$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa File: ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa (raw, json) Hash identifier: XY1y3mZenMfJEj72YlFtcQqoX6P0yoYIQCeoTT8QxfY= Subject key identifier: 4D:38:4A:AC:23:1A:0A:42:A4:BC:FB:C7:C1:49:59:47:8F:5F:1D:D8 Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F4328584AA0FEFB42FEA5195B49E77F40 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa Signing time: Thu 24 Jul 2025 21:43:51 +0000 ROA not before: Thu 24 Jul 2025 21:43:51 +0000 ROA not after: Wed 22 Oct 2025 21:43:51 +0000 asID: 6939 IP address blocks: 209.142.68.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:fe:fb:42:fe:a5:19:5b:49:e7:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Jul 24 21:43:51 2025 GMT Not After : Oct 22 21:43:51 2025 GMT Subject: CN=b522b1e0-c6f0-4c5d-8802-8bc2d5e0fbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:76:c9:ba:31:5d:ee:35:70:2d:dd:55:41: e9:b0:f4:ba:d6:df:08:f4:60:c3:d1:f2:c6:cd:33: b1:69:3d:d0:89:58:8c:de:9a:14:4a:8f:d2:bb:16: 0b:95:c7:a1:1c:ef:8a:ee:e4:f5:34:e8:2f:af:15: bc:98:e0:a4:30:b8:ac:2d:aa:94:4d:a5:9c:05:b4: 42:2a:74:1e:37:4b:81:30:ac:db:9c:d6:bf:74:be: 95:45:15:24:32:7d:1a:6a:d3:f1:3a:a1:24:5b:f0: e1:bc:72:83:ae:2c:27:c3:8f:a8:2c:c7:71:1f:f0: f4:4e:14:ac:59:d7:88:76:7d:74:36:2b:86:f2:8c: 86:c6:46:e3:57:2c:cd:8d:2b:91:5f:fb:55:d2:25: bb:d5:e5:6f:5c:3c:2f:d3:49:15:0a:15:5b:92:c8: 84:77:03:cd:74:e7:5a:30:1b:04:56:02:60:ce:75: 27:08:fe:38:b1:22:2e:36:79:13:db:69:24:b5:c8: a6:bf:42:a8:0e:22:4e:2d:f4:34:13:61:fb:56:b7: a4:8c:84:a1:af:0b:7d:53:86:4d:e7:45:e6:3d:2c: 65:e1:8c:96:84:24:31:bb:09:87:36:71:a6:8b:83: b2:35:35:e0:19:3b:8f:38:a7:b9:87:fe:5e:6e:87: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:4A:AC:23:1A:0A:42:A4:BC:FB:C7:C1:49:59:47:8F:5F:1D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 209.142.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:92:cc:92:73:94:3c:7a:f8:4a:1b:63:8f:9b:1b:64:4e:ac: 70:4b:ea:fd:4c:cc:7f:f4:19:e4:b3:44:95:a9:4f:4f:08:09: 40:44:86:ae:f5:da:6f:df:26:62:f0:42:ed:9d:91:16:57:89: 40:0f:b0:28:cd:bb:45:f5:fb:f3:56:c6:51:5c:5e:7d:ad:77: d9:12:52:d4:7c:af:e1:22:d2:20:fc:50:44:ae:d2:3c:e8:12: a5:22:21:ec:85:0c:80:d2:20:20:2a:7d:8d:61:78:41:21:40: 45:02:44:b8:0d:57:21:6d:bf:ec:50:5d:62:21:5f:fb:42:f7: ce:fb:ee:20:a3:3f:7d:de:ac:6e:08:13:97:cd:9a:4f:d0:58: 36:b7:0f:26:ea:aa:3e:70:5f:90:f1:5f:92:e7:22:88:87:b4: 88:2a:d6:9f:99:8c:71:b7:18:de:7d:c3:63:fd:9e:af:e9:aa: 8e:6b:09:6b:44:99:74:5c:9f:b4:eb:84:7e:a3:50:5c:b6:7e: 28:e1:f6:12:33:90:c5:80:e5:4a:37:28:d4:60:69:67:05:29: 09:b2:87:a6:64:32:d4:1d:d7:2e:05:19:f7:af:ca:58:f9:5d: bf:0c:3d:3a:74:91:5e:f1:46:40:da:64:a7:5d:2d:0b:4c:47: 5d:8a:aa:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqg/vtC/qUZW0nnf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDcyNDIxNDM1MVoXDTI1MTAyMjIxNDM1MVowLzEtMCsGA1UEAxMk YjUyMmIxZTAtYzZmMC00YzVkLTg4MDItOGJjMmQ1ZTBmYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwd2yboxXe41cC3dVUHpsPS61t8I9GDD0fLG zTOxaT3QiViM3poUSo/SuxYLlcehHO+K7uT1NOgvrxW8mOCkMLisLaqUTaWcBbRC KnQeN0uBMKzbnNa/dL6VRRUkMn0aatPxOqEkW/DhvHKDriwnw4+oLMdxH/D0ThSs WdeIdn10NiuG8oyGxkbjVyzNjSuRX/tV0iW71eVvXDwv00kVChVbksiEdwPNdOda MBsEVgJgznUnCP44sSIuNnkT22kktcimv0KoDiJOLfQ0E2H7VrekjIShrwt9U4ZN 50XmPSxl4YyWhCQxuwmHNnGmi4OyNTXgGTuPOKe5h/5ebof0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE04SqwjGgpCpLz7x8FJWUePXx3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvZWMyZTQyYjEtMGM1Zi0z NDJkLThlMmYtYzNmZGUwMjViNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqSzJJzlDx6+EobY4+bG2ROrHBL6v1MzH/0GeSzRJWpT08ICUBEhq71 2m/fJmLwQu2dkRZXiUAPsCjNu0X1+/NWxlFcXn2td9kSUtR8r+Ei0iD8UESu0jzo EqUiIeyFDIDSICAqfY1heEEhQEUCRLgNVyFtv+xQXWIhX/tC98777iCjP33erG4I E5fNmk/QWDa3Dybqqj5wX5DxX5LnIoiHtIgq1p+ZjHG3GN59w2P9nq/pqo5rCWtE mXRcn7TrhH6jUFy2fijh9hIzkMWA5Uo3KNRgaWcFKQmyh6ZkMtQd1y4FGfevylj5 Xb8MPTp0kV7xRkDaZKddLQtMR12KqjA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:44 2025 by rpki-client