$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa File: 0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa (raw, json) Hash identifier: GGiM+w4dPbfLvG6X9/6qNOTHMDk23WtjFCusR9/wM7s= Subject key identifier: EB:C8:F9:FA:5B:42:5D:03:40:25:68:8A:89:B4:92:FE:07:A0:8C:DC Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16156070C12657C097ED7A0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.191.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:56:07:0c:12:65:7c:09:7e:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=e8fc8afe-627f-4367-9a3f-6fca6c5ef723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:5b:2a:24:19:82:a8:e8:45:37:71:f8:da: 85:75:1e:38:77:d8:b8:40:19:ec:e4:21:15:5f:bb: 5b:3b:88:93:a3:33:cd:1c:02:84:d8:67:50:fd:21: 49:b1:56:62:7b:4d:9c:f7:52:6b:9a:83:74:19:ea: 15:a5:92:92:c0:26:7d:cb:30:f4:04:9a:70:37:d7: 01:8a:ab:05:87:33:80:da:36:8a:ff:44:a0:71:f8: 48:3d:84:bd:05:7e:d5:8c:47:1a:99:ce:43:c1:cf: cf:3d:7b:01:3a:bd:20:54:8b:ff:88:32:b5:8c:f6: d8:2d:fb:24:06:e7:1b:4b:50:60:7b:6d:ee:e3:6b: bb:a8:e9:f6:ae:fb:0b:5f:8c:80:f0:b4:16:f8:cb: c1:d4:12:aa:b1:f0:e6:e1:09:f6:50:45:81:2e:98: d1:37:4b:c3:52:52:11:51:23:f3:fa:c2:36:64:77: d8:1b:d3:84:62:aa:c4:f0:02:77:08:49:6d:cb:1b: d7:c7:7f:25:30:7b:ba:96:c3:88:3c:8b:26:d8:f5: e7:ff:91:1d:2f:99:8c:e8:fd:d2:74:c6:33:26:f5: c6:8c:0e:5e:8b:0d:fb:ff:75:9f:bd:f0:f2:ed:84: 81:79:bc:37:b7:2a:5d:e9:6f:07:a6:16:86:6c:93: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C8:F9:FA:5B:42:5D:03:40:25:68:8A:89:B4:92:FE:07:A0:8C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5d:aa:64:3a:1a:06:5c:9e:6b:db:ab:af:41:66:6c:df:1a: 43:ec:54:20:ba:6d:dd:05:eb:ef:c1:21:94:42:3d:f0:43:87: 7a:8f:8f:d4:0d:67:ef:3a:de:bb:4e:16:de:3f:b9:14:a8:18: a0:80:b0:ea:4b:03:a0:dd:04:aa:b2:7a:65:d5:13:98:64:cd: 39:71:29:03:7f:e7:a4:bb:e3:f6:c6:66:a0:06:7d:c2:7c:e2: f3:c1:4f:4b:14:4e:e8:e9:1d:98:b4:c9:45:08:cc:8f:55:7c: 82:0e:71:32:ff:51:24:65:a0:75:62:2f:bd:d0:6f:44:22:71: b9:88:90:3b:6b:53:0f:7b:a5:b4:3a:6e:8b:f1:2c:46:56:df: 5f:96:98:34:2f:2d:35:28:69:b1:b9:d5:4a:a8:63:4f:be:dc: 19:a7:e1:fe:52:ff:2c:29:13:e0:7a:10:68:90:94:74:61:cd: c3:d5:c6:9c:54:be:10:ee:60:43:da:5e:85:dc:9c:c5:16:8a: 62:34:06:1a:78:b1:d3:0f:e4:d2:d1:bd:58:8b:97:cd:b6:38: 04:45:69:55:e4:09:5f:15:95:ea:6b:6e:09:3e:46:9a:8f:87: 1c:60:35:95:46:dc:5f:e3:f2:53:ca:68:33:65:56:dc:0d:ab: 37:7e:92:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVYHDBJlfAl+16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZThmYzhhZmUtNjI3Zi00MzY3LTlhM2YtNmZjYTZjNWVmNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2glbKiQZgqjoRTdx+NqFdR44d9i4QBns5CEV X7tbO4iTozPNHAKE2GdQ/SFJsVZie02c91JrmoN0GeoVpZKSwCZ9yzD0BJpwN9cB iqsFhzOA2jaK/0SgcfhIPYS9BX7VjEcamc5Dwc/PPXsBOr0gVIv/iDK1jPbYLfsk BucbS1Bge23u42u7qOn2rvsLX4yA8LQW+MvB1BKqsfDm4Qn2UEWBLpjRN0vDUlIR USPz+sI2ZHfYG9OEYqrE8AJ3CEltyxvXx38lMHu6lsOIPIsm2PXn/5EdL5mM6P3S dMYzJvXGjA5eiw37/3WfvfDy7YSBebw3typd6W8HphaGbJPFPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvI+fpbQl0DQCVoiom0kv4HoIzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGQ4NjhiZTgtMzkxMy0z ZTQ2LTlkOGYtYTBjYjdiZDEyMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRdqmQ6GgZcnmvbq69BZmzfGkPsVCC6bd0F6+/BIZRCPfBDh3qPj9QN Z+863rtOFt4/uRSoGKCAsOpLA6DdBKqyemXVE5hkzTlxKQN/56S74/bGZqAGfcJ8 4vPBT0sUTujpHZi0yUUIzI9VfIIOcTL/USRloHViL73Qb0QicbmIkDtrUw97pbQ6 bovxLEZW31+WmDQvLTUoabG51UqoY0++3Bmn4f5S/ywpE+B6EGiQlHRhzcPVxpxU vhDuYEPaXoXcnMUWimI0Bhp4sdMP5NLRvViLl822OARFaVXkCV8Vleprbgk+RpqP hxxgNZVG3F/j8lPKaDNlVtwNqzd+koE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:19 2025 by rpki-client