$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa File: 9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa (raw, json) Hash identifier: PS9U1WGvJY5Q3hOndBDo/LbiodVSo2Mes3wVKaKj8kY= Subject key identifier: CF:4B:15:1F:6C:3A:D7:13:60:0C:27:34:7B:48:1B:2F:3A:A2:66:4F Certificate issuer: /CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb Certificate serial: 010D0C9F4328584AC5AB889C03BEDDE3A04B4080 Authority key identifier: A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 68.66.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:88:9c:03:be:dd:e3:a0:4b:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=126c8d3d-fc7c-4009-8eca-1eca71e7517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:c9:5c:92:b9:ae:6e:2a:e6:ed:1e:d3:7e: 5e:e6:02:d9:92:78:5a:21:72:2e:bb:c7:c9:6e:54: 1b:ce:51:07:a1:2a:3c:77:8c:d4:3e:dc:87:66:2a: 0b:96:0a:0a:0a:06:05:8a:c3:aa:20:98:5a:86:cb: 4a:37:f4:f0:1f:07:5e:88:e6:1c:02:76:4b:94:b9: 26:2f:a8:5e:20:76:96:7a:97:9e:25:16:96:bb:14: fd:df:a0:36:1b:73:20:ed:a7:70:69:e6:2b:63:5f: 26:6f:b4:9b:20:38:42:0b:99:1f:29:9c:1f:27:53: ed:30:db:fe:a1:9b:df:03:e8:10:ef:aa:fe:e5:68: 2b:52:91:ca:f0:94:e2:ea:50:2a:3f:66:98:1b:97: 84:be:c4:e3:07:9d:f7:06:c9:12:11:91:54:75:47: 35:60:f6:f7:df:bc:4a:9d:77:b1:1e:a3:e9:32:99: 67:49:46:e1:d1:06:fe:26:a0:d9:1a:ad:75:89:28: c8:56:3a:3e:e2:63:3e:71:1d:84:df:f9:fb:35:c1: 55:bf:43:26:48:41:41:f5:53:89:98:0a:e5:c9:18: 27:d4:39:c6:4e:9b:1e:26:78:69:69:c1:a7:e2:31: 4d:ac:73:e3:b6:ad:e2:47:35:1b:3c:85:bc:97:f9: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:15:1F:6C:3A:D7:13:60:0C:27:34:7B:48:1B:2F:3A:A2:66:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl X509v3 Authority Key Identifier: keyid:A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer sbgp-ipAddrBlock: critical IPv4: 68.66.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:02:c3:5e:5b:56:0b:d4:6a:d0:f1:78:5f:1b:9a:66:4e:6f: 2d:e7:e6:59:c8:46:1e:1d:82:a0:f3:16:fe:6a:6b:3e:47:83: b5:0f:d7:64:7a:81:fa:38:61:90:42:a4:1c:91:f1:98:96:6c: 56:af:a5:16:77:0c:16:af:32:a6:2b:d9:1a:06:cb:db:f6:98: 99:eb:29:3d:14:b6:50:ad:06:f8:13:21:1e:73:8c:ea:96:14: ea:b4:4c:6a:33:db:dd:8b:ed:53:af:4a:f5:18:38:17:2d:92: 85:41:90:8f:db:63:e8:fa:33:ac:4d:e1:97:15:98:7e:4d:5e: 68:5d:0a:87:36:29:4b:c3:cb:0b:de:4d:e0:bb:40:0f:16:26: e2:c9:b4:42:44:be:89:ad:40:48:1d:23:76:20:09:e3:f2:38: 9d:ff:5c:ab:43:e3:5d:ae:f7:69:1f:10:0d:3c:60:2d:2a:4e: 4d:f2:3f:e2:96:92:4c:69:08:4b:d4:e0:88:69:3a:b6:1b:21: cb:30:66:a4:be:8c:98:3a:82:1a:85:ea:d4:f0:24:34:58:a6: 8f:9f:77:c0:b8:12:cc:56:0b:0b:4c:b8:f1:5b:58:66:db:ea: 94:f2:63:f1:36:5f:2d:11:08:f0:43:da:7d:42:6a:c2:4d:c6: 6c:e0:37:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4icA77d46BLQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM1YjMxNzgtYTYzYy00YjFjLTljM2MtMDNmN2Q5Y2M5 MGViMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTI2YzhkM2QtZmM3Yy00MDA5LThlY2EtMWVjYTcxZTc1MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOXJXJK5rm4q5u0e035e5gLZknhaIXIuu8fJ blQbzlEHoSo8d4zUPtyHZioLlgoKCgYFisOqIJhahstKN/TwHwdeiOYcAnZLlLkm L6heIHaWepeeJRaWuxT936A2G3Mg7adwaeYrY18mb7SbIDhCC5kfKZwfJ1PtMNv+ oZvfA+gQ76r+5WgrUpHK8JTi6lAqP2aYG5eEvsTjB533BskSEZFUdUc1YPb337xK nXexHqPpMplnSUbh0Qb+JqDZGq11iSjIVjo+4mM+cR2E3/n7NcFVv0MmSEFB9VOJ mArlyRgn1DnGTpseJnhpacGn4jFNrHPjtq3iRzUbPIW8l/lpAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9LFR9sOtcTYAwnNHtIGy86omZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzVi MzE3OC1hNjNjLTRiMWMtOWMzYy0wM2Y3ZDljYzkwZWIvOWE2ZDMxZjgtZDY2OS0z M2E1LWI5YzQtOTY3YmIxNGQ0YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM1YjMxNzgtYTYzYy00YjFjLTlj M2MtMDNmN2Q5Y2M5MGViLzBjNWIzMTc4LWE2M2MtNGIxYy05YzNjLTAzZjdkOWNj OTBlYi5jcmwwHwYDVR0jBBgwFoAUqBXzzPl5RuRwM6GOoSKk89ndA8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzViMzE3OC1hNjNjLTRiMWMtOWMzYy0wM2Y3 ZDljYzkwZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALECw15bVgvUatDxeF8bmmZOby3n5lnIRh4dgqDzFv5qaz5Hg7UP12R6 gfo4YZBCpByR8ZiWbFavpRZ3DBavMqYr2RoGy9v2mJnrKT0UtlCtBvgTIR5zjOqW FOq0TGoz292L7VOvSvUYOBctkoVBkI/bY+j6M6xN4ZcVmH5NXmhdCoc2KUvDywve TeC7QA8WJuLJtEJEvomtQEgdI3YgCePyOJ3/XKtD412u92kfEA08YC0qTk3yP+KW kkxpCEvU4IhpOrYbIcswZqS+jJg6ghqF6tTwJDRYpo+fd8C4EsxWCwtMuPFbWGbb 6pTyY/E2Xy0RCPBD2n1CasJNxmzgN+8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:33 2025 by rpki-client