$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa File: b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa (raw, json) Hash identifier: 0iWzledZft5XrHcmD7MaLn2l/e+euSP4TYXDr2je+Uw= Subject key identifier: F1:C3:8E:41:45:22:0B:61:27:52:8F:94:89:1F:D7:8B:2D:EC:25:EE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AB7B630C55097C87927481780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 13671 IP address blocks: 68.128.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:30:c5:50:97:c8:79:27:48:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=90d92d1e-08ab-4095-a90b-e21de4f9c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:65:8c:a3:83:9f:d0:67:60:64:06:67:7f: 80:0b:f5:2f:62:29:4a:da:1f:73:7e:e6:50:cf:83: 73:11:59:98:87:91:10:aa:52:d2:9f:09:8f:07:89: 5a:d7:4d:ec:22:fa:52:d8:9a:08:cf:87:e1:14:5f: 75:64:e2:4d:3c:b8:90:c2:a0:6a:15:f2:af:4f:0e: b3:f4:5a:82:a1:e3:0a:b0:a0:2c:0e:90:de:a9:63: 49:36:36:38:9b:6e:d0:d1:68:c9:12:bd:19:e2:cc: c8:ec:83:98:b5:89:18:bb:38:d4:98:60:ec:79:ab: 09:e4:60:67:82:4c:76:34:40:7f:ef:08:d4:9a:5c: 08:43:ec:5f:45:5c:55:9b:c4:f3:fc:66:93:c7:64: f0:b0:73:3b:b1:d6:a0:a6:4d:ef:9a:5f:31:d6:af: 3c:cc:d3:fd:7d:21:98:23:5f:69:f8:39:da:ed:3e: 26:56:78:a2:fe:46:c0:cc:bf:40:e9:9c:77:90:06: 66:be:2b:bd:a5:15:ac:72:85:32:55:ec:e1:e7:f0: 88:57:17:6a:c8:ae:af:29:bc:af:33:45:bd:9c:5b: 80:23:26:56:b4:d5:9f:b0:89:99:62:91:f9:0d:1b: a1:ee:d5:75:98:92:5e:c8:84:fe:9e:e7:32:cf:16: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C3:8E:41:45:22:0B:61:27:52:8F:94:89:1F:D7:8B:2D:EC:25:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:1c:d4:91:4b:68:28:d5:8f:f7:38:2a:02:5d:61:63:ac:30: 91:ca:20:76:11:4d:56:2e:de:e0:73:b8:87:91:9b:9d:83:58: b2:da:93:a0:7b:78:df:f5:be:1a:84:48:c3:a8:2e:8d:36:9a: 3b:d9:c9:6b:16:c7:17:c2:93:8e:2f:ee:bd:52:4b:64:4f:c8: 2f:2d:5d:4e:3e:67:9d:d8:a6:6c:5c:92:54:60:f4:a5:f2:f8: 5f:68:b0:65:76:83:31:04:0d:be:86:56:d8:f9:68:b6:dd:1a: 46:1d:cd:43:ee:e5:8e:16:63:67:6c:1e:25:33:12:fc:71:f1: 01:00:36:53:dd:02:51:97:d8:6c:e7:a1:6f:c6:51:bc:13:f6: 34:d0:f1:8e:ad:6d:ee:4b:b1:bc:91:8f:4f:ff:ad:1f:01:63: 61:58:8a:0e:6a:52:d1:af:4b:73:51:d9:d6:bf:20:67:ce:03: b6:97:51:59:7c:85:9d:51:ab:a9:25:c9:b0:98:f7:30:65:5d: 38:08:2a:55:3c:34:bc:0f:b6:6b:ba:3b:88:5e:10:87:6c:eb: c4:df:f3:d5:81:62:c7:74:24:9d:85:0c:67:c1:d8:bf:a3:25: 28:75:b3:12:e0:ee:b7:95:a3:7b:b6:aa:2a:6a:29:dd:ac:df: f4:5a:67:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjDFUJfIeSdIF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk OTBkOTJkMWUtMDhhYi00MDk1LWE5MGItZTIxZGU0ZjljMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWBljKODn9BnYGQGZ3+AC/UvYilK2h9zfuZQ z4NzEVmYh5EQqlLSnwmPB4la103sIvpS2JoIz4fhFF91ZOJNPLiQwqBqFfKvTw6z 9FqCoeMKsKAsDpDeqWNJNjY4m27Q0WjJEr0Z4szI7IOYtYkYuzjUmGDseasJ5GBn gkx2NEB/7wjUmlwIQ+xfRVxVm8Tz/GaTx2TwsHM7sdagpk3vml8x1q88zNP9fSGY I19p+Dna7T4mVnii/kbAzL9A6Zx3kAZmviu9pRWscoUyVezh5/CIVxdqyK6vKbyv M0W9nFuAIyZWtNWfsImZYpH5DRuh7tV1mJJeyIT+nucyzxYEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHDjkFFIgthJ1KPlIkf14st7CXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjEyYzhhNTEtN2I5Yi0z N2UxLTgzOWEtOWJlZDg1NGIzZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkc1JFLaCjVj/c4KgJdYWOsMJHKIHYRTVYu3uBzuIeRm52DWLLak6B7 eN/1vhqESMOoLo02mjvZyWsWxxfCk44v7r1SS2RPyC8tXU4+Z53YpmxcklRg9KXy +F9osGV2gzEEDb6GVtj5aLbdGkYdzUPu5Y4WY2dsHiUzEvxx8QEANlPdAlGX2Gzn oW/GUbwT9jTQ8Y6tbe5LsbyRj0//rR8BY2FYig5qUtGvS3NR2da/IGfOA7aXUVl8 hZ1Rq6klybCY9zBlXTgIKlU8NLwPtmu6O4heEIds68Tf89WBYsd0JJ2FDGfB2L+j JSh1sxLg7reVo3u2qipqKd2s3/RaZ9k= -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:07 2025 by rpki-client