$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa File: 5f969a12-5cb2-36ef-aaab-e4b979add84d.roa (raw, json) Hash identifier: BJDCj94xvjHHpAtnadg/N1ivwBm4w0VNtSX4uYVFx2Y= Subject key identifier: AE:45:36:7F:12:FC:72:A8:8F:46:1E:2D:D7:A3:F5:10:CF:19:8A:86 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584A8575FCF6FECB17F3FA130C00 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 10430 IP address blocks: 68.179.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:fc:f6:fe:cb:17:f3:fa:13:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=168dbaa1-1ef9-4eae-8ee3-fd52d31daa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:1d:23:9c:44:2c:78:9f:9f:cc:fe:d4:8f: dc:09:bf:52:8a:4f:f0:99:e6:0b:19:09:71:a2:0d: 93:28:c5:ba:00:94:c6:a6:a6:32:64:60:d6:85:67: be:03:2f:ab:b6:d5:7a:6b:fb:d3:bf:98:51:ae:24: 97:26:92:db:13:c5:ab:c5:38:68:96:00:9e:8a:c0: dd:24:8a:0f:dc:e9:5d:d9:be:57:2d:1b:38:bf:50: ff:ee:8b:c7:a1:4a:b9:70:33:73:01:0e:1a:13:02: 10:2f:a8:76:e3:e0:de:fc:73:e8:0a:31:e8:02:1f: b4:af:9b:fe:0c:4b:74:85:17:c7:de:13:74:8e:dc: 01:90:5d:69:bc:f0:5c:22:50:6a:09:07:0c:9d:76: 1c:8a:15:99:6a:88:99:20:84:cc:38:22:85:ba:78: f5:37:54:1b:37:16:a6:12:99:d4:69:07:e6:30:86: e9:73:f9:af:52:d0:88:87:1b:6e:4b:80:85:6a:7d: 40:f1:80:8e:70:ce:bb:75:19:e6:04:80:7a:dc:6e: 9e:28:e8:5a:f0:8a:13:b4:cf:cd:28:d1:e7:8e:f4: 7f:43:d4:27:71:ed:f4:81:69:50:61:91:d1:14:8e: f5:b0:37:6f:78:ad:67:51:14:a9:13:ac:b8:a0:73: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:36:7F:12:FC:72:A8:8F:46:1E:2D:D7:A3:F5:10:CF:19:8A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 68.179.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b8:2f:e2:98:70:53:cf:8c:ce:f1:08:36:06:02:2d:b2:6a: 90:fe:bf:8f:97:e1:96:00:e7:d4:65:77:ed:e9:9f:e4:56:4e: 82:d2:c1:e6:19:4c:ef:81:0a:52:e6:0a:50:b5:e8:4f:3e:ce: 1d:1b:c3:26:22:c3:5f:94:b4:3e:8e:f9:4a:f7:97:cf:63:39: e4:0c:09:78:1e:ca:e0:9b:f4:99:85:55:9e:33:a8:57:ff:a8: 73:f0:7e:95:33:b6:7f:1a:11:4d:33:ef:91:d7:9b:c2:f7:9e: 8a:35:46:9d:53:a5:40:f9:1c:58:5f:5b:35:87:43:1e:ec:29: 34:28:45:cd:1f:40:bb:0d:51:b2:49:f3:eb:0c:4d:fb:64:0e: f8:22:cf:cd:9a:bc:ff:b3:3c:71:6e:c1:26:7c:2d:bb:91:10: 98:b9:7b:43:f8:b1:ee:f1:c8:8d:3c:96:f6:a0:0a:71:83:85: db:f8:8f:3f:df:5d:98:33:0a:36:ca:ae:c5:17:57:c3:fb:5b: f0:3a:6c:13:86:d1:02:67:eb:c8:5a:e9:f0:d0:76:ce:d3:0d: 01:64:4c:cd:f9:89:92:45:98:7a:a1:ed:82:e7:c7:51:b7:e5: c1:72:f0:d5:85:9b:dc:5a:3a:f4:4d:e6:9f:9a:fe:6b:96:66: ae:c2:95:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfz2/ssX8/oTDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MTY4ZGJhYTEtMWVmOS00ZWFlLThlZTMtZmQ1MmQzMWRhYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyodI5xELHifn8z+1I/cCb9Sik/wmeYLGQlx og2TKMW6AJTGpqYyZGDWhWe+Ay+rttV6a/vTv5hRriSXJpLbE8WrxTholgCeisDd JIoP3Old2b5XLRs4v1D/7ovHoUq5cDNzAQ4aEwIQL6h24+De/HPoCjHoAh+0r5v+ DEt0hRfH3hN0jtwBkF1pvPBcIlBqCQcMnXYcihWZaoiZIITMOCKFunj1N1QbNxam EpnUaQfmMIbpc/mvUtCIhxtuS4CFan1A8YCOcM67dRnmBIB63G6eKOha8IoTtM/N KNHnjvR/Q9Qnce30gWlQYZHRFI71sDdveK1nURSpE6y4oHPWxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5FNn8S/HKoj0YeLdej9RDPGYqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNWY5NjlhMTItNWNiMi0z NmVmLWFhYWItZTRiOTc5YWRkODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRLPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy4L+KYcFPPjM7xCDYGAi2yapD+v4+X4ZYA59Rld+3pn+RWToLSweYZ TO+BClLmClC16E8+zh0bwyYiw1+UtD6O+Ur3l89jOeQMCXgeyuCb9JmFVZ4zqFf/ qHPwfpUztn8aEU0z75HXm8L3noo1Rp1TpUD5HFhfWzWHQx7sKTQoRc0fQLsNUbJJ 8+sMTftkDvgiz82avP+zPHFuwSZ8LbuREJi5e0P4se7xyI08lvagCnGDhdv4jz/f XZgzCjbKrsUXV8P7W/A6bBOG0QJn68ha6fDQds7TDQFkTM35iZJFmHqh7YLnx1G3 5cFy8NWFm9xaOvRN5p+a/muWZq7ClVA= -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:03 2025 by rpki-client