$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c425b361-c222-39cc-883e-88fa2a133140.roa File: c425b361-c222-39cc-883e-88fa2a133140.roa (raw, json) Hash identifier: QHimk6QOHbUUKJhjBkP7j9T9baLieHNTI9n5dikvkS8= Subject key identifier: 21:D8:CC:76:00:60:5C:44:71:7A:B0:AD:5B:D6:E0:D9:39:6F:54:B7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A7E7BA070A1F2EBB25017EA80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c425b361-c222-39cc-883e-88fa2a133140.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 3257 IP address blocks: 68.68.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:a0:70:a1:f2:eb:b2:50:17:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=bb316fd2-85af-46ab-85c8-9a9a83f1af5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:70:c2:be:05:f6:69:1c:71:7f:24:a0:e7: b1:eb:44:a8:fe:6a:c4:75:2e:25:44:6f:51:c2:39: fd:d5:90:be:8c:21:29:a0:da:6b:e5:48:26:43:20: e9:4d:09:27:1f:2c:8c:30:ab:4a:bb:91:99:e5:2c: 9f:26:d8:8e:fa:06:e3:29:69:bd:f5:19:54:d5:46: 88:29:c8:45:c5:61:d3:0d:b5:33:5b:e7:1c:a1:31: 80:ec:d7:e1:81:c8:46:3a:12:25:ea:67:bc:2c:c6: 71:a8:ba:80:73:2b:ee:2a:a3:04:b3:f2:e9:bd:ed: ed:f5:2c:77:a7:44:0b:3b:1b:91:2c:8c:9c:79:d7: fb:02:07:1d:d1:88:b5:4f:0c:27:55:64:53:aa:2a: 82:30:c6:f7:e3:b4:12:27:7a:0e:b8:53:fc:2c:cc: 15:22:82:94:ae:0c:59:bd:81:4a:5d:a0:e1:0b:dc: 32:10:d6:0e:1c:97:71:46:7a:02:28:3d:10:46:18: 25:39:9e:6a:20:b4:58:a2:88:29:14:73:d7:c4:6a: d3:e7:41:6e:66:ed:ae:2d:a9:c7:bc:0a:9e:ac:b0: e2:d5:97:e7:bb:95:b6:61:cb:ce:72:f5:69:e8:0e: b4:3b:2f:9a:df:3f:86:f9:1c:fe:fb:40:91:c1:e9: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D8:CC:76:00:60:5C:44:71:7A:B0:AD:5B:D6:E0:D9:39:6F:54:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c425b361-c222-39cc-883e-88fa2a133140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 68.68.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:25:a0:66:f1:cd:e3:c1:5c:a5:27:9f:d5:00:d0:4b:58:dc: 14:11:56:01:cb:85:e6:7f:99:c2:3c:16:99:3e:cc:06:38:77: 35:71:2a:2e:6d:dd:38:39:3f:f9:cb:f7:ea:0c:af:b4:6d:fb: 36:45:c4:73:21:5e:79:84:42:ba:99:44:43:d0:f9:54:b1:8b: 23:f6:59:83:93:47:9a:73:6b:2b:4e:26:b3:b4:d6:d5:ec:e5: 2d:8e:79:52:bb:e5:bc:2d:8f:c3:fe:10:29:b4:c3:15:c1:c0: 4f:59:af:0b:ac:e9:fb:36:64:c2:cf:8b:32:9e:29:0b:75:6c: c9:91:ee:34:fb:4b:48:00:e9:67:39:1d:6c:3e:5d:40:c6:a9: cd:bb:de:e0:d4:0e:80:ff:ba:21:1d:79:eb:fc:09:1e:e8:cc: 83:59:d0:ef:00:68:ae:b1:c2:db:72:bc:34:79:39:20:8e:1c: 8d:bd:11:ce:0b:a9:de:8e:eb:ec:8f:bf:25:06:81:32:17:9f: 2f:dd:7b:25:29:1b:73:08:53:49:b2:09:cb:bd:6a:00:ab:07: 31:c2:16:80:67:57:bb:39:2a:86:d8:5e:85:41:8d:6a:9e:99: 33:12:7b:7a:31:cd:09:c4:f4:f9:f6:eb:55:df:86:0a:b1:b6: 2c:f5:23:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e6BwofLrslAX6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YmIzMTZmZDItODVhZi00NmFiLTg1YzgtOWE5YTgzZjFhZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyVwwr4F9mkccX8koOex60So/mrEdS4lRG9R wjn91ZC+jCEpoNpr5UgmQyDpTQknHyyMMKtKu5GZ5SyfJtiO+gbjKWm99RlU1UaI KchFxWHTDbUzW+ccoTGA7NfhgchGOhIl6me8LMZxqLqAcyvuKqMEs/Lpve3t9Sx3 p0QLOxuRLIycedf7Agcd0Yi1TwwnVWRTqiqCMMb347QSJ3oOuFP8LMwVIoKUrgxZ vYFKXaDhC9wyENYOHJdxRnoCKD0QRhglOZ5qILRYoogpFHPXxGrT50FuZu2uLanH vAqerLDi1Zfnu5W2YcvOcvVp6A60Oy+a3z+G+Rz++0CRwekWDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHYzHYAYFxEcXqwrVvW4Nk5b1S3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzQyNWIzNjEtYzIyMi0z OWNjLTg4M2UtODhmYTJhMTMzMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIloGbxzePBXKUnn9UA0EtY3BQRVgHLheZ/mcI8Fpk+zAY4dzVxKi5t 3Tg5P/nL9+oMr7Rt+zZFxHMhXnmEQrqZREPQ+VSxiyP2WYOTR5pzaytOJrO01tXs 5S2OeVK75bwtj8P+ECm0wxXBwE9Zrwus6fs2ZMLPizKeKQt1bMmR7jT7S0gA6Wc5 HWw+XUDGqc273uDUDoD/uiEdeev8CR7ozINZ0O8AaK6xwttyvDR5OSCOHI29Ec4L qd6O6+yPvyUGgTIXny/deyUpG3MIU0myCcu9agCrBzHCFoBnV7s5KobYXoVBjWqe mTMSe3oxzQnE9Pn261Xfhgqxtiz1I7k= -----END CERTIFICATE-----Generated at Mon Aug 4 08:31:46 2025 by rpki-client