$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa File: 3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa (raw, json) Hash identifier: TMXp2RTwGA8Z18RqOA8nco7XreuQnooGEqj1oPXi4do= Subject key identifier: 70:0E:2D:55:EF:B3:F9:03:14:AD:61:09:77:04:42:35:EB:95:79:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AB7B6313E2D52D624A8B87C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 13671 IP address blocks: 68.128.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:31:3e:2d:52:d6:24:a8:b8:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=fa4d0135-f18f-4c44-94de-a6e941d70a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:4f:c4:c6:0c:1c:a3:42:57:cd:96:d6:2a: c5:2b:d8:07:f1:8c:3d:ef:5e:bd:27:cf:ef:7a:24: 5c:0d:ee:48:5a:ff:40:29:56:43:5a:61:ce:cb:43: 1e:b8:d0:a6:f7:b0:a5:97:a0:a0:17:83:91:20:f7: 37:84:70:4f:a0:b7:a1:d7:00:c7:66:a2:f3:c1:3f: 53:13:9b:49:31:75:02:a4:4a:66:a7:5c:ca:90:9c: 67:f2:27:0f:61:ef:6f:8a:e4:1d:db:06:9b:0b:8d: b1:c0:a7:63:04:d3:1f:d2:a6:4a:ca:87:ea:a9:3c: 96:d9:40:b6:71:9f:6c:48:b1:74:8c:f9:72:57:09: 2a:5e:cc:c0:66:4b:ec:cb:d8:eb:c4:c3:3f:47:ae: 74:5a:20:e9:87:a1:9e:a8:33:fb:bb:24:6c:1d:02: fc:b5:64:78:d8:4a:e9:94:dc:da:1d:0d:d6:e1:ba: 6c:73:03:9c:44:de:5d:53:86:d4:f6:d4:d4:f5:dc: 3a:88:48:1a:e1:bb:93:58:a8:30:0c:a3:72:c1:96: 65:d1:11:5e:93:00:92:9e:2d:51:6c:d5:33:b5:f3: aa:fb:d1:0e:71:ff:ec:35:99:ec:45:ec:bc:a6:18: 7e:2f:12:50:31:e8:50:f7:fa:cd:45:3e:ae:4d:b1: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0E:2D:55:EF:B3:F9:03:14:AD:61:09:77:04:42:35:EB:95:79:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c1:f1:34:ce:e2:f5:1e:82:e5:d9:40:b3:4a:ff:73:53:14: 50:33:39:64:02:bc:37:08:76:8e:cd:e0:d9:88:1d:3c:8a:3d: 80:a7:f3:d7:40:6c:9f:d3:8c:3e:71:4f:dc:33:a3:ec:88:52: a0:55:ab:81:ce:7f:64:8e:b0:fe:e0:1e:f0:a0:5d:86:4d:34: 74:9d:79:ce:b1:5e:bb:3d:22:cc:cb:06:57:e7:7b:dc:b9:28: c8:5f:a3:11:a6:44:b8:cb:73:c9:96:c2:34:c3:26:0a:03:b8: 75:d9:17:8f:73:46:08:8a:f6:e8:c3:f8:8b:db:24:cb:b4:89: bc:55:44:6b:6a:c2:19:86:d6:58:26:df:9e:35:b1:c6:16:04: 41:0e:b6:b9:33:c0:e9:5d:0d:fd:0c:7c:90:45:e8:02:e7:a4: 55:92:97:64:c9:24:2a:c9:e5:25:5b:1d:28:03:1b:e8:03:38: 96:dc:39:05:f5:c1:35:32:0a:aa:50:5e:77:4c:92:67:62:0b: 45:5c:6a:e5:59:aa:7b:00:e5:3a:1e:43:c4:03:b1:de:0b:c8: 7c:bd:52:ca:88:b4:47:90:ca:a3:21:f1:49:1b:32:fd:e7:28: f3:e9:4e:40:9e:2f:44:f9:49:24:d6:d3:ba:76:da:37:10:a4: 37:aa:93:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjE+LVLWJKi4fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZmE0ZDAxMzUtZjE4Zi00YzQ0LTk0ZGUtYTZlOTQxZDcwYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hZPxMYMHKNCV82W1irFK9gH8Yw97169J8/v eiRcDe5IWv9AKVZDWmHOy0MeuNCm97Cll6CgF4ORIPc3hHBPoLeh1wDHZqLzwT9T E5tJMXUCpEpmp1zKkJxn8icPYe9viuQd2wabC42xwKdjBNMf0qZKyofqqTyW2UC2 cZ9sSLF0jPlyVwkqXszAZkvsy9jrxMM/R650WiDph6GeqDP7uyRsHQL8tWR42Erp lNzaHQ3W4bpscwOcRN5dU4bU9tTU9dw6iEga4buTWKgwDKNywZZl0RFekwCSni1R bNUztfOq+9EOcf/sNZnsRey8phh+LxJQMehQ9/rNRT6uTbEN0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAOLVXvs/kDFK1hCXcEQjXrlXnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M3ZGI5YjktNzI3ZC0z OWNmLThkZmItYjNkODY5OTFkOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPB8TTO4vUeguXZQLNK/3NTFFAzOWQCvDcIdo7N4NmIHTyKPYCn89dA bJ/TjD5xT9wzo+yIUqBVq4HOf2SOsP7gHvCgXYZNNHSdec6xXrs9IszLBlfne9y5 KMhfoxGmRLjLc8mWwjTDJgoDuHXZF49zRgiK9ujD+IvbJMu0ibxVRGtqwhmG1lgm 3541scYWBEEOtrkzwOldDf0MfJBF6ALnpFWSl2TJJCrJ5SVbHSgDG+gDOJbcOQX1 wTUyCqpQXndMkmdiC0VcauVZqnsA5ToeQ8QDsd4LyHy9UsqItEeQyqMh8UkbMv3n KPPpTkCeL0T5SSTW07p22jcQpDeqkzw= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:11 2025 by rpki-client