6:2e:a5:43:4e:0e:27:a6:1e:05:08:0d: ad:f2:1a:42:e9:af:86:a1:78:c1:c0:f7:ea:76:bc: c8:94:7a:d3:9b:f4:8f:a1:3d:48:bd:b9:46:e1:34: 38:d8:94:55:00:aa:2c:24:48:72:c3:6c:15:ef:d1: 1e:9e:eb:62:b0:3f:23:ef:f9:de:0c:e4:d9:32:15: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:D0:0B:36:68:B5:91:FC:08:3E:91:14:C6:46:B2:62:6A:7A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:8e:a6:b3:28:de:96:8e:dd:68:1d:f5:b2:97:a7:f0:75:1a: 9f:33:6a:08:4d:4e:86:2e:ce:03:01:00:e4:52:8a:2f:4d:fd: c4:81:91:44:76:27:d4:5a:1e:16:8a:22:ef:1b:6c:b8:53:b3: ae:db:60:88:b5:e6:71:4d:6f:e8:06:a0:71:bf:f3:22:e5:78: 6c:03:ef:52:73:6b:d5:e7:8f:aa:4e:50:5e:81:f2:9e:52:0f: 76:10:10:a8:60:ae:db:53:25:d4:c7:8b:66:30:da:f2:e0:09: 2f:d6:1b:d3:79:4e:5a:be:13:80:ab:dd:3e:ce:84:f0:ee:56: bc:56:1b:64:02:dd:79:a9:78:3d:9c:b1:bf:df:7e:a4:30:6f: 44:87:77:a6:c8:e8:fe:09:d3:db:10:0b:3d:02:5d:c9:35:b4: cf:99:8a:15:43:e7:d6:df:43:a4:e9:b6:69:1d:e9:db:82:e0: 97:b5:f9:47:f1:67:ef:42:14:05:2a:06:d0:cf:19:46:de:50: 8b:ef:c0:f7:9c:1d:de:9b:0c:5a:b2:9c:37:42:75:98:2b:e3: 00:e4:c4:5c:f7:9f:0b:d3:39:c7:bd:9a:93:1b:a8:31:8d:8d: e5:95:aa:a2:48:50:6a:5a:c8:f7:e6:fa:79:89:f2:fb:87:96: 2b:78:f9:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ieB4AGPabqr20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2JhOWY2N2YtMDA5Zi00MWFmLWJjZGItNGQ0YjJhODNiZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTE85sDPU+FlNlpNrcauSN5NFYZEXmMu8FbY Dw8VNNUcYkLQUM3HfpSvga70OOXq7lPa5zwz2MvWY1vZxDC5PdvzJg32i6A3jxjN YRn+UEXNnkYOB7Iz+atCW7Z5Gy1hWuZM152Zd3AwvrOfyyCZg5AWInqQQ2wlK3Hr vRtb8ILYQEXxzOd52HI6HR9Da29576RnVzLMiY2KBirnoXa94yk27IQAh0FNazF/ 23w6j417622Z0DDWLqVDTg4nph4FCA2t8hpC6a+GoXjBwPfqdrzIlHrTm/SPoT1I vblG4TQ42JRVAKosJEhyw2wV79EenutisD8j7/neDOTZMhUfiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF50As2aLWR/Ag+kRTGRrJianpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGZhYTI2ODgtYzhlZS0z MDIxLTkxNWMtZWZkYTA5OWJlZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISOprMo3paO3Wgd9bKXp/B1Gp8zaghNToYuzgMBAORSii9N/cSBkUR2 J9RaHhaKIu8bbLhTs67bYIi15nFNb+gGoHG/8yLleGwD71Jza9Xnj6pOUF6B8p5S D3YQEKhgrttTJdTHi2Yw2vLgCS/WG9N5Tlq+E4Cr3T7OhPDuVrxWG2QC3XmpeD2c sb/ffqQwb0SHd6bI6P4J09sQCz0CXck1tM+ZihVD59bfQ6Tptmkd6duC4Je1+Ufx Z+9CFAUqBtDPGUbeUIvvwPecHd6bDFqynDdCdZgr4wDkxFz3nwvTOce9mpMbqDGN jeWVqqJIUGpayPfm+nmJ8vuHlit4+Ro= -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:25 2025 by rpki-client