$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa File: 0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa (raw, json) Hash identifier: WvNzrynTVL5/y5GsyuJHmF5c6re7BJg+7mhIUo3nB98= Subject key identifier: 22:09:2E:C2:AA:FD:27:A3:B8:67:B2:5C:B8:F2:AF:14:55:F5:AD:04 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584A7780A61777C1B16B268D2E00 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 5650 IP address blocks: 68.170.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a6:17:77:c1:b1:6b:26:8d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=5965efaf-9be4-4a46-aacf-66016afdad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:6a:62:d5:24:18:17:cb:50:43:c5:9d:10: af:79:27:1f:db:34:ac:9d:91:af:97:a6:2b:b1:e5: ab:98:80:af:c9:e9:17:31:13:40:d0:53:ec:0d:e3: ea:f6:10:1d:95:b2:e8:98:ef:7e:45:78:75:2f:71: 6e:fe:8f:f6:0f:ee:37:12:dc:e0:96:25:1f:f2:69: ee:7b:76:82:2d:01:14:28:d8:73:aa:c2:89:01:d6: e2:60:43:da:ce:94:21:60:47:1c:ac:9d:6e:e1:d9: c5:c5:15:f8:01:a5:ff:0e:67:31:16:2a:68:4a:61: 87:7b:93:a9:15:ba:c9:80:70:e3:48:36:9a:e7:cb: 9c:26:44:b6:68:f5:ad:09:b2:cc:a5:d5:f1:d5:69: 05:63:83:0f:6f:73:15:31:e7:8c:77:73:a1:e0:14: bc:8a:91:10:d2:54:e8:ee:c7:cb:98:02:94:32:ef: c0:ea:73:e5:de:f4:2b:3c:fc:ec:51:33:7a:84:e2: 8d:27:b0:05:35:23:82:e6:77:a4:48:70:02:71:cc: b2:0c:50:cf:a7:6a:76:09:fb:d3:03:8e:19:b2:38: 9c:00:b3:ab:4c:5c:4b:af:1a:66:fe:56:80:1b:91: 20:45:bf:11:04:57:57:85:30:47:d3:db:85:40:43: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:09:2E:C2:AA:FD:27:A3:B8:67:B2:5C:B8:F2:AF:14:55:F5:AD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ae:0b:a1:90:3d:28:a9:0b:1f:e6:66:d9:12:c6:43:d6:8a: 8f:cd:6c:53:88:56:d5:c1:31:0a:75:d8:e0:41:f2:4a:e4:c6: b5:45:e8:15:d5:9a:6e:37:bd:aa:b6:3a:76:b0:46:a6:9b:22: c0:d3:7b:4d:83:b7:2c:d3:7b:0d:58:6d:c1:d9:f1:dd:1a:52: 03:1b:42:7d:7d:2e:80:43:99:27:c0:dd:99:b3:9d:36:84:c4: bd:b6:ff:0b:6d:37:f2:36:d5:31:fb:1f:a8:5b:64:b5:a6:c9: 0c:44:70:0d:1e:65:04:ef:ac:55:0b:ab:e2:6c:63:cc:46:2a: 40:f0:b4:07:4c:86:e5:50:f9:df:58:be:c8:1f:87:d1:4c:00: e7:e9:86:67:0b:97:c2:08:ce:8f:68:89:79:8f:84:e2:a1:d5: 37:a8:45:c8:38:a8:4e:f5:71:53:39:af:78:f4:52:5e:57:ac: 19:1b:6f:68:ed:83:2a:b9:7e:f4:a7:ef:39:aa:73:df:a9:1e: cb:d0:a4:2b:2f:c1:66:fd:e5:8a:9a:5b:96:71:b8:b3:c9:32: e4:f6:8b:04:0d:f5:e5:23:35:2d:96:f0:23:4f:64:c4:59:b1: bb:fb:5a:8c:20:b3:e3:3d:ee:17:18:71:c4:5c:c8:4c:d2:58: ba:8c:18:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKYXd8GxayaNLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NTk2NWVmYWYtOWJlNC00YTQ2LWFhY2YtNjYwMTZhZmRhZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJBqYtUkGBfLUEPFnRCveScf2zSsnZGvl6Yr seWrmICvyekXMRNA0FPsDePq9hAdlbLomO9+RXh1L3Fu/o/2D+43EtzgliUf8mnu e3aCLQEUKNhzqsKJAdbiYEPazpQhYEccrJ1u4dnFxRX4AaX/DmcxFipoSmGHe5Op FbrJgHDjSDaa58ucJkS2aPWtCbLMpdXx1WkFY4MPb3MVMeeMd3Oh4BS8ipEQ0lTo 7sfLmAKUMu/A6nPl3vQrPPzsUTN6hOKNJ7AFNSOC5nekSHACccyyDFDPp2p2CfvT A44ZsjicALOrTFxLrxpm/laAG5EgRb8RBFdXhTBH09uFQEM4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIJLsKq/SejuGeyXLjyrxRV9a0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMGY1NjRkMjktNDUwYi0z N2I4LTljNjctNWY4MWVjMGM3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2uC6GQPSipCx/mZtkSxkPWio/NbFOIVtXBMQp12OBB8krkxrVF6BXV mm43vaq2OnawRqabIsDTe02DtyzTew1YbcHZ8d0aUgMbQn19LoBDmSfA3ZmznTaE xL22/wttN/I21TH7H6hbZLWmyQxEcA0eZQTvrFULq+JsY8xGKkDwtAdMhuVQ+d9Y vsgfh9FMAOfphmcLl8IIzo9oiXmPhOKh1TeoRcg4qE71cVM5r3j0Ul5XrBkbb2jt gyq5fvSn7zmqc9+pHsvQpCsvwWb95YqaW5ZxuLPJMuT2iwQN9eUjNS2W8CNPZMRZ sbv7Wowgs+M97hcYccRcyEzSWLqMGMU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:38 2025 by rpki-client