$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa File: 68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa (raw, json) Hash identifier: RLTImEGEbi8Xvm4jNS0BdffW4Waq9JOj6OwaITQIcAw= Subject key identifier: 44:76:EF:58:CE:C7:79:E2:BA:7E:DF:CF:EA:81:8D:C7:D8:F3:10:4E Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Certificate serial: 010D0C9F4328584A77808F124F32BA56D61F9900 Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 396032 IP address blocks: 64.38.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8f:12:4f:32:ba:56:d6:1f:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=1d69ecbd-4bea-4560-a40d-ea6b608d6fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:7a:35:ba:d8:8e:78:81:e9:b8:3f:a2:72: 0b:e4:f1:64:ce:3a:c0:b9:d2:6a:36:86:56:1b:82: dc:59:52:84:55:12:f4:25:d9:23:cc:9d:e7:bc:c8: e4:75:81:3a:78:23:b7:9f:31:5e:d9:15:92:f3:2b: 1b:2d:ee:c0:cc:d7:13:cc:7d:2e:de:6f:56:93:4c: 54:14:6a:64:91:60:bb:45:12:f5:59:c7:be:90:e7: 4d:fb:12:e0:14:5d:05:c5:9c:66:fa:23:94:32:b2: d3:61:60:49:f3:63:61:f4:05:38:b6:a0:85:b2:b7: 1b:3a:6e:f5:db:7a:72:39:f4:60:6d:12:ee:e1:5e: 3d:f0:c0:46:23:a4:f2:cf:95:f3:7a:5d:2f:64:1d: 2a:a3:d0:79:27:28:2a:5a:e9:67:df:06:1a:75:f8: f5:8c:78:b3:65:e1:55:72:de:f2:1e:7d:89:ba:e1: 1f:55:1d:13:7f:6a:34:99:7a:05:9c:e5:b8:7a:76: f8:f8:0d:62:3a:7b:07:ae:b4:b0:8e:81:8b:0e:1e: a9:6a:63:77:1a:83:7d:51:47:2e:20:fe:d9:06:be: a6:d1:07:9c:94:5f:73:40:ae:ac:d3:86:4d:82:b5: 04:76:08:8e:34:77:de:dc:da:51:4f:1a:f5:25:c5: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:76:EF:58:CE:C7:79:E2:BA:7E:DF:CF:EA:81:8D:C7:D8:F3:10:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl X509v3 Authority Key Identifier: keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer sbgp-ipAddrBlock: critical IPv4: 64.38.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:f3:03:4d:05:df:86:5a:e6:3f:6a:3d:7a:6b:59:76:e7:96: 96:6a:3e:51:e7:c0:42:64:39:98:b8:ae:0d:9e:2a:e6:a5:be: dd:15:b0:06:60:9f:cb:df:83:0c:5d:72:53:52:fc:f8:c2:6d: 36:99:15:f6:63:74:b7:64:0f:5d:81:72:bc:f3:a1:26:56:f0: f4:15:09:75:24:2b:c4:05:13:90:67:fc:56:65:32:58:17:ad: 27:ac:b4:95:be:cc:ea:e7:2c:ce:bf:da:39:db:f9:03:22:21: 4f:9b:42:a8:92:e7:e9:52:7c:a2:ff:ee:3d:37:26:e4:3f:ae: f1:88:11:4d:12:b7:d6:f9:f4:8a:0a:8f:57:2d:05:70:bf:cc: 11:8f:6d:c8:ce:73:b5:bd:fc:d7:54:0b:8d:fd:ab:b4:3b:97: 6b:11:0f:f9:1f:04:93:14:80:af:9c:14:10:8e:5f:ce:6f:d7: 4b:68:8b:42:2c:94:6b:04:75:3d:52:34:3d:82:2a:1e:6c:c0: 3d:81:5a:93:43:59:f2:69:1c:66:c9:f4:e3:cd:ae:78:3b:99: 84:cb:30:0d:dd:02:1e:4e:3b:61:81:27:1a:da:93:01:35:d6: 72:d7:04:e5:ed:69:97:2d:7f:55:8f:07:dd:65:cc:6e:99:21: b2:74:37:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gI8STzK6VtYfmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz YzE2MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MWQ2OWVjYmQtNGJlYS00NTYwLWE0MGQtZWE2YjYwOGQ2ZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqx6NbrYjniB6bg/onIL5PFkzjrAudJqNoZW G4LcWVKEVRL0JdkjzJ3nvMjkdYE6eCO3nzFe2RWS8ysbLe7AzNcTzH0u3m9Wk0xU FGpkkWC7RRL1Wce+kOdN+xLgFF0FxZxm+iOUMrLTYWBJ82Nh9AU4tqCFsrcbOm71 23pyOfRgbRLu4V498MBGI6Tyz5Xzel0vZB0qo9B5JygqWuln3wYadfj1jHizZeFV ct7yHn2JuuEfVR0Tf2o0mXoFnOW4enb4+A1iOnsHrrSwjoGLDh6pamN3GoN9UUcu IP7ZBr6m0QeclF9zQK6s04ZNgrUEdgiONHfe3NpRTxr1JcXiiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER271jOx3niun7fz+qBjcfY8xBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvNjhkYzY4YWUtYjZjNC0z NzAxLWEyYWQtNjIwOThiMWYxMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3 MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2 ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHzA00F34Za5j9qPXprWXbnlpZqPlHnwEJkOZi4rg2eKualvt0VsAZg n8vfgwxdclNS/PjCbTaZFfZjdLdkD12BcrzzoSZW8PQVCXUkK8QFE5Bn/FZlMlgX rSestJW+zOrnLM6/2jnb+QMiIU+bQqiS5+lSfKL/7j03JuQ/rvGIEU0St9b59IoK j1ctBXC/zBGPbcjOc7W9/NdUC439q7Q7l2sRD/kfBJMUgK+cFBCOX85v10toi0Is lGsEdT1SND2CKh5swD2BWpNDWfJpHGbJ9OPNrng7mYTLMA3dAh5OO2GBJxrakwE1 1nLXBOXtaZctf1WPB91lzG6ZIbJ0N1Y= -----END CERTIFICATE-----Generated at Mon Aug 4 14:49:54 2025 by rpki-client