$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd721385-71db-376b-8f0d-b8bd8a12c60d.roa File: fd721385-71db-376b-8f0d-b8bd8a12c60d.roa (raw, json) Hash identifier: KjBXN2Xe0JEtwhVgx6NNv4VXJ9UVPEXNNt88EvJI1qE= Subject key identifier: D8:0E:40:9D:40:C4:31:08:37:27:77:B0:56:D4:B2:93:89:00:FA:61 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AB7B630DAFDF77F8B237AFF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd721385-71db-376b-8f0d-b8bd8a12c60d.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 13671 IP address blocks: 68.128.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:30:da:fd:f7:7f:8b:23:7a:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=4853cf50-9c3d-4037-89d0-92455cfed3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:f0:f8:74:bc:74:a8:7e:e9:dd:e2:f2:d4: ef:16:40:a4:e8:65:79:ea:a3:3e:0e:cb:e7:91:97: 5f:98:ff:da:33:21:4b:73:5a:15:cf:c3:23:e7:4d: 65:d9:79:41:7d:9d:8e:4b:07:ef:39:70:c0:54:df: ed:97:c2:eb:18:c8:1a:8e:0c:eb:a5:a3:20:1a:21: dc:ef:69:21:c2:e4:02:3e:0a:0b:0b:be:d5:bd:18: f5:ac:c3:83:47:d8:f7:71:d3:97:bc:e4:fa:57:e1: a5:cb:a5:4d:c7:bb:99:9a:eb:11:39:b1:f5:92:d3: 05:16:06:d0:4b:6d:b4:b6:96:f7:e8:bc:b2:48:46: 44:02:86:d1:01:1b:17:0c:35:3f:29:3e:20:4c:70: 13:bf:18:51:06:a8:ca:2a:61:2c:0c:7a:3d:a0:ba: 4d:62:d4:27:8e:5b:c9:75:15:74:0b:a4:21:b5:33: df:64:94:5f:e7:83:35:86:62:53:06:a2:54:2d:4e: ad:ff:4d:a2:ca:25:f7:27:28:d5:47:f5:0a:e7:e1: d4:04:3d:6d:cc:8a:da:ae:7a:d1:bb:a7:48:b8:62: 68:9b:75:8f:ea:56:a3:d8:d3:2f:79:69:0c:f4:6b: 92:a2:33:37:4c:dc:53:cf:58:15:95:22:48:c4:6c: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0E:40:9D:40:C4:31:08:37:27:77:B0:56:D4:B2:93:89:00:FA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd721385-71db-376b-8f0d-b8bd8a12c60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5e:f1:ef:c5:dc:85:18:e2:df:87:20:f2:73:f0:b2:6e:0d: e2:41:95:3d:42:46:f2:5d:27:47:3d:e3:82:e7:c7:07:ea:a7: ae:a0:75:ee:20:72:3e:21:34:27:eb:0d:9b:6d:76:07:f6:91: 1a:bf:62:0b:59:98:97:a8:15:43:5e:64:2a:83:d0:37:d2:d6: 6b:6c:cb:e5:55:84:cf:b5:66:9b:34:3b:a3:f6:b0:11:7d:8f: c8:e4:cf:c6:32:bd:5e:a1:80:f1:d8:c5:f5:60:55:ac:c3:5c: b9:d1:18:dc:d3:f2:7b:99:2a:67:40:b0:df:d2:9e:7e:4c:f8: eb:d1:76:6f:67:4a:b1:f1:40:05:f4:84:5c:27:97:50:68:04: ce:df:6f:4b:e7:66:1a:27:6c:cb:e2:69:c4:5e:5c:43:0e:fb: b0:55:7c:2f:6e:12:58:53:37:48:d7:96:99:88:b8:8d:0c:6a: 04:a3:a3:79:41:04:48:40:68:d1:b3:b5:1f:3c:65:92:c2:3d: 9d:fd:79:59:19:89:3f:0f:59:ae:cb:35:7a:aa:70:c3:ad:bd: 86:c3:b7:7a:e3:0b:03:bf:fa:51:05:bf:05:3f:29:8b:8a:d7: af:62:2c:8a:e0:95:e2:c1:95:e2:5a:12:1d:9c:a5:4a:17:fe: 2f:89:02:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjDa/fd/iyN6/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NDg1M2NmNTAtOWMzZC00MDM3LTg5ZDAtOTI0NTVjZmVkM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUzw+HS8dKh+6d3i8tTvFkCk6GV56qM+Dsvn kZdfmP/aMyFLc1oVz8Mj501l2XlBfZ2OSwfvOXDAVN/tl8LrGMgajgzrpaMgGiHc 72khwuQCPgoLC77VvRj1rMODR9j3cdOXvOT6V+Gly6VNx7uZmusRObH1ktMFFgbQ S220tpb36LyySEZEAobRARsXDDU/KT4gTHATvxhRBqjKKmEsDHo9oLpNYtQnjlvJ dRV0C6QhtTPfZJRf54M1hmJTBqJULU6t/02iyiX3JyjVR/UK5+HUBD1tzIrarnrR u6dIuGJom3WP6laj2NMveWkM9GuSojM3TNxTz1gVlSJIxGxuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgOQJ1AxDEINyd3sFbUspOJAPphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmQ3MjEzODUtNzFkYi0z NzZiLThmMGQtYjhiZDhhMTJjNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFe8e/F3IUY4t+HIPJz8LJuDeJBlT1CRvJdJ0c944Lnxwfqp66gde4g cj4hNCfrDZttdgf2kRq/YgtZmJeoFUNeZCqD0DfS1mtsy+VVhM+1Zps0O6P2sBF9 j8jkz8YyvV6hgPHYxfVgVazDXLnRGNzT8nuZKmdAsN/Snn5M+OvRdm9nSrHxQAX0 hFwnl1BoBM7fb0vnZhonbMviacReXEMO+7BVfC9uElhTN0jXlpmIuI0MagSjo3lB BEhAaNGztR88ZZLCPZ39eVkZiT8PWa7LNXqqcMOtvYbDt3rjCwO/+lEFvwU/KYuK 169iLIrgleLBleJaEh2cpUoX/i+JAqE= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:33 2025 by rpki-client