$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa File: 4138c095-a4da-331c-a10c-3621cf1b39cb.roa (raw, json) Hash identifier: PviBLiILwVOlcYGgMEVW/NW7NdY3G4mxkl+MzE4uy18= Subject key identifier: 5F:E2:72:12:F9:CF:73:4A:AA:66:60:BA:C5:06:4D:8D:75:39:5B:59 Certificate issuer: /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Certificate serial: 010D0C9F4328584A7D15F7E14510E7D3684CEC80 Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 8134 IP address blocks: 68.70.128.0/20 maxlen: 20 69.19.168.0/21 maxlen: 21 206.51.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f7:e1:45:10:e7:d3:68:4c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=306de31a-19ba-4b15-aa12-3207adc6ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:a4:91:5f:2c:07:dc:02:e9:3e:0d:42:ac: d5:63:f8:28:c9:de:35:82:08:c0:8e:b7:9b:55:f1: be:a1:c1:c8:a2:44:fb:17:c1:ae:c1:fb:4b:32:ab: d6:be:6c:8b:b9:1e:5c:64:9e:7e:c6:09:4c:cc:0e: ee:db:06:b2:26:12:1b:f0:eb:c7:37:22:7f:8d:6f: 04:11:68:fc:75:85:ba:38:52:4b:41:ee:65:41:88: 01:1a:85:59:96:50:bb:d7:fb:c4:97:81:3a:16:3e: d0:f6:2d:3c:ee:36:67:c2:f0:0f:67:a7:9d:5b:54: a5:6e:42:0d:aa:8b:16:6b:13:00:0c:ea:c9:5a:1e: 9a:8d:b3:9d:71:ad:4e:b5:89:c0:80:db:79:27:0e: 31:c3:63:18:c4:8b:47:84:c5:e9:69:f8:5c:f0:27: 66:52:22:8c:70:62:d9:c3:7f:38:b1:e9:ea:00:b6: 9b:76:03:c8:2e:a9:e3:29:10:81:9e:6c:4f:90:b0: 8d:c9:4f:b0:45:ea:ce:32:38:dd:fc:47:64:f3:e8: 79:13:fa:91:76:4a:bc:7e:e6:ba:c6:3d:e3:c4:7c: 60:e5:ef:f5:0f:4c:57:50:a1:ca:7c:6b:f6:9e:26: 2b:57:aa:6e:b7:fb:16:5a:37:98:95:73:f3:68:57: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E2:72:12:F9:CF:73:4A:AA:66:60:BA:C5:06:4D:8D:75:39:5B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl X509v3 Authority Key Identifier: keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer sbgp-ipAddrBlock: critical IPv4: 68.70.128.0/20 69.19.168.0/21 206.51.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:26:47:10:91:70:bb:1d:a5:7d:f5:36:97:fc:68:d3:71:8e: 0a:d5:0c:ce:df:5b:3a:22:d8:78:67:13:b9:f4:4a:ed:9c:66: 11:b9:77:b2:07:4c:23:8c:2a:4d:a6:05:22:fb:3a:fc:73:8b: 1e:90:53:49:e4:4f:61:25:29:c4:e4:b0:aa:e5:a9:fa:4a:75: 11:ef:1d:a9:ff:e5:78:10:51:6d:d5:94:7d:65:51:ac:58:db: 69:5b:8f:9c:2d:5e:01:1e:e0:c8:f1:85:da:9c:c1:e2:4d:d1: ad:fd:eb:71:0e:b8:57:89:3c:77:eb:42:3d:58:1e:a8:ac:af: bd:c2:7e:4f:b9:85:ea:16:6f:34:2e:cf:01:51:9e:34:0f:49: 34:15:77:46:50:b3:f3:25:a8:06:af:4c:d4:0a:a4:2c:52:37: b3:6d:df:51:43:cd:e9:0c:cf:a4:2c:18:ec:8f:a5:54:86:4b: bb:9c:c3:26:dd:57:9a:4c:04:d8:1d:e2:2a:ee:1d:22:d2:d8: c9:ed:58:62:13:92:a3:cb:08:84:61:2b:8d:a5:b5:a5:b1:fb: 73:9e:51:d8:d3:15:fc:ee:10:91:c5:2e:9d:60:bb:32:e4:1f: 68:2a:f9:c5:46:9a:c7:ec:d0:49:85:94:55:65:53:67:ed:52: b5:72:52:e7 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEp9FffhRRDn02hM7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdhMjZiMTMtYzI5NS00ZjBiLWJlYzUtNDY0NWRkZDFk MGQ5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MzA2ZGUzMWEtMTliYS00YjE1LWFhMTItMzIwN2FkYzZlZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6ikkV8sB9wC6T4NQqzVY/goyd41ggjAjreb VfG+ocHIokT7F8GuwftLMqvWvmyLuR5cZJ5+xglMzA7u2wayJhIb8OvHNyJ/jW8E EWj8dYW6OFJLQe5lQYgBGoVZllC71/vEl4E6Fj7Q9i087jZnwvAPZ6edW1SlbkIN qosWaxMADOrJWh6ajbOdca1OtYnAgNt5Jw4xw2MYxItHhMXpafhc8CdmUiKMcGLZ w384senqALabdgPILqnjKRCBnmxPkLCNyU+wRerOMjjd/Edk8+h5E/qRdkq8fua6 xj3jxHxg5e/1D0xXUKHKfGv2niYrV6put/sWWjeYlXPzaFcGgwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFF/ichL5z3NKqmZgusUGTY11OVtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hN2Ey NmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1ZGRkMWQwZDkvNDEzOGMwOTUtYTRkYS0z MzFjLWExMGMtMzYyMWNmMWIzOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTdhMjZiMTMtYzI5NS00ZjBiLWJl YzUtNDY0NWRkZDFkMGQ5L2E3YTI2YjEzLWMyOTUtNGYwYi1iZWM1LTQ2NDVkZGQx ZDBkOS5jcmwwHwYDVR0jBBgwFoAU8kCiwttTySyJz6btiRgTJRGu0l0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hN2EyNmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1 ZGRkMWQwZDkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEREaAAwQD RROoAwQEzjNwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEYmRxCRcLsdpX31Npf8aNNxjgrVDM7fWzoi2Hhn E7n0Su2cZhG5d7IHTCOMKk2mBSL7Ovxzix6QU0nkT2ElKcTksKrlqfpKdRHvHan/ 5XgQUW3VlH1lUaxY22lbj5wtXgEe4MjxhdqcweJN0a3963EOuFeJPHfrQj1YHqis r73Cfk+5heoWbzQuzwFRnjQPSTQVd0ZQs/MlqAavTNQKpCxSN7Nt31FDzekMz6Qs GOyPpVSGS7ucwybdV5pMBNgd4iruHSLS2MntWGITkqPLCIRhK42ltaWx+3OeUdjT FfzuEJHFLp1guzLkH2gq+cVGmsfs0EmFlFVlU2ftUrVyUuc= -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:46 2025 by rpki-client