$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa File: 2cc7e6d7-52d1-305c-a917-da2148e02567.roa (raw, json) Hash identifier: 5Qp8qTjOKJZlInkeZy6hcPo2RHxUS0REARoPZ3iyyhM= Subject key identifier: E3:75:23:99:AF:40:A9:CD:F0:BF:83:41:6D:0F:3A:77:39:58:01:60 Certificate issuer: /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Certificate serial: 010D0C9F4328584A6825FE56467D6E07F7092440 Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397122 IP address blocks: 68.234.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:fe:56:46:7d:6e:07:f7:09:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=6b78d539-2b10-42bb-bd5f-148019336b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:a8:1b:e9:52:9b:23:ba:73:1d:6b:72:58: 53:3b:fa:27:cb:ba:cf:64:a9:24:d6:db:49:24:96: 10:09:28:b5:a3:5e:40:55:c1:37:fc:bf:9a:3f:0d: a4:24:81:4c:c9:1a:e6:f2:29:ca:ff:cd:19:c9:6b: 84:a4:69:38:02:b9:ea:64:22:a2:de:3c:cf:f2:9a: 66:74:ee:e0:cb:dd:20:50:e4:74:ee:b6:06:b9:70: e5:25:5d:eb:46:96:c1:23:7e:14:48:e6:8b:8b:08: 4c:2f:1b:c1:02:aa:9b:4b:87:c3:ea:6f:24:81:c1: 1a:f9:a6:12:cf:ef:36:86:96:76:ea:38:a8:ba:42: e1:bf:6d:22:18:c4:32:45:23:bd:d8:65:98:f0:83: cf:7b:a3:b8:1d:41:9c:90:4a:01:c0:c8:cb:3b:00: af:b2:9c:b7:52:b0:ca:4c:4f:0f:1a:1c:42:33:f1: a5:d7:3d:19:97:81:0a:7e:33:4b:d4:75:28:34:3b: b6:85:88:0a:15:c3:76:25:c5:74:ec:ee:bf:e5:98: e1:b3:3d:c1:a7:92:da:06:6b:59:28:56:1f:b0:2a: 2b:f6:2c:16:84:1c:ac:91:07:b1:f3:8f:6c:5c:1b: 5e:db:ed:98:05:80:9a:22:50:db:8c:30:ee:58:af: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:75:23:99:AF:40:A9:CD:F0:BF:83:41:6D:0F:3A:77:39:58:01:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl X509v3 Authority Key Identifier: keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer sbgp-ipAddrBlock: critical IPv4: 68.234.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e8:5f:fd:1a:13:b3:6e:1e:f5:78:43:79:66:f5:70:df:32: 73:8f:d3:48:a0:e9:4c:41:ae:90:57:ff:99:23:3c:f0:f8:bb: 85:4e:20:0c:fa:16:c2:92:ff:9c:68:fb:6a:5f:8d:99:75:2a: 47:7f:90:0e:6b:23:ec:49:2a:50:ee:22:21:b7:90:d0:f8:fc: 7e:b7:5d:be:81:7a:d7:dd:e0:b5:6e:09:1a:a1:a0:82:98:74: b1:7d:11:2d:9b:20:d1:c4:3d:7e:e8:64:b0:40:42:3d:02:5f: c3:18:2d:99:a3:c9:07:de:86:38:f6:32:e0:8d:6b:d5:af:14: 12:ef:9f:b0:d9:cf:37:2c:59:00:08:5f:8a:1a:f1:24:82:8c: 74:e7:13:7b:a9:72:3e:06:42:bc:3a:f0:04:f1:57:d9:18:85: b3:ae:b8:4c:e8:ce:e5:30:22:59:9d:66:4a:4f:e3:ae:be:6d: 60:cd:e5:78:23:87:56:9a:6a:58:aa:4d:5e:8d:0a:c6:1f:cf: 3b:41:da:2e:19:27:30:0b:52:84:f9:bc:19:10:45:03:98:a1: 73:d9:94:90:13:e0:df:db:e9:69:6e:3a:7b:c5:ad:25:32:19: ef:dd:f4:ec:b5:fb:aa:d0:4f:6a:f5:e1:1c:b1:8d:dd:b6:a1: 0e:c5:7e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJf5WRn1uB/cJJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1 ZDlkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NmI3OGQ1MzktMmIxMC00MmJiLWJkNWYtMTQ4MDE5MzM2YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbioG+lSmyO6cx1rclhTO/ony7rPZKkk1ttJ JJYQCSi1o15AVcE3/L+aPw2kJIFMyRrm8inK/80ZyWuEpGk4ArnqZCKi3jzP8ppm dO7gy90gUOR07rYGuXDlJV3rRpbBI34USOaLiwhMLxvBAqqbS4fD6m8kgcEa+aYS z+82hpZ26jioukLhv20iGMQyRSO92GWY8IPPe6O4HUGckEoBwMjLOwCvspy3UrDK TE8PGhxCM/Gl1z0Zl4EKfjNL1HUoNDu2hYgKFcN2JcV07O6/5Zjhsz3Bp5LaBmtZ KFYfsCor9iwWhByskQex849sXBte2+2YBYCaIlDbjDDuWK8teQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFON1I5mvQKnN8L+DQW0POnc5WAFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvMmNjN2U2ZDctNTJkMS0z MDVjLWE5MTctZGEyMTQ4ZTAyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh NDk5MzVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEROpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvoX/0aE7NuHvV4Q3lm9XDfMnOP00ig6UxBrpBX/5kjPPD4u4VOIAz6 FsKS/5xo+2pfjZl1Kkd/kA5rI+xJKlDuIiG3kND4/H63Xb6Betfd4LVuCRqhoIKY dLF9ES2bINHEPX7oZLBAQj0CX8MYLZmjyQfehjj2MuCNa9WvFBLvn7DZzzcsWQAI X4oa8SSCjHTnE3upcj4GQrw68ATxV9kYhbOuuEzozuUwIlmdZkpP466+bWDN5Xgj h1aaaliqTV6NCsYfzztB2i4ZJzALUoT5vBkQRQOYoXPZlJAT4N/b6WluOnvFrSUy Ge/d9Oy1+6rQT2r14Ryxjd22oQ7FfsA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:47:46 2025 by rpki-client