$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa File: 857c88c7-6202-315f-a120-c9da40381623.roa (raw, json) Hash identifier: d2nheO/IeDbKK/Z6vHv8UtTnwDLEeRsbEJQmEMm/Bi0= Subject key identifier: C6:9F:06:BA:FC:E2:74:DC:16:C3:79:E1:72:43:4B:34:5D:19:AE:98 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16153524324EBF8A728B080 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.188.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:53:52:43:24:eb:f8:a7:28:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=8c593889-be30-47b5-a567-2029d615707c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:d0:af:d9:ab:e6:49:39:6c:e5:c2:00:ae: f2:35:6d:25:15:e4:ce:44:28:c2:25:62:2d:19:18: de:4d:bf:c5:10:a0:96:e1:f4:aa:1a:16:e7:e5:22: 58:df:a0:d1:a2:f4:a7:93:61:3c:9e:49:b4:6e:27: d2:91:78:59:d2:b6:6a:98:53:34:aa:40:6c:53:66: 93:4a:17:1b:43:90:23:b4:b4:fd:e7:8f:90:ba:fc: a9:8c:b3:50:70:a7:e4:7a:61:5c:2b:9b:5c:a4:26: 33:77:5c:32:2a:15:1f:e9:52:2c:69:2b:0c:c3:62: 99:4b:71:1e:3e:9b:10:60:3b:7a:d3:4b:48:89:c9: 4e:46:2f:22:32:5d:c1:5e:9f:ec:ba:d2:1a:f5:e8: 91:7f:8c:9a:f0:ed:46:91:73:57:1f:c0:3d:82:f3: 95:21:c5:84:8b:25:2e:fa:d2:2e:22:34:49:01:90: 0b:49:c4:0d:54:aa:62:24:75:a3:bc:c8:f2:8f:cc: 40:fc:77:4f:78:92:5d:a6:a0:8b:53:57:c4:00:63: 3e:da:c1:d0:84:ff:77:e1:71:ce:29:56:76:c2:ae: 57:9b:3a:e0:5e:f4:46:a9:1a:d2:69:a8:05:b8:ca: 79:13:57:69:0b:e7:9c:d1:b8:74:67:36:fc:13:e5: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:06:BA:FC:E2:74:DC:16:C3:79:E1:72:43:4B:34:5D:19:AE:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.188.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dd:e6:66:b4:80:21:25:a8:de:cd:ea:30:df:7e:26:af:45: c3:cb:dc:0c:0b:0c:7e:b0:ad:94:65:ba:61:c5:cf:1f:7f:ba: 32:38:de:f4:db:c1:17:e7:64:fa:e4:d5:0d:c6:bd:dc:12:2d: a8:c9:ec:15:31:e0:ca:77:61:35:a8:dd:cc:9d:b8:06:80:20: 6c:26:c6:b4:22:b0:52:c4:8b:2c:f4:74:8c:1f:79:5d:14:78: 51:88:3f:ed:2f:3b:a7:4f:b0:8e:aa:4b:79:27:5e:5b:89:31: 6f:79:50:e0:f0:76:74:51:15:c3:00:c1:62:0d:44:7f:02:2c: e2:66:b5:1b:10:8b:7d:5d:cc:5c:f2:1a:22:6d:b5:90:6a:c4: a9:fc:31:5c:49:f1:9f:0b:2c:9a:80:cf:03:a7:47:b9:94:1d: a3:91:e3:d7:ce:5d:61:0b:d9:d2:a4:35:03:ef:91:ac:70:6a: 13:ab:d2:f1:20:0c:80:5a:c3:3c:eb:bf:5f:bf:39:4c:c0:14: 82:bb:a7:a7:cf:bc:31:09:16:a8:3e:7b:85:45:8f:38:94:31: b2:1e:5f:a5:b2:d7:96:5b:63:4a:b3:c6:45:81:2d:8f:75:1f: c1:43:aa:63:42:9a:97:bb:9d:77:74:a9:f7:b2:b1:df:92:75: e7:af:c8:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVNSQyTr+KcosIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OGM1OTM4ODktYmUzMC00N2I1LWE1NjctMjAyOWQ2MTU3MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLHQr9mr5kk5bOXCAK7yNW0lFeTORCjCJWIt GRjeTb/FEKCW4fSqGhbn5SJY36DRovSnk2E8nkm0bifSkXhZ0rZqmFM0qkBsU2aT ShcbQ5AjtLT954+QuvypjLNQcKfkemFcK5tcpCYzd1wyKhUf6VIsaSsMw2KZS3Ee PpsQYDt600tIiclORi8iMl3BXp/sutIa9eiRf4ya8O1GkXNXH8A9gvOVIcWEiyUu +tIuIjRJAZALScQNVKpiJHWjvMjyj8xA/HdPeJJdpqCLU1fEAGM+2sHQhP934XHO KVZ2wq5XmzrgXvRGqRrSaagFuMp5E1dpC+ec0bh0Zzb8E+WugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMafBrr84nTcFsN54XJDSzRdGa6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODU3Yzg4YzctNjIwMi0z MTVmLWExMjAtYzlkYTQwMzgxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRLx6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3d5ma0gCElqN7N6jDffiavRcPL3AwLDH6wrZRlumHFzx9/ujI43vTb wRfnZPrk1Q3GvdwSLajJ7BUx4Mp3YTWo3cyduAaAIGwmxrQisFLEiyz0dIwfeV0U eFGIP+0vO6dPsI6qS3knXluJMW95UODwdnRRFcMAwWINRH8CLOJmtRsQi31dzFzy GiJttZBqxKn8MVxJ8Z8LLJqAzwOnR7mUHaOR49fOXWEL2dKkNQPvkaxwahOr0vEg DIBawzzrv1+/OUzAFIK7p6fPvDEJFqg+e4VFjziUMbIeX6Wy15ZbY0qzxkWBLY91 H8FDqmNCmpe7nXd0qfeysd+SdeevyO8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:48 2025 by rpki-client