$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa File: be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa (raw, json) Hash identifier: 9RStfJXLOwUiPBCKnq+v6s/7ZjNskF0Uy5mDTvHRlIE= Subject key identifier: FC:2E:62:6C:57:4F:A6:31:E5:CC:BB:52:4B:88:5E:2E:4A:17:CC:3E Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA16153FE1ADECF571D393200 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 68.118.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:53:fe:1a:de:cf:57:1d:39:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=2f97cf45-f94e-4e85-8b9b-620384f64f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:74:22:27:dd:43:01:3c:b5:1c:65:b6:2a: 79:ac:84:59:ea:84:fa:92:26:29:7e:cc:86:07:c3: f0:98:60:76:f5:45:b8:ae:71:c0:4c:09:7e:52:a5: 10:ea:35:35:cb:e5:c4:33:e3:db:de:4c:f8:af:c8: ca:bc:d5:c4:88:50:82:04:48:1e:54:84:96:b3:50: d1:48:a0:17:0e:5c:6c:1a:11:1e:55:97:75:93:60: 89:ae:73:28:bc:c3:df:20:52:7d:84:65:78:36:7a: 98:1d:4d:33:80:29:0b:d7:d3:75:f1:de:58:b6:58: 4c:d8:f7:4d:e9:4b:40:73:a6:1f:77:a0:e9:c9:aa: f0:5f:1f:85:76:06:a8:6a:44:ce:d9:6d:7b:93:cf: 2e:b0:72:17:93:24:38:b6:f4:e4:d9:1b:10:42:30: 93:37:a7:40:2c:53:cb:ba:fc:ac:18:34:92:47:e2: 15:6b:f9:7b:4a:ad:67:2b:36:9e:2a:44:06:fc:7b: 49:ef:d6:73:0b:87:d5:84:39:e6:eb:e9:82:d0:5c: 13:42:db:91:17:03:f2:8f:a4:7d:70:13:df:02:95: 00:30:85:f5:f4:3c:9d:32:be:62:66:9f:85:67:06: fb:2d:9e:c4:de:5c:6f:3b:35:c5:d3:31:62:6c:a8: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2E:62:6C:57:4F:A6:31:E5:CC:BB:52:4B:88:5E:2E:4A:17:CC:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.118.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b4:ba:05:3c:f2:db:c6:76:c6:7c:9f:a5:98:8a:76:25:87: dc:d5:5a:36:00:0c:b2:7c:1f:6f:0d:83:eb:ac:2f:35:21:4e: 2e:74:6e:29:d4:24:4d:24:39:df:41:27:fa:63:58:43:4f:89: bb:12:72:d9:a5:bc:5a:7a:12:b6:57:3c:0a:83:d4:cd:6d:42: d2:e4:9f:2f:52:ec:3e:0c:e3:40:0f:c7:4c:86:76:eb:94:d9: 82:a5:e9:ba:e0:ae:e8:34:bb:0f:dc:e8:52:d7:a5:35:40:f5: c3:7b:de:06:87:77:50:0e:73:70:6a:9d:7c:38:9e:ea:4f:94: b9:76:47:c2:27:69:41:70:44:53:d2:86:72:94:64:fa:6d:bf: fc:cf:41:b9:bb:5f:a3:f3:54:f0:bb:7c:fb:97:b4:a8:d9:41: d9:9e:cf:5d:08:5c:46:d2:3d:b5:ce:f4:eb:c0:07:7e:ab:5b: 0a:72:cf:0a:de:44:6c:54:dd:79:fc:1a:13:f7:44:0b:bb:08: 50:1a:29:8b:c6:63:3e:95:0c:61:b8:04:1e:d0:8a:53:72:9f: e6:17:26:ea:36:e0:e7:8f:b2:f6:b9:de:e8:5c:98:76:aa:71: f3:ba:fd:b8:b6:a3:0f:c8:3e:52:1a:dc:bb:57:fa:1d:b4:d3: f9:d9:f5:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYVP+Gt7PVx05MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MmY5N2NmNDUtZjk0ZS00ZTg1LThiOWItNjIwMzg0ZjY0Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZh0IifdQwE8tRxltip5rIRZ6oT6kiYpfsyG B8PwmGB29UW4rnHATAl+UqUQ6jU1y+XEM+Pb3kz4r8jKvNXEiFCCBEgeVISWs1DR SKAXDlxsGhEeVZd1k2CJrnMovMPfIFJ9hGV4NnqYHU0zgCkL19N18d5YtlhM2PdN 6UtAc6Yfd6DpyarwXx+FdgaoakTO2W17k88usHIXkyQ4tvTk2RsQQjCTN6dALFPL uvysGDSSR+IVa/l7Sq1nKzaeKkQG/HtJ79ZzC4fVhDnm6+mC0FwTQtuRFwPyj6R9 cBPfApUAMIX19DydMr5iZp+FZwb7LZ7E3lxvOzXF0zFibKh6IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwuYmxXT6Yx5cy7UkuIXi5KF8w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmUxOGZiNGYtYmNjMS0z MmJhLTllOTktMDhlN2EyOTVmMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO0ugU88tvGdsZ8n6WYinYlh9zVWjYADLJ8H28Ng+usLzUhTi50binU JE0kOd9BJ/pjWENPibsSctmlvFp6ErZXPAqD1M1tQtLkny9S7D4M40APx0yGduuU 2YKl6brgrug0uw/c6FLXpTVA9cN73gaHd1AOc3BqnXw4nupPlLl2R8InaUFwRFPS hnKUZPptv/zPQbm7X6PzVPC7fPuXtKjZQdmez10IXEbSPbXO9OvAB36rWwpyzwre RGxU3Xn8GhP3RAu7CFAaKYvGYz6VDGG4BB7QilNyn+YXJuo24OePsva53uhcmHaq cfO6/bi2ow/IPlIa3LtX+h200/nZ9Zw= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:23 2025 by rpki-client