$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa File: 5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa (raw, json) Hash identifier: J6kbTcqRc2rqLphZtPtcegOruU8smndTjpF3x3xgCd0= Subject key identifier: A5:84:46:20:46:35:9E:27:33:9A:C6:6F:2A:39:00:A3:76:D0:73:A2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F0D9240345015C191800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f0:d9:24:03:45:01:5c:19:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=2acffa89-c74c-49bb-ae09-7fab374ae4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:d1:9b:a7:32:ad:af:5d:10:1e:35:89:fd: f5:14:08:6f:b8:e6:c1:2e:c2:5a:a2:b5:de:96:c2: 4d:00:00:a1:02:4a:28:98:a5:55:4a:a1:46:28:5f: 4c:27:ab:8a:ab:0d:79:99:f6:5d:04:de:30:aa:2c: 40:58:d8:5d:93:bb:43:ac:c7:70:e2:10:ed:ae:d2: 8c:42:9e:3e:e3:3a:37:f1:9a:3b:94:de:5d:07:2c: da:0d:1c:bb:fc:b0:0c:0e:df:89:9e:f1:b5:56:8a: b3:06:05:da:6e:3f:e7:f5:f3:96:1d:93:70:7e:76: 46:2f:3e:a7:d8:8b:57:b4:bd:df:7e:08:86:ab:3f: f0:83:86:86:0c:81:86:ab:a4:21:36:55:82:0f:d1: af:84:64:b9:43:84:6e:8b:70:da:df:d5:5b:5d:69: a0:4f:b2:b1:15:16:c1:dd:70:b3:11:f6:e4:3f:01: 5b:61:9a:d8:6f:7c:3d:16:0d:c9:99:92:a1:ec:09: 52:b3:b2:21:07:9c:b0:a3:99:f1:d5:bd:a4:9f:08: bc:71:5b:3c:51:b7:b2:ac:9d:62:85:06:c4:81:c2: ca:5c:cb:af:fe:c2:2f:14:3c:db:33:f2:7a:cf:7a: 78:82:0b:30:f2:f3:a7:30:bf:6e:e6:23:1f:7d:95: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:46:20:46:35:9E:27:33:9A:C6:6F:2A:39:00:A3:76:D0:73:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a6:92:cd:ce:0c:b0:45:a3:88:de:6c:d7:e2:68:f5:70:14: 07:25:ed:ea:80:91:91:73:0f:2f:67:69:3f:9b:2b:ed:da:ba: e2:87:0b:64:e3:49:62:b1:23:cb:ff:85:c4:01:6b:5d:41:cc: ac:e3:be:2f:17:c2:6f:84:ef:07:d1:cb:85:13:e3:46:3c:50: 95:bc:21:87:8b:bc:6d:14:99:a8:83:b7:09:78:81:f4:71:9a: 42:82:7a:bb:2f:8e:2b:83:af:d6:54:70:45:bf:50:ac:26:78: 92:ea:32:92:c9:bb:81:5e:ba:74:57:30:73:1c:a8:c3:ac:27: ac:95:63:46:7c:c1:7f:81:67:65:6e:91:9d:5c:38:ba:16:40: 3f:d6:bf:69:f8:43:27:40:0e:1a:b1:8e:f2:20:89:d6:f8:2c: fb:b4:a0:75:8c:4b:cf:6a:df:81:4b:2d:42:f4:81:19:5f:d4: 50:95:f7:ff:23:2e:2f:51:af:3d:39:dc:42:6e:ec:36:53:72: f8:ba:d4:82:bf:46:99:fa:1b:71:88:be:d6:79:1d:23:46:ef: 51:6a:14:24:30:07:96:1a:5a:2f:98:b9:1e:88:2e:da:a9:d3: 0c:8e:57:66:9d:10:b5:c5:1e:7d:09:ab:be:b6:0d:f8:c7:15: 09:61:0a:10 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErLQPDZJANFAVwZGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MmFjZmZhODktYzc0Yy00OWJiLWFlMDktN2ZhYjM3NGFlNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsnRm6cyra9dEB41if31FAhvuObBLsJaorXe lsJNAAChAkoomKVVSqFGKF9MJ6uKqw15mfZdBN4wqixAWNhdk7tDrMdw4hDtrtKM Qp4+4zo38Zo7lN5dByzaDRy7/LAMDt+JnvG1VoqzBgXabj/n9fOWHZNwfnZGLz6n 2ItXtL3ffgiGqz/wg4aGDIGGq6QhNlWCD9GvhGS5Q4Rui3Da39VbXWmgT7KxFRbB 3XCzEfbkPwFbYZrYb3w9Fg3JmZKh7AlSs7IhB5ywo5nx1b2knwi8cVs8UbeyrJ1i hQbEgcLKXMuv/sIvFDzbM/J6z3p4ggsw8vOnML9u5iMffZVRZQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKWERiBGNZ4nM5rGbyo5AKN20HOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWYzZGMzZTgtNGIyMC0z NWQ1LWFkYTUtNzViOWI1NWY3MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAa6aSzc4MsEWjiN5s1+Jo9XAUByXt6oCRkXMPL2dpP5sr7dq64ocLZONJ YrEjy/+FxAFrXUHMrOO+LxfCb4TvB9HLhRPjRjxQlbwhh4u8bRSZqIO3CXiB9HGa QoJ6uy+OK4Ov1lRwRb9QrCZ4kuoyksm7gV66dFcwcxyow6wnrJVjRnzBf4FnZW6R nVw4uhZAP9a/afhDJ0AOGrGO8iCJ1vgs+7SgdYxLz2rfgUstQvSBGV/UUJX3/yMu L1GvPTncQm7sNlNy+LrUgr9GmfobcYi+1nkdI0bvUWoUJDAHlhpaL5i5Hogu2qnT DI5XZp0QtcUefQmrvrYN+McVCWEKEA== -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:06 2025 by rpki-client