$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa File: 3af553af-3e25-340a-8320-484a9fc606f9.roa (raw, json) Hash identifier: Qa7bfva+pPXFjY0B78h1Qdu+xUovIOYlOkpbxIFf0Aw= Subject key identifier: CD:28:9A:C6:95:CC:F3:B8:3E:23:00:4C:D9:55:0E:46:26:AF:6A:08 Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584AEE2683926E1FAC30704F2E80 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 37277 IP address blocks: 68.142.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:83:92:6e:1f:ac:30:70:4f:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=137bc66a-6d63-4678-9741-2772079aeaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:da:86:e2:6a:3c:bb:13:74:62:41:dc:15: 9f:b4:1a:6b:d8:0f:0e:48:46:9f:09:67:79:4b:2c: 4a:0c:e6:2b:c4:6a:a1:89:e1:2c:25:db:6c:02:84: a6:eb:62:04:bf:4e:87:8a:aa:9d:fa:4c:82:77:54: 50:fb:a3:bd:57:f8:38:c5:39:5a:2c:46:41:ba:09: ee:49:d1:88:97:3b:74:ff:e8:58:66:94:61:cb:71: 6a:95:21:3c:72:39:08:1b:ba:8e:07:3b:2f:0c:c9: ef:67:23:17:71:88:4a:84:90:c3:67:76:2a:54:b0: 9b:ff:b4:27:d5:94:20:67:79:9c:7a:c5:ea:ff:69: c7:97:ad:92:0b:86:d1:1d:37:d3:c3:4d:ad:18:56: f2:e5:6a:21:26:8d:5e:91:46:a2:fd:db:7d:9e:ef: 68:ad:1e:ee:a7:fd:9d:5b:57:e0:81:48:90:98:e3: df:2e:b8:3a:79:39:a3:cb:f5:ec:c3:1e:eb:df:47: b6:b0:3b:47:71:77:70:03:1a:c4:fc:89:b0:c2:0b: 74:13:54:e9:42:97:8d:ae:c1:83:5e:92:82:10:aa: 33:de:72:eb:11:c2:03:87:de:78:5d:b3:a6:66:a3: 43:d2:aa:1d:9f:0e:d9:8e:3d:59:b0:68:b5:ee:8f: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:9A:C6:95:CC:F3:B8:3E:23:00:4C:D9:55:0E:46:26:AF:6A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 68.142.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f0:75:90:7b:57:ec:e5:ad:3e:d5:b2:08:9a:bb:ca:d0:a2: 6c:ed:e7:e3:b9:5c:f5:67:36:67:74:84:54:8d:4d:61:c8:b2: 90:be:07:51:1d:c8:06:dd:84:e7:ee:47:ca:f3:ed:1d:f2:2d: 85:2f:d2:71:c3:03:d3:aa:8c:37:23:e7:dd:f5:fc:34:87:e8: de:40:84:fe:fc:57:3f:b1:a7:ee:9c:e0:d4:46:6a:f2:ab:5b: 1b:31:b3:e9:ec:a4:1f:92:93:8f:c1:a9:57:ed:50:62:75:a5: c2:eb:11:0c:29:78:dc:9d:f4:e2:bc:95:5f:9a:63:d3:03:c8: 23:fa:ff:a7:a5:34:a3:20:bf:b7:1a:9a:6d:01:5d:bf:53:55: a0:5a:9f:6c:ad:11:0a:ff:f3:14:f9:36:4e:1c:a1:b0:66:3f: 8d:0f:63:91:4f:1d:f8:81:d8:94:d5:ff:72:34:1a:61:f0:43: 42:fa:79:cf:a4:24:f8:d5:d2:b9:d0:3f:31:8b:ee:23:d1:8d: f4:0a:20:05:c3:bd:22:03:89:30:36:02:d8:29:36:14:f1:89: 36:a0:ef:d2:ef:f4:45:4f:91:f4:36:8c:b9:8b:c5:f1:b9:00: 04:c5:d1:a4:67:f9:ff:04:ab:4f:e7:40:a8:4a:71:2e:1f:b8: db:d6:0c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoOSbh+sMHBPLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk MTM3YmM2NmEtNmQ2My00Njc4LTk3NDEtMjc3MjA3OWFlYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc3ahuJqPLsTdGJB3BWftBpr2A8OSEafCWd5 SyxKDOYrxGqhieEsJdtsAoSm62IEv06Hiqqd+kyCd1RQ+6O9V/g4xTlaLEZBugnu SdGIlzt0/+hYZpRhy3FqlSE8cjkIG7qOBzsvDMnvZyMXcYhKhJDDZ3YqVLCb/7Qn 1ZQgZ3mcesXq/2nHl62SC4bRHTfTw02tGFby5WohJo1ekUai/dt9nu9orR7up/2d W1fggUiQmOPfLrg6eTmjy/Xswx7r30e2sDtHcXdwAxrE/Imwwgt0E1TpQpeNrsGD XpKCEKoz3nLrEcIDh954XbOmZqND0qodnw7Zjj1ZsGi17o+s/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0omsaVzPO4PiMATNlVDkYmr2oIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvM2FmNTUzYWYtM2UyNS0z NDBhLTgzMjAtNDg0YTlmYzYwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRI5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTwdZB7V+zlrT7Vsgiau8rQomzt5+O5XPVnNmd0hFSNTWHIspC+B1Ed yAbdhOfuR8rz7R3yLYUv0nHDA9OqjDcj5931/DSH6N5AhP78Vz+xp+6c4NRGavKr Wxsxs+nspB+Sk4/BqVftUGJ1pcLrEQwpeNyd9OK8lV+aY9MDyCP6/6elNKMgv7ca mm0BXb9TVaBan2ytEQr/8xT5Nk4cobBmP40PY5FPHfiB2JTV/3I0GmHwQ0L6ec+k JPjV0rnQPzGL7iPRjfQKIAXDvSIDiTA2AtgpNhTxiTag79Lv9EVPkfQ2jLmLxfG5 AATF0aRn+f8Eq0/nQKhKcS4fuNvWDOw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:21 2025 by rpki-client