$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa File: ac931aa9-ba03-3746-9cf6-1c71e451632c.roa (raw, json) Hash identifier: 0Hx/XTG1u9XeF1nnrueLm/GQ4n9beGpZba6Ubli7Ct8= Subject key identifier: 34:74:7D:A1:6E:90:35:CF:E9:BD:23:EB:61:F3:EE:4E:95:CA:7D:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AB7B6312B349658F1B87E8300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 13671 IP address blocks: 68.128.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:31:2b:34:96:58:f1:b8:7e:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=81b3c713-564e-406f-b341-60dec250f520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:cc:79:f6:cf:29:e6:aa:c8:f5:55:af:eb: 84:1d:d6:96:0b:1a:7a:0a:ed:81:c8:c6:cd:fc:d9: 79:f1:89:40:b1:8b:70:30:2b:e0:d2:3c:61:83:72: 57:94:e3:6e:72:d4:7f:cf:57:d0:30:ae:ac:ed:53: c7:1c:91:27:7d:2c:e0:c6:71:23:53:69:e2:08:f1: e1:7a:2e:8b:e8:16:43:52:72:49:30:2e:01:5e:63: 2e:0f:c3:4a:76:34:9e:c8:8a:c1:b1:b6:c3:63:28: 38:03:c9:99:a4:9f:8d:55:dd:24:a8:fd:3b:80:9c: e7:5c:1e:bd:b3:ee:95:59:83:a8:9e:90:0a:e1:f4: 73:45:07:8e:10:83:7a:9c:81:5f:4d:1f:08:68:3f: 39:19:13:14:1d:47:af:74:9f:cf:0a:2c:8a:aa:15: d4:02:7a:2c:88:1b:7b:20:3e:69:98:22:21:f1:4f: db:ad:c0:6d:38:4c:43:4d:9f:41:84:ee:9c:1a:97: e0:06:a9:a0:47:85:58:93:27:64:64:a8:be:c5:55: 5f:44:da:5d:12:b9:d4:2d:ea:94:88:8c:cc:da:39: 0b:1f:af:92:2a:9c:89:f3:e2:e0:a4:c4:bc:66:27: 6e:63:31:e4:fb:f2:93:f7:d5:68:eb:88:83:1e:9b: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:74:7D:A1:6E:90:35:CF:E9:BD:23:EB:61:F3:EE:4E:95:CA:7D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:af:bb:48:00:e3:6c:59:26:4c:c7:2e:c4:ea:fa:9f:61:e7: 78:88:92:e6:ad:bd:1f:26:ba:81:de:32:bc:0c:3b:51:43:54: b4:6e:fe:94:9b:85:72:d8:72:6f:29:d7:f7:6e:66:ce:78:59: 63:9a:01:fa:1e:3b:40:b0:e4:ba:bb:82:d0:ef:0e:27:33:0e: 4a:43:f3:27:54:72:5a:13:77:49:40:c3:0a:59:1d:61:f2:36: 59:5d:b1:15:76:ff:aa:4b:ea:f5:ff:83:f4:e1:63:3d:55:37: dd:f8:d3:dc:d2:4e:62:9f:41:86:b0:6c:44:9b:f8:66:0e:29: 95:3b:d4:75:3a:df:80:0e:d9:88:65:dc:2f:e3:6e:38:ba:af: de:91:00:6a:87:7c:8a:60:14:31:87:11:64:38:66:bd:2e:42: 0f:e5:8b:73:43:e7:b1:eb:85:21:63:ed:01:6a:ed:ff:c0:ce: 58:4c:b5:90:e3:f3:70:1c:88:61:07:1b:7f:6f:29:2c:d8:10: 0c:24:33:d6:aa:02:47:77:23:59:83:d7:f3:b4:8b:61:4e:d6: 2b:74:6a:8f:a0:ef:cb:ae:5b:79:7a:34:c8:bc:a4:66:dc:38: b9:07:77:36:b2:15:da:3f:af:c2:7f:ca:0d:bc:71:2a:be:09: 9d:62:37:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjErNJZY8bh+gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ODFiM2M3MTMtNTY0ZS00MDZmLWIzNDEtNjBkZWMyNTBmNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPXMefbPKeaqyPVVr+uEHdaWCxp6Cu2ByMbN /Nl58YlAsYtwMCvg0jxhg3JXlONuctR/z1fQMK6s7VPHHJEnfSzgxnEjU2niCPHh ei6L6BZDUnJJMC4BXmMuD8NKdjSeyIrBsbbDYyg4A8mZpJ+NVd0kqP07gJznXB69 s+6VWYOonpAK4fRzRQeOEIN6nIFfTR8IaD85GRMUHUevdJ/PCiyKqhXUAnosiBt7 ID5pmCIh8U/brcBtOExDTZ9BhO6cGpfgBqmgR4VYkydkZKi+xVVfRNpdErnULeqU iIzM2jkLH6+SKpyJ8+LgpMS8ZiduYzHk+/KT99Vo64iDHpvJKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR0faFukDXP6b0j62Hz7k6Vyn1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWM5MzFhYTktYmEwMy0z NzQ2LTljZjYtMWM3MWU0NTE2MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2vu0gA42xZJkzHLsTq+p9h53iIkuatvR8muoHeMrwMO1FDVLRu/pSb hXLYcm8p1/duZs54WWOaAfoeO0Cw5Lq7gtDvDiczDkpD8ydUcloTd0lAwwpZHWHy NlldsRV2/6pL6vX/g/ThYz1VN93409zSTmKfQYawbESb+GYOKZU71HU634AO2Yhl 3C/jbji6r96RAGqHfIpgFDGHEWQ4Zr0uQg/li3ND57HrhSFj7QFq7f/AzlhMtZDj 83AciGEHG39vKSzYEAwkM9aqAkd3I1mD1/O0i2FO1it0ao+g78uuW3l6NMi8pGbc OLkHdzayFdo/r8J/yg28cSq+CZ1iNzA= -----END CERTIFICATE-----Generated at Sat Aug 9 10:34:40 2025 by rpki-client