$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa File: ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa (raw, json) Hash identifier: eJmfpJtlMN9V8tED61vgVFYkp1lxyt3iisanYuIJs2M= Subject key identifier: 3D:19:7E:77:79:65:7C:F1:36:60:33:8E:20:34:CA:9F:31:D4:CA:3E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AB7B630F12F9961CB09E04B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 13671 IP address blocks: 68.128.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:30:f1:2f:99:61:cb:09:e0:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=a5bdac34-c39e-4ef4-babc-e38787e962fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:26:eb:38:54:4f:3b:7d:e0:41:ee:3e:72: 03:46:6a:85:b8:f4:ce:1f:de:ba:c6:cc:8a:8e:26: aa:c3:9b:22:e1:e0:14:0c:40:7b:23:07:6b:44:22: f1:23:47:ce:19:3a:5d:d3:72:5b:91:a3:2b:51:8b: 68:fb:e6:97:70:6a:83:91:bf:4e:7c:38:08:93:f2: 71:ed:ff:b7:dd:2d:a9:84:c4:28:8a:93:eb:18:ba: 69:59:14:7e:21:21:6f:03:d8:d7:46:c8:a9:66:3c: 5b:c2:2c:0e:99:8c:29:e6:da:f8:a6:57:8e:ab:35: c3:23:49:8c:7e:5a:4b:94:ef:44:2f:25:0e:2a:3f: 1c:fb:70:e4:33:7e:1b:ae:61:65:92:d7:53:46:c9: bc:90:e3:00:f5:32:11:b4:07:bc:e6:31:0f:2b:86: 98:09:ab:89:59:4e:d5:2c:76:df:20:74:25:ff:7d: 73:70:71:89:dc:65:fc:96:50:05:93:f1:a9:63:f2: 65:0a:67:78:c0:4c:ba:d4:13:f4:86:44:24:fe:c9: 5d:20:fe:4d:31:0d:af:dd:f3:d1:65:86:ac:b6:7a: d9:f3:34:7c:43:de:d9:43:a6:4d:e0:dd:52:ca:1b: 80:7d:32:2f:f3:0f:d1:20:c9:34:f3:b4:50:d2:a0: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:19:7E:77:79:65:7C:F1:36:60:33:8E:20:34:CA:9F:31:D4:CA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b4:ca:8a:cf:72:f4:83:c5:00:57:2b:4f:dc:5e:7f:de:0d: 8d:7d:40:51:2a:a1:b2:f9:35:8e:92:50:59:01:28:20:d0:3e: 38:94:d5:a6:0e:a2:e3:fb:c4:a1:41:2b:64:f7:7a:42:45:b8: 63:b3:d5:13:99:77:26:c3:f3:70:d7:d0:90:c0:13:23:d2:0c: bf:97:16:25:25:f9:e4:45:4b:21:7f:c4:74:b6:36:0b:47:1e: b2:cd:07:59:db:0f:0e:75:39:05:66:6b:11:12:0a:42:d1:3b: d3:2f:91:89:d7:6e:54:6a:c9:aa:b8:14:e1:a5:72:03:00:90: 31:51:3d:a3:27:90:bc:93:c3:b9:55:32:a6:e6:0c:c9:5e:a7: f0:db:f2:8b:97:ac:c0:d8:c6:c2:6b:7b:54:3c:21:16:55:8e: 4e:c7:56:86:0b:5e:b4:80:f6:27:72:6a:26:46:3a:26:80:08: c8:fe:3d:5f:75:2a:e8:34:fe:8d:96:05:bc:17:9f:8a:77:7c: 31:29:91:85:9f:e9:8d:76:27:55:a8:eb:c2:1d:6a:d1:ef:51: 03:48:8d:ae:e9:56:00:a8:54:56:6c:25:62:43:6e:07:70:77: 07:59:d7:5a:6f:1e:c2:90:96:ed:ac:fe:12:40:b9:d8:63:e7: e4:b5:5c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjDxL5lhywngS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YTViZGFjMzQtYzM5ZS00ZWY0LWJhYmMtZTM4Nzg3ZTk2MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMAm6zhUTzt94EHuPnIDRmqFuPTOH966xsyK jiaqw5si4eAUDEB7IwdrRCLxI0fOGTpd03JbkaMrUYto++aXcGqDkb9OfDgIk/Jx 7f+33S2phMQoipPrGLppWRR+ISFvA9jXRsipZjxbwiwOmYwp5tr4pleOqzXDI0mM flpLlO9ELyUOKj8c+3DkM34brmFlktdTRsm8kOMA9TIRtAe85jEPK4aYCauJWU7V LHbfIHQl/31zcHGJ3GX8llAFk/GpY/JlCmd4wEy61BP0hkQk/sldIP5NMQ2v3fPR ZYastnrZ8zR8Q97ZQ6ZN4N1SyhuAfTIv8w/RIMk087RQ0qA8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0Zfnd5ZXzxNmAzjiA0yp8x1Mo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWMyMWNkZDEtZDRmZi0z ZTE2LWFhMWQtMTYzZjlhNmM5MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq0yorPcvSDxQBXK0/cXn/eDY19QFEqobL5NY6SUFkBKCDQPjiU1aYO ouP7xKFBK2T3ekJFuGOz1ROZdybD83DX0JDAEyPSDL+XFiUl+eRFSyF/xHS2NgtH HrLNB1nbDw51OQVmaxESCkLRO9MvkYnXblRqyaq4FOGlcgMAkDFRPaMnkLyTw7lV MqbmDMlep/Db8ouXrMDYxsJre1Q8IRZVjk7HVoYLXrSA9idyaiZGOiaACMj+PV91 Kug0/o2WBbwXn4p3fDEpkYWf6Y12J1Wo68IdatHvUQNIja7pVgCoVFZsJWJDbgdw dwdZ11pvHsKQlu2s/hJAudhj5+S1XCI= -----END CERTIFICATE-----Generated at Sat Aug 9 10:31:20 2025 by rpki-client