$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa File: 6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa (raw, json) Hash identifier: bjyTn2Y6OeBt1XBC/g7XKSUYIehY0kZubcg+4jScdUs= Subject key identifier: 58:5A:9B:9E:60:DA:67:A3:A2:11:F7:82:F1:A1:F0:ED:68:62:D0:32 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA8537F262595B0A59BEBB80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 68.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:37:f2:62:59:5b:0a:59:be:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=1419069e-4f5a-4c57-957a-6a6b34b5afbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:fb:d0:b6:d3:d8:65:38:81:bc:27:39:b2: 80:a7:c3:2f:50:51:d6:b3:b9:03:66:ec:42:4a:f6: 68:fb:8e:57:18:89:b4:59:9c:6b:9c:c8:04:f1:02: f4:f9:bd:df:c7:1d:7a:26:4c:77:9c:3f:23:b8:23: 60:82:db:5c:6a:c7:b7:1a:b0:40:c1:48:a9:59:03: b7:65:f5:27:d4:44:bd:06:96:a7:b7:6f:db:20:e8: 3d:7c:70:ab:09:95:a3:5f:bc:43:ad:17:ef:b8:9b: dd:41:e6:23:b7:7d:4b:54:2d:14:87:7d:72:71:17: 55:fa:b2:aa:1b:d1:bf:80:d5:d3:47:61:a9:fa:65: c2:ce:c6:67:97:60:f3:ed:88:c0:90:a4:95:e9:f3: 82:ad:87:f0:91:60:04:65:fb:88:48:2f:de:0a:fd: aa:a8:c0:2d:8e:ff:f6:2e:27:93:a6:c9:02:19:84: d7:a4:03:d3:c7:99:21:8e:87:dc:4e:21:25:22:e5: 11:2b:7f:16:f0:c3:eb:c3:5b:42:dc:11:86:1e:81: ce:09:41:ad:cf:20:03:93:99:88:34:70:3b:7a:15: f4:5f:4e:a3:fb:52:4a:a9:af:01:53:e2:26:a5:6c: 79:8b:e1:2f:fc:32:e7:13:a9:50:c0:92:56:cf:e3: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:9B:9E:60:DA:67:A3:A2:11:F7:82:F1:A1:F0:ED:68:62:D0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9b:d1:54:38:aa:75:af:1b:ea:ae:7d:db:5d:36:43:41:3d: 6f:c0:80:57:69:b8:f3:ca:70:f9:2f:67:1a:7a:6a:e5:46:07: 1a:0d:46:56:33:a0:c7:68:47:1d:b6:a9:ea:82:a6:e3:48:65: f3:33:c0:9e:39:77:41:a6:1d:01:4b:3c:7c:03:19:f3:b0:48: c0:5f:3e:c3:f8:a6:54:21:92:b9:72:73:26:d7:ff:26:90:3a: 11:d0:be:d7:df:1b:1d:72:bc:25:6b:7b:d1:92:c0:3b:5a:0d: 36:22:d5:2f:e4:db:fa:ff:a3:dd:14:19:11:37:5d:31:df:98: bd:36:fb:96:03:14:25:40:5a:56:16:ab:95:5d:53:a1:2f:be: ee:88:43:69:5a:8f:57:63:32:f6:df:3c:57:6c:30:a2:2a:1c: 63:66:12:f9:93:eb:8a:e9:f2:ca:b4:4d:81:e5:79:41:42:6b: 04:4c:b2:79:ac:68:f2:16:e9:be:47:ba:7c:b7:8b:d8:fa:f7: bc:f3:8c:74:12:6c:36:69:30:f6:f8:d6:08:c6:28:3d:25:b4: 27:bb:5c:7b:9d:b3:9e:8c:48:83:24:c4:da:24:71:03:2b:48: ca:ca:9b:46:12:1c:3c:de:34:ca:6e:5e:a0:24:62:be:3b:b1: 1e:93:47:c4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnqhTfyYllbClm+u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MTQxOTA2OWUtNGY1YS00YzU3LTk1N2EtNmE2YjM0YjVhZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyov70LbT2GU4gbwnObKAp8MvUFHWs7kDZuxC SvZo+45XGIm0WZxrnMgE8QL0+b3fxx16Jkx3nD8juCNggttcase3GrBAwUipWQO3 ZfUn1ES9Bpant2/bIOg9fHCrCZWjX7xDrRfvuJvdQeYjt31LVC0Uh31ycRdV+rKq G9G/gNXTR2Gp+mXCzsZnl2Dz7YjAkKSV6fOCrYfwkWAEZfuISC/eCv2qqMAtjv/2 LieTpskCGYTXpAPTx5khjofcTiElIuURK38W8MPrw1tC3BGGHoHOCUGtzyADk5mI NHA7ehX0X06j+1JKqa8BU+ImpWx5i+Ev/DLnE6lQwJJWz+PEdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFham55g2mejohH3gvGh8O1oYtAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmUyNmQ2YTUtODMyZi0z ODllLTg1NDAtNWI4NDZkYzdlOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAF5vRVDiqda8b6q592102Q0E9b8CAV2m488pw+S9nGnpq5UYHGg1GVjOg x2hHHbap6oKm40hl8zPAnjl3QaYdAUs8fAMZ87BIwF8+w/imVCGSuXJzJtf/JpA6 EdC+198bHXK8JWt70ZLAO1oNNiLVL+Tb+v+j3RQZETddMd+YvTb7lgMUJUBaVhar lV1ToS++7ohDaVqPV2My9t88V2wwoiocY2YS+ZPriunyyrRNgeV5QUJrBEyyeaxo 8hbpvke6fLeL2Pr3vPOMdBJsNmkw9vjWCMYoPSW0J7tce52znoxIgyTE2iRxAytI ysqbRhIcPN40ym5eoCRivjuxHpNHxA== -----END CERTIFICATE-----Generated at Mon Jun 16 07:50:35 2025 by rpki-client