$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa File: d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json) Hash identifier: yf4IfBKcaommHN75EOv3iFMUKouLOiehWkLtuUkLyb8= Subject key identifier: 43:A8:D4:65:37:3D:9C:16:08:71:D9:92:03:78:57:AD:2E:D2:48:5C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB41070B758477A7F2F9D900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.131.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:07:0b:75:84:77:a7:f2:f9:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=39bbfac9-a192-42bb-ade4-30d4aa2078f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:8b:c8:cf:80:e2:15:25:fc:3b:11:02:31: 61:b4:16:53:12:f8:3e:c1:7d:3d:81:e5:5a:3e:81: e9:10:d2:14:02:76:67:e7:4d:fe:2a:f5:80:7e:1d: 5f:d5:d6:77:46:c8:a1:c6:0e:9f:d8:09:3d:d9:42: 81:21:92:f5:ad:32:04:33:d1:09:b9:f6:66:30:dc: 62:8a:86:ca:0c:4e:95:56:f6:f4:47:b0:a5:85:bc: 12:03:c5:95:79:3f:53:05:1d:ff:21:08:da:62:0d: 81:6a:74:8b:46:69:58:0d:a6:3a:38:91:35:b8:56: 22:49:85:62:da:0d:b1:55:b7:61:19:e0:d1:5f:6f: a1:eb:45:54:35:ea:9b:b3:4e:95:1e:40:8e:77:ef: 5c:e8:7f:4a:d2:b9:50:88:26:f5:43:cd:8a:6c:8c: a4:bb:4b:77:00:53:f8:f9:18:df:91:79:f5:e1:8a: a9:f3:b4:b3:4c:28:10:9e:20:03:e9:74:07:a1:34: 8a:3a:0e:12:23:3b:a4:82:64:c7:4f:22:e3:6d:ea: 8b:bf:5f:fb:f5:f1:a3:f0:7b:f6:63:a4:01:d3:ed: 3c:69:4f:ca:c2:bd:25:9e:20:ae:ac:67:78:08:6a: 06:02:12:37:6c:6b:bc:0e:70:63:a5:b1:14:b8:b7: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A8:D4:65:37:3D:9C:16:08:71:D9:92:03:78:57:AD:2E:D2:48:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.131.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:83:09:66:d7:3a:24:23:43:81:d7:c9:0e:24:d4:69:82:32: f5:51:f4:db:5e:75:7d:ec:e6:3a:39:15:8d:22:92:62:65:cd: 4c:11:d0:de:e3:27:7d:a3:e9:12:0f:7e:18:8e:d1:f5:8d:30: 53:6e:8c:a8:02:29:c4:5a:4f:27:c7:cb:08:37:d0:e5:2f:88: 99:89:fd:46:29:1f:27:d6:ae:3f:ce:3e:d1:fb:af:ce:5e:f4: 0f:30:02:11:69:3c:36:70:9c:75:8f:d7:7f:21:84:56:a0:23: 5c:38:c5:51:c2:90:13:fb:3a:bb:78:b4:15:13:50:6f:eb:16: 80:d2:d2:90:55:e5:a3:36:0a:ec:1b:33:39:83:c0:11:8d:c1: 62:5e:66:a1:25:20:35:a4:f9:4e:06:3f:c2:53:6b:f9:ca:65: f5:d5:e4:00:2c:e2:f2:46:4a:0a:c6:39:77:f9:32:f9:1b:38: 41:a4:8d:51:fa:f1:0c:3f:42:62:b8:b6:bc:ae:47:0f:0c:05: 00:76:ee:33:ab:fb:4b:a5:f7:34:22:46:ba:e1:6c:8c:22:25: 39:2b:7f:77:fa:7b:f6:29:b9:cc:8e:9d:16:9a:86:aa:1b:1d: 28:45:62:ab:80:74:b2:3e:73:31:38:7d:e6:47:5a:66:0f:26: 00:f7:88:1b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErLQQcLdYR3p/L52QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzliYmZhYzktYTE5Mi00MmJiLWFkZTQtMzBkNGFhMjA3OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm02LyM+A4hUl/DsRAjFhtBZTEvg+wX09geVa PoHpENIUAnZn503+KvWAfh1f1dZ3Rsihxg6f2Ak92UKBIZL1rTIEM9EJufZmMNxi iobKDE6VVvb0R7ClhbwSA8WVeT9TBR3/IQjaYg2BanSLRmlYDaY6OJE1uFYiSYVi 2g2xVbdhGeDRX2+h60VUNeqbs06VHkCOd+9c6H9K0rlQiCb1Q82KbIyku0t3AFP4 +RjfkXn14Yqp87SzTCgQniAD6XQHoTSKOg4SIzukgmTHTyLjbeqLv1/79fGj8Hv2 Y6QB0+08aU/Kwr0lniCurGd4CGoGAhI3bGu8DnBjpbEUuLcjawIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEOo1GU3PZwWCHHZkgN4V60u0khcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUyMWY3MzQtZGIwNi0z MTliLTg2ZjYtN2U1YWE0M2YyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhoMJZtc6JCNDgdfJDiTUaYIy9VH02151fezmOjkVjSKSYmXNTBHQ3uMn faPpEg9+GI7R9Y0wU26MqAIpxFpPJ8fLCDfQ5S+ImYn9RikfJ9auP84+0fuvzl70 DzACEWk8NnCcdY/XfyGEVqAjXDjFUcKQE/s6u3i0FRNQb+sWgNLSkFXlozYK7Bsz OYPAEY3BYl5moSUgNaT5TgY/wlNr+cpl9dXkACzi8kZKCsY5d/ky+Rs4QaSNUfrx DD9CYri2vK5HDwwFAHbuM6v7S6X3NCJGuuFsjCIlOSt/d/p79im5zI6dFpqGqhsd KEViq4B0sj5zMTh95kdaZg8mAPeIGw== -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:52 2025 by rpki-client