$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa File: 3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa (raw, json) Hash identifier: HC9XwaijZilpRQiPsA1jnaT7EqDQPcPgGkNmG0uWg4Y= Subject key identifier: B2:E4:82:37:0C:FF:1C:07:4E:0A:1A:C0:E2:88:19:C3:8B:39:AD:BA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849D7AFC65CFBC58C1BB18DF1C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa Signing time: Tue 13 May 2025 19:06:47 +0000 ROA not before: Tue 13 May 2025 19:06:47 +0000 ROA not after: Mon 11 Aug 2025 19:06:47 +0000 asID: 13671 IP address blocks: 68.128.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:af:c6:5c:fb:c5:8c:1b:b1:8d:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 13 19:06:47 2025 GMT Not After : Aug 11 19:06:47 2025 GMT Subject: CN=161b8142-5f80-4bf5-bb7c-5e50e29c471c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:76:13:3c:e3:55:46:1a:60:d5:8a:95:9e: a7:03:ff:ba:45:a9:8c:b6:db:78:e3:b2:b2:a4:8c: 75:29:19:89:31:53:2f:60:39:ba:34:64:23:9b:db: 49:fe:bd:6e:87:e2:e8:a4:1f:48:7a:6b:e9:a8:cd: 50:85:f9:43:18:2a:2e:25:57:52:64:18:a0:b6:75: f0:66:e8:ea:36:88:36:80:a3:f8:e7:c5:cf:cb:13: 2f:8a:b2:09:ec:27:7a:cb:93:62:b4:a3:b1:24:76: 8a:80:35:b5:61:aa:5c:9c:66:8e:a9:f3:81:7f:01: 8d:09:3f:17:b1:26:47:34:5f:0b:61:2d:ae:1d:cd: ab:16:17:61:52:05:2b:2c:8b:04:37:95:11:0e:b4: 56:ff:6a:1d:c3:7f:94:e9:38:7a:62:3d:99:d8:fd: 0c:a9:e5:66:c8:ed:22:48:d9:60:33:d1:76:cf:25: d5:4b:64:ab:3d:9f:61:c7:97:26:f4:72:66:f4:1f: 25:29:4d:54:3b:21:b1:e9:fe:4a:6d:1f:98:c4:f5: 8c:e9:07:15:0c:7e:50:51:85:80:85:3d:a8:2d:89: 83:07:a8:da:d8:70:c2:87:92:b5:b1:94:1a:3c:3d: f2:90:05:34:af:97:ad:00:22:fc:21:18:7f:9a:f7: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:82:37:0C:FF:1C:07:4E:0A:1A:C0:E2:88:19:C3:8B:39:AD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a1:9d:7f:c1:28:8c:0f:53:76:d3:2b:90:64:30:7c:fc:a9: c4:b4:b1:d6:41:72:c9:f4:8d:2f:22:4b:ab:52:27:cb:60:a3: 94:84:82:07:aa:e5:c7:77:7f:bd:30:74:2e:b4:86:a3:2f:2e: 9e:dc:09:e8:88:81:98:8e:e8:d6:f3:9a:de:8f:37:63:d6:e5: 81:27:26:bd:fa:18:99:86:98:03:f4:2e:4e:11:9a:ad:6d:2a: b4:1d:60:a6:f6:f9:fd:47:4e:71:52:89:e5:d8:b3:d6:37:09: 3b:2a:74:f7:bc:bf:25:c2:50:bd:e1:1c:f0:0b:c8:13:51:e7: 35:57:ec:65:5e:f4:26:b4:4c:3b:b6:1e:2c:c9:17:22:82:b9: ab:64:81:a0:04:29:72:a9:61:00:c9:35:74:08:f9:ab:9b:be: 2b:e1:9b:e5:51:e0:f3:f4:7f:ee:3b:e6:eb:3d:fb:60:9b:96: 4d:95:c1:ef:06:00:01:2e:07:4c:54:32:3b:1d:6d:b5:ca:ff: 19:f6:6d:76:e3:3c:19:3f:ed:31:06:67:fb:a5:72:4d:87:5d: a8:29:0a:92:0e:76:67:88:78:50:27:a7:2f:95:38:2c:7f:7c: 7f:7b:dc:e3:11:6a:6b:8f:ac:88:3e:d2:33:74:b4:bf:57:aa: 34:c6:07:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnXr8Zc+8WMG7GN8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMzE5MDY0N1oXDTI1MDgxMTE5MDY0N1owLzEtMCsGA1UEAxMk MTYxYjgxNDItNWY4MC00YmY1LWJiN2MtNWU1MGUyOWM0NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoud2EzzjVUYaYNWKlZ6nA/+6RamMttt447Ky pIx1KRmJMVMvYDm6NGQjm9tJ/r1uh+LopB9IemvpqM1QhflDGCouJVdSZBigtnXw ZujqNog2gKP458XPyxMvirIJ7Cd6y5NitKOxJHaKgDW1YapcnGaOqfOBfwGNCT8X sSZHNF8LYS2uHc2rFhdhUgUrLIsEN5URDrRW/2odw3+U6Th6Yj2Z2P0MqeVmyO0i SNlgM9F2zyXVS2SrPZ9hx5cm9HJm9B8lKU1UOyGx6f5KbR+YxPWM6QcVDH5QUYWA hT2oLYmDB6ja2HDCh5K1sZQaPD3ykAU0r5etACL8IRh/mvesXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLkgjcM/xwHTgoawOKIGcOLOa26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M3ZGI5YjktNzI3ZC0z OWNmLThkZmItYjNkODY5OTFkOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALehnX/BKIwPU3bTK5BkMHz8qcS0sdZBcsn0jS8iS6tSJ8tgo5SEggeq 5cd3f70wdC60hqMvLp7cCeiIgZiO6Nbzmt6PN2PW5YEnJr36GJmGmAP0Lk4Rmq1t KrQdYKb2+f1HTnFSieXYs9Y3CTsqdPe8vyXCUL3hHPALyBNR5zVX7GVe9Ca0TDu2 HizJFyKCuatkgaAEKXKpYQDJNXQI+aubvivhm+VR4PP0f+475us9+2Cblk2Vwe8G AAEuB0xUMjsdbbXK/xn2bXbjPBk/7TEGZ/ulck2HXagpCpIOdmeIeFAnpy+VOCx/ fH973OMRamuPrIg+0jN0tL9XqjTGB6A= -----END CERTIFICATE-----Generated at Tue Jun 17 16:15:33 2025 by rpki-client