$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa File: 6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa (raw, json) Hash identifier: X/YRNbuXOOy+LGwoIuUQpZJbw8tlYOShaTbQrwB17N8= Subject key identifier: 74:92:8B:BF:72:D9:C3:CF:E1:06:FA:E4:FC:1B:69:EF:76:A7:0F:2C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB4106F8FD216FFEB296E5C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:06:f8:fd:21:6f:fe:b2:96:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=c8083b04-6901-4ece-979a-b5d5251290be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:6e:2a:13:54:ff:3a:52:7e:cf:4b:6f:2a: ee:85:70:10:b5:77:2c:44:7b:af:ea:77:f8:f5:6a: d4:a1:11:22:bb:ba:8b:e6:3a:8b:8d:ca:df:32:51: 0e:5b:af:d5:c0:ac:07:57:a7:d9:25:35:d6:8b:fc: 6b:2c:3d:23:14:93:43:20:59:6d:0c:1c:16:de:d3: bb:16:22:4c:97:7f:7c:4f:f9:dd:87:fa:ee:57:aa: 30:e6:6a:1f:57:f2:ad:92:e3:73:70:dd:bf:7b:a3: 62:58:ae:a5:ea:c8:9c:a1:ef:79:bd:5e:20:fb:71: 1c:35:6f:0d:bb:88:c1:8f:35:80:37:2b:0d:47:e2: 50:8d:19:2d:6c:94:58:44:c4:e6:90:d2:89:e3:44: d1:f0:2a:cd:81:75:ea:a2:d0:c0:b6:91:26:64:54: e9:e5:e5:36:89:2e:74:00:90:6d:bb:41:9f:2d:fd: 1e:39:7e:97:88:9b:a7:ff:ba:d7:a5:19:c9:69:7f: 96:4d:15:9e:34:52:72:68:bc:f1:4a:b1:87:ec:ca: 6d:e5:8e:c6:b3:a8:91:11:2a:4f:be:e3:90:3e:1a: eb:67:55:3c:18:ed:42:65:0d:38:cc:ec:17:2c:07: 81:90:88:db:fa:80:11:9c:b5:3b:f8:e0:6b:d7:00: 1b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:92:8B:BF:72:D9:C3:CF:E1:06:FA:E4:FC:1B:69:EF:76:A7:0F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:68:a7:f8:ba:03:58:1e:8d:12:33:85:c7:42:b8:e7:71:8c: 3c:09:ac:d4:41:df:61:a7:c9:50:49:f5:7e:06:bf:e7:1a:28: 24:e9:cd:8a:3f:1e:97:e9:96:53:eb:12:de:13:5a:b1:e8:b6: 6c:38:1b:7d:4a:2a:84:7e:c0:2c:0a:db:a6:c4:b8:da:5d:f4: 93:0d:b9:98:ec:f3:2e:44:38:f9:ad:54:6b:1d:3e:36:ca:a0: 56:4e:3a:c8:d0:31:ca:64:31:df:6c:d2:cb:36:0a:45:62:5b: 8a:85:85:08:c3:37:4d:77:6d:f2:3a:2d:e6:8f:4e:50:97:76: 74:7d:76:fa:8e:d4:b8:57:d8:f8:cc:0f:21:a3:5b:34:4d:37: 45:68:d0:6e:4a:6e:9a:c6:74:b5:d0:c6:60:74:0e:d8:bb:e5: a3:39:1c:66:67:94:7b:03:54:ba:ae:84:44:34:97:8c:b4:2e: 2f:e0:1d:db:ea:7d:fa:d4:50:15:5c:32:29:0e:58:4b:e0:56: 7d:ab:35:2e:45:13:da:3f:7b:95:7a:e0:b1:de:76:25:fb:6c: 36:ed:fd:02:6d:c9:b7:9d:5f:9c:33:99:82:34:45:33:66:03: 6b:11:0d:e9:47:b4:58:04:c8:32:ec:e1:78:ab:3e:d9:39:ba: 89:44:2d:b9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErLQQb4/SFv/rKW5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzgwODNiMDQtNjkwMS00ZWNlLTk3OWEtYjVkNTI1MTI5MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgRuKhNU/zpSfs9LbyruhXAQtXcsRHuv6nf4 9WrUoREiu7qL5jqLjcrfMlEOW6/VwKwHV6fZJTXWi/xrLD0jFJNDIFltDBwW3tO7 FiJMl398T/ndh/ruV6ow5mofV/KtkuNzcN2/e6NiWK6l6sicoe95vV4g+3EcNW8N u4jBjzWANysNR+JQjRktbJRYRMTmkNKJ40TR8CrNgXXqotDAtpEmZFTp5eU2iS50 AJBtu0GfLf0eOX6XiJun/7rXpRnJaX+WTRWeNFJyaLzxSrGH7Mpt5Y7Gs6iRESpP vuOQPhrrZ1U8GO1CZQ04zOwXLAeBkIjb+oARnLU7+OBr1wAbOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHSSi79y2cPP4Qb65Pwbae92pw8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmUyNmQ2YTUtODMyZi0z ODllLTg1NDAtNWI4NDZkYzdlOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOWin+LoDWB6NEjOFx0K453GMPAms1EHfYafJUEn1fga/5xooJOnNij8e l+mWU+sS3hNasei2bDgbfUoqhH7ALArbpsS42l30kw25mOzzLkQ4+a1Uax0+Nsqg Vk46yNAxymQx32zSyzYKRWJbioWFCMM3TXdt8jot5o9OUJd2dH12+o7UuFfY+MwP IaNbNE03RWjQbkpumsZ0tdDGYHQO2LvlozkcZmeUewNUuq6ERDSXjLQuL+Ad2+p9 +tRQFVwyKQ5YS+BWfas1LkUT2j97lXrgsd52JftsNu39Am3Jt51fnDOZgjRFM2YD axEN6Ue0WATIMuzheKs+2Tm6iUQtuQ== -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:35 2025 by rpki-client