$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/634698a1-1aaa-353d-8393-713fabcfb9a1.roa File: 634698a1-1aaa-353d-8393-713fabcfb9a1.roa (raw, json) Hash identifier: rwhT00e+5woS3VpbsdgqH+5xXs7dLX1Rc1KUiqSlA38= Subject key identifier: 34:2D:29:94:D2:D0:DE:B0:CC:5B:7F:6D:DD:31:F9:45:06:D5:4E:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B37D432630945FB669800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/634698a1-1aaa-353d-8393-713fabcfb9a1.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 68.238.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:37:d4:32:63:09:45:fb:66:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=4dbcea5c-26e7-4ec6-8e69-5ce7e235f2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0b:f3:3c:64:84:70:69:08:c5:99:0c:1e:a5: d1:e9:23:52:5e:42:02:41:b1:44:68:54:d0:8c:37: 11:55:ce:db:ed:44:31:90:0b:03:af:47:49:e1:f3: 3b:42:b1:f7:50:e9:e6:e7:20:b0:66:fb:d6:0f:c6: f4:96:82:89:67:68:62:21:9c:1b:f0:f0:4c:74:18: 7d:52:35:70:94:bd:58:d0:df:61:b1:d5:f9:05:8b: 98:87:96:7a:40:c5:69:8d:34:39:8f:ff:a5:a6:6a: 0d:39:7f:dd:88:a8:84:41:bc:0f:0f:0b:cd:5a:d7: d6:03:23:bb:e5:05:15:97:01:5a:94:63:a3:57:83: 12:2f:48:5c:81:fe:c1:54:da:d2:f3:35:2b:c5:2e: 8c:0e:e8:4c:7e:ea:e1:cb:f9:c1:39:5b:7b:96:b1: 22:9a:4b:7d:57:5d:b2:49:c8:16:67:c2:41:0c:01: e9:94:bc:7a:75:d3:08:4f:29:ed:c9:0c:cc:0e:01: f9:c1:ce:23:47:bc:de:f8:ba:1b:98:ae:19:73:11: a6:a3:af:fb:06:6a:b6:73:5e:c4:1a:18:70:09:36: fc:ac:29:a1:44:d8:a4:d6:ae:c2:73:cb:77:0c:10: c4:2e:29:67:51:9e:ac:66:2f:ea:d8:10:3b:c2:3c: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:29:94:D2:D0:DE:B0:CC:5B:7F:6D:DD:31:F9:45:06:D5:4E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/634698a1-1aaa-353d-8393-713fabcfb9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4b:b4:26:56:76:bb:b0:28:e4:0c:39:6b:be:67:09:22:6c: 4a:07:f5:45:4d:5a:30:94:ff:d1:32:45:79:24:86:43:04:cf: ec:82:b7:05:a5:18:dc:bd:de:94:bf:bb:96:e4:69:11:41:d2: 22:ac:71:b7:d9:f0:2e:b1:d5:7d:29:ae:f4:bc:96:4a:d0:63: 07:f3:db:27:27:55:d3:7b:75:a9:1b:26:25:9f:4c:c9:9a:db: ef:b8:d4:49:53:a2:10:cf:83:b9:59:15:55:1f:11:65:dc:3e: 0b:1a:eb:06:8d:6b:5e:e2:ca:0e:70:99:e7:46:13:a2:5b:20: 8d:b2:c8:b7:62:53:ad:15:bf:ee:31:61:dd:d2:d5:ad:0a:84: a8:fe:a5:a6:f9:33:74:b3:64:ef:cf:dd:1d:f3:e7:6e:6e:b2: 35:93:09:81:e2:74:e4:00:aa:db:8e:be:f0:ca:e8:b5:56:5f: 7b:1a:25:52:30:82:35:da:12:42:55:9c:3c:3d:ae:ca:22:26: 61:c7:eb:e1:36:59:01:12:93:48:ad:82:0e:47:2b:72:78:4a: d5:34:68:4c:d6:9d:17:9d:b3:b6:eb:40:b9:23:68:20:70:99: 14:cf:40:e7:f3:c5:d6:d8:83:ab:bc:82:fd:92:eb:d6:88:9b: df:d2:ac:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ezfUMmMJRftmmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NGRiY2VhNWMtMjZlNy00ZWM2LThlNjktNWNlN2UyMzVmMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQvzPGSEcGkIxZkMHqXR6SNSXkICQbFEaFTQ jDcRVc7b7UQxkAsDr0dJ4fM7QrH3UOnm5yCwZvvWD8b0loKJZ2hiIZwb8PBMdBh9 UjVwlL1Y0N9hsdX5BYuYh5Z6QMVpjTQ5j/+lpmoNOX/diKiEQbwPDwvNWtfWAyO7 5QUVlwFalGOjV4MSL0hcgf7BVNrS8zUrxS6MDuhMfurhy/nBOVt7lrEimkt9V12y ScgWZ8JBDAHplLx6ddMITyntyQzMDgH5wc4jR7ze+LobmK4ZcxGmo6/7Bmq2c17E GhhwCTb8rCmhRNik1q7Cc8t3DBDELilnUZ6sZi/q2BA7wjzfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQtKZTS0N6wzFt/bd0x+UUG1U6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjM0Njk4YTEtMWFhYS0z NTNkLTgzOTMtNzEzZmFiY2ZiOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtLtCZWdruwKOQMOWu+ZwkibEoH9UVNWjCU/9EyRXkkhkMEz+yCtwWl GNy93pS/u5bkaRFB0iKscbfZ8C6x1X0prvS8lkrQYwfz2ycnVdN7dakbJiWfTMma 2++41ElTohDPg7lZFVUfEWXcPgsa6waNa17iyg5wmedGE6JbII2yyLdiU60Vv+4x Yd3S1a0KhKj+pab5M3SzZO/P3R3z525usjWTCYHidOQAqtuOvvDK6LVWX3saJVIw gjXaEkJVnDw9rsoiJmHH6+E2WQESk0itgg5HK3J4StU0aEzWnReds7brQLkjaCBw mRTPQOfzxdbYg6u8gv2S69aIm9/SrGM= -----END CERTIFICATE-----Generated at Wed Jun 18 16:38:45 2025 by rpki-client