$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa File: 88ae5900-93cc-3311-a858-b4a65a1fbe39.roa (raw, json) Hash identifier: ZnfYh8byNLEmj/7HLlHxbav4ylhOO5ktNcxMZp7N9dc= Subject key identifier: BC:EE:68:49:AC:9F:80:B4:08:ED:7E:CE:21:72:7D:92:26:48:44:0C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB4107CB505F25A023DFFA25 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:07:cb:50:5f:25:a0:23:df:fa:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=836acca2-3d33-44be-84a6-f116d89462ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:92:5f:7d:bb:a4:ad:41:ef:de:bf:4f:bc: 9e:e4:cd:ec:b1:76:8e:1a:cf:da:bb:6d:5b:44:23: cd:f0:8c:d4:90:27:83:6d:5a:2c:9f:23:3f:47:d1: d5:2e:59:e8:6d:4c:59:71:46:90:bd:d7:e0:64:4b: 7c:ac:55:8e:d5:03:b7:d5:03:b1:ac:e3:c8:75:85: da:83:e3:e2:89:50:fa:c1:75:c0:ee:0f:56:89:e9: 7b:28:e2:6f:22:7b:5e:a7:84:82:29:f5:6b:c1:f2: 3a:6d:bc:e5:2e:6b:8b:89:95:bf:00:4d:12:13:2c: df:3b:86:59:63:e1:72:bf:be:a4:73:6f:da:fc:a3: af:a0:14:3e:ba:5d:db:d2:72:b3:a5:d5:5c:73:5e: c3:f9:33:66:cc:23:49:ee:d2:52:a8:5f:75:41:ef: e1:0f:eb:0d:8b:31:96:a6:11:be:59:29:82:12:24: 17:18:17:16:4c:df:5d:14:66:b1:55:88:e1:5b:b5: 90:a0:c0:7b:58:ff:e9:43:9c:32:e0:5d:31:f1:c0: a3:42:27:a2:1a:82:d0:b5:de:c3:0a:80:2a:5e:8d: 81:f1:25:91:cf:91:fc:15:dd:12:6d:7f:de:29:ff: 37:dc:e4:69:42:c0:5b:75:26:d3:a4:bd:42:8f:ef: 0a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EE:68:49:AC:9F:80:B4:08:ED:7E:CE:21:72:7D:92:26:48:44:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d5:90:7f:5b:0f:dd:2d:1e:f6:d4:16:2b:5f:41:25:7c:0b: f3:d0:a1:27:8a:36:72:f0:bc:cd:30:7d:9f:19:57:a1:18:13: 21:6d:ce:38:85:37:08:3f:f8:bb:a8:ba:cc:0f:14:7e:cb:b4: 7d:41:0d:46:bf:8f:05:6f:fa:83:74:af:4f:de:de:70:91:99: 38:67:c9:f2:55:30:79:45:96:44:0d:22:6c:02:51:85:90:67: 83:6f:73:8b:56:6d:27:72:21:89:5c:a0:2e:40:20:4a:96:9a: c6:9b:0f:96:50:08:a6:67:98:e2:ec:12:6b:d9:34:d8:11:41: 1a:6a:d5:c7:a8:31:78:32:89:47:36:b2:e3:dc:aa:81:6b:6c: 37:8b:43:ff:6b:ca:4d:1a:00:6c:6b:84:36:5a:da:e9:c0:06: 00:53:d5:3a:8d:3c:c6:9b:6b:07:04:67:76:0e:f3:5f:e0:2b: 85:36:90:31:e5:f4:0b:b5:d3:79:b7:68:2f:21:ca:56:6e:9e: 10:01:4c:97:98:cf:fe:87:07:ea:cc:87:1f:92:b7:16:0b:3a: 46:32:0b:db:80:bb:39:cc:c1:ea:bb:1c:1d:8c:d2:e0:f4:12: b3:87:7b:d6:ec:dd:3f:46:08:91:42:4a:31:96:a9:1d:2f:27: 9a:98:52:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQfLUF8loCPf+iUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODM2YWNjYTItM2QzMy00NGJlLTg0YTYtZjExNmQ4OTQ2MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunmSX327pK1B796/T7ye5M3ssXaOGs/au21b RCPN8IzUkCeDbVosnyM/R9HVLlnobUxZcUaQvdfgZEt8rFWO1QO31QOxrOPIdYXa g+PiiVD6wXXA7g9Wiel7KOJvIntep4SCKfVrwfI6bbzlLmuLiZW/AE0SEyzfO4ZZ Y+Fyv76kc2/a/KOvoBQ+ul3b0nKzpdVcc17D+TNmzCNJ7tJSqF91Qe/hD+sNizGW phG+WSmCEiQXGBcWTN9dFGaxVYjhW7WQoMB7WP/pQ5wy4F0x8cCjQieiGoLQtd7D CoAqXo2B8SWRz5H8Fd0SbX/eKf833ORpQsBbdSbTpL1Cj+8KfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzuaEmsn4C0CO1+ziFyfZImSEQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODhhZTU5MDAtOTNjYy0z MzExLWE4NTgtYjRhNjVhMWZiZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7VkH9bD90tHvbUFitfQSV8C/PQoSeKNnLwvM0wfZ8ZV6EYEyFtzjiF Nwg/+LuouswPFH7LtH1BDUa/jwVv+oN0r0/e3nCRmThnyfJVMHlFlkQNImwCUYWQ Z4Nvc4tWbSdyIYlcoC5AIEqWmsabD5ZQCKZnmOLsEmvZNNgRQRpq1ceoMXgyiUc2 suPcqoFrbDeLQ/9ryk0aAGxrhDZa2unABgBT1TqNPMabawcEZ3YO81/gK4U2kDHl 9Au103m3aC8hylZunhABTJeYz/6HB+rMhx+StxYLOkYyC9uAuznMweq7HB2M0uD0 ErOHe9bs3T9GCJFCSjGWqR0vJ5qYUjE= -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:27 2025 by rpki-client