$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa File: 699b8c0d-b668-3aa7-93f5-0b36e116f993.roa (raw, json) Hash identifier: I3GBtU0jznOp2tiqEt0g5A94oKeTWjLQc7kXHRtLQLk= Subject key identifier: A5:46:DC:75:5B:9C:78:07:F8:C2:CA:19:47:3C:BE:0D:A2:88:80:42 Certificate issuer: /CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Certificate serial: 010D0C9F4328584AB91B8FF8205843BDEC9354C0 Authority key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 399612 IP address blocks: 68.68.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8f:f8:20:58:43:bd:ec:93:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=64c59b80-7e8d-4032-b6ac-d281f5e3da6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:f8:49:bb:ab:51:de:80:df:5b:fe:32:7a: fc:56:a1:3b:e0:b1:01:0d:a0:21:7a:a0:df:f6:84: 60:c2:2a:e7:35:f2:b5:21:ac:a1:c8:87:7f:e0:a7: ae:53:84:97:9f:f1:5e:0e:3c:72:8d:89:06:b0:23: cd:6d:44:ba:77:b9:78:20:16:1b:ec:c5:50:75:ec: 3d:ed:cb:fb:80:5c:b3:33:3a:47:14:96:c3:d5:38: 0b:06:fb:8a:7a:20:ea:dc:d8:9c:9f:c5:44:ee:bd: f4:2c:ba:3c:ff:20:9a:89:ee:8c:59:15:06:12:59: a0:4c:7c:66:62:38:e4:8b:b8:4d:d1:c7:2a:13:d5: b3:b6:43:07:18:30:68:1b:74:ff:82:b2:55:21:94: 8c:0e:8b:be:e8:e5:e9:9f:ba:3a:01:df:d4:ea:fb: 95:6b:ed:38:21:dc:78:3a:9a:58:6e:06:1d:f2:d4: 1b:a5:6a:68:0b:3c:42:5f:5a:59:03:a4:b3:20:7e: 8d:59:ef:a6:65:ca:17:0e:90:63:75:94:ad:9d:fc: a9:88:0d:f8:65:94:dd:0c:22:70:b3:2d:ff:67:e4: 66:5b:1e:cc:f0:48:6d:f1:a1:a4:4d:08:da:e4:6e: 89:ce:1b:71:4f:41:ed:51:bf:bb:2b:bd:3b:ee:cd: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:46:DC:75:5B:9C:78:07:F8:C2:CA:19:47:3C:BE:0D:A2:88:80:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl X509v3 Authority Key Identifier: keyid:CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer sbgp-ipAddrBlock: critical IPv4: 68.68.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:23:e1:1f:61:34:ce:43:89:2b:d7:68:8e:f1:84:f8:33:e8: 9d:70:50:97:ba:eb:b9:54:fd:09:4c:30:3e:97:06:a6:6a:c5: 5f:9b:8d:3d:ff:eb:86:6b:c0:b2:e3:cb:c4:64:ff:30:1a:ed: 17:5d:cf:b0:b6:45:39:96:ca:1a:b3:0c:1f:f9:d3:60:37:bd: 41:5c:02:62:cb:02:06:bf:f0:7a:5e:b1:a6:07:b4:be:de:6a: 68:cd:55:02:e5:31:a4:ab:89:e1:e1:be:36:52:2c:5f:16:6f: 14:31:11:f6:0b:b6:0d:09:c8:a1:58:b7:b5:2f:ba:30:34:78: 14:3f:1e:84:9e:1c:9e:f5:e6:e2:3c:32:65:69:34:90:8d:5e: 24:6e:a3:97:f9:e7:82:37:56:97:e8:a6:07:19:0e:b1:59:49: 25:26:ab:03:bc:fd:f0:45:a3:a3:d0:b8:90:8e:ef:b0:c4:23: 77:34:3e:9c:d3:f4:0b:f2:7c:32:b6:1f:a0:49:ec:be:04:7a: 44:87:d3:35:fb:aa:5a:7e:b6:0e:76:43:e0:44:9b:84:06:64: 18:49:30:33:96:35:65:0e:d2:5b:15:11:fd:3f:1c:73:98:eb: 32:8e:fe:bf:69:9d:a2:3b:a0:dc:0d:2e:de:2d:8a:97:e3:80: 4e:1a:56:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4/4IFhDveyTVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IwYjRlNDUtYzkxNi00OGJlLWFlMGQtYjU3YjgwYTMw Y2RjMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjRjNTliODAtN2U4ZC00MDMyLWI2YWMtZDI4MWY1ZTNkYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRT4SburUd6A31v+Mnr8VqE74LEBDaAheqDf 9oRgwirnNfK1IayhyId/4KeuU4SXn/FeDjxyjYkGsCPNbUS6d7l4IBYb7MVQdew9 7cv7gFyzMzpHFJbD1TgLBvuKeiDq3Nicn8VE7r30LLo8/yCaie6MWRUGElmgTHxm Yjjki7hN0ccqE9WztkMHGDBoG3T/grJVIZSMDou+6OXpn7o6Ad/U6vuVa+04Idx4 OppYbgYd8tQbpWpoCzxCX1pZA6SzIH6NWe+mZcoXDpBjdZStnfypiA34ZZTdDCJw sy3/Z+RmWx7M8Eht8aGkTQja5G6JzhtxT0HtUb+7K7077s2FoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVG3HVbnHgH+MLKGUc8vg2iiIBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBi NGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdiODBhMzBjZGMvNjk5YjhjMGQtYjY2OC0z YWE3LTkzZjUtMGIzNmUxMTZmOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2IwYjRlNDUtYzkxNi00OGJlLWFl MGQtYjU3YjgwYTMwY2RjLzNiMGI0ZTQ1LWM5MTYtNDhiZS1hZTBkLWI1N2I4MGEz MGNkYy5jcmwwHwYDVR0jBBgwFoAUzfAOS/H7tTntP3qUPNdKK8IO9xYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYjBiNGU0NS1jOTE2LTQ4YmUtYWUwZC1iNTdi ODBhMzBjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARETdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgj4R9hNM5DiSvXaI7xhPgz6J1wUJe667lU/QlMMD6XBqZqxV+bjT3/ 64ZrwLLjy8Rk/zAa7Rddz7C2RTmWyhqzDB/502A3vUFcAmLLAga/8HpesaYHtL7e amjNVQLlMaSrieHhvjZSLF8WbxQxEfYLtg0JyKFYt7UvujA0eBQ/HoSeHJ715uI8 MmVpNJCNXiRuo5f554I3VpfopgcZDrFZSSUmqwO8/fBFo6PQuJCO77DEI3c0PpzT 9AvyfDK2H6BJ7L4EekSH0zX7qlp+tg52Q+BEm4QGZBhJMDOWNWUO0lsVEf0/HHOY 6zKO/r9pnaI7oNwNLt4tipfjgE4aVg0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:44 2025 by rpki-client