$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa File: 93db8749-21a8-3ed7-b681-b51e2692f9ec.roa (raw, json) Hash identifier: MhUXD8M6E40roTMFVnkAiaQVNhoDxiowgGfMc7Np9Uk= Subject key identifier: 96:A0:28:16:49:47:E4:00:DC:91:85:CC:BD:04:C5:2D:E8:40:52:D7 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A7085F389B1A590B299B941D6 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 14618 IP address blocks: 68.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f3:89:b1:a5:90:b2:99:b9:41:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=c2b1f373-29e0-4ab0-a105-c98564399c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:be:88:82:e1:0e:4f:f0:1f:bc:9e:ba:cf: bb:0f:5e:62:42:47:4f:6b:b9:22:11:ae:bd:bb:e0: fc:8c:1d:65:9c:85:d1:66:f2:d1:18:86:0a:85:9d: 30:f5:b8:8f:9b:f3:58:8c:19:90:a3:49:47:7a:a0: bd:b8:63:11:e7:f9:cd:27:a5:66:30:b1:25:9c:72: a0:d5:1d:37:d0:69:b9:39:48:87:f4:f8:ee:6f:08: 7c:0c:64:b6:c0:50:8a:05:9e:85:ad:51:4d:72:eb: 20:06:24:e2:44:d1:4f:7c:5c:85:47:6c:c9:d2:bb: 01:1e:d2:a1:ed:8b:f0:5d:34:f5:a8:5e:4a:2a:40: 25:ea:3a:d6:4e:ec:49:5a:22:1c:4e:02:07:b0:d1: f7:1e:9d:ec:e9:fe:4d:d3:97:c2:3f:ab:2d:5e:bb: 75:8a:a5:68:ea:e2:4e:ea:b1:ec:99:9b:92:a9:c9: 58:ca:80:39:3b:ee:38:e6:a9:5a:f6:b4:1d:6f:24: a2:49:84:69:46:99:dd:7d:06:a5:d4:85:f9:9d:47: 1c:d6:28:3f:64:7b:8b:c8:76:90:67:67:2a:bf:29: 00:1e:b2:cc:5a:f3:b2:eb:f5:34:c0:b6:8f:26:bb: 75:78:ff:29:ec:6c:a4:d0:31:0e:2e:9b:42:28:8d: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A0:28:16:49:47:E4:00:DC:91:85:CC:BD:04:C5:2D:E8:40:52:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d2:e3:62:d7:9b:98:a3:11:61:ba:34:d3:05:a4:62:f8:73: d2:ca:b1:a0:f7:04:b0:38:1d:e6:19:de:f2:d5:7e:d1:37:51: 7a:43:de:56:a4:f7:77:dd:1e:56:7e:0e:57:1c:d7:95:fb:92: e4:10:b1:06:7b:46:cc:d0:3b:31:36:e4:c6:b5:1d:8e:12:63: 3d:56:7f:7d:87:63:ef:cd:f1:a9:da:aa:3f:6a:c0:68:ac:f1: 36:16:e7:08:45:56:70:a5:86:76:49:1a:df:5a:e7:5c:f6:6f: 5e:8d:e3:5c:d2:4f:8d:31:77:f1:6e:d8:e1:75:14:7e:fb:fa: 88:4f:0b:b8:2d:fd:04:e1:15:28:52:50:9c:ce:1d:40:8b:d1: cb:0c:e8:68:b6:ba:32:9f:8f:73:2f:6a:dd:99:aa:d0:81:71: ac:0d:7d:fd:72:19:e0:14:04:0b:e6:d3:92:cb:0a:9f:60:fe: eb:7e:dd:d2:7b:c1:5f:d6:f3:6b:47:76:b7:fc:6c:22:d3:a0: 0b:c7:70:82:76:3c:2d:02:bd:7d:71:b0:35:ad:c9:04:b6:34: ce:b7:c7:4c:99:6b:95:23:9e:19:9e:b2:55:a7:46:eb:72:02: 22:7e:2a:5a:a4:93:a0:84:4e:e4:08:2a:bf:cb:c4:58:7e:17: a6:f5:83:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfOJsaWQspm5QdYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk YzJiMWYzNzMtMjllMC00YWIwLWExMDUtYzk4NTY0Mzk5Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAS+iILhDk/wH7yeus+7D15iQkdPa7kiEa69 u+D8jB1lnIXRZvLRGIYKhZ0w9biPm/NYjBmQo0lHeqC9uGMR5/nNJ6VmMLElnHKg 1R030Gm5OUiH9Pjubwh8DGS2wFCKBZ6FrVFNcusgBiTiRNFPfFyFR2zJ0rsBHtKh 7YvwXTT1qF5KKkAl6jrWTuxJWiIcTgIHsNH3Hp3s6f5N05fCP6stXrt1iqVo6uJO 6rHsmZuSqclYyoA5O+445qla9rQdbySiSYRpRpndfQal1IX5nUcc1ig/ZHuLyHaQ Z2cqvykAHrLMWvOy6/U0wLaPJrt1eP8p7Gyk0DEOLptCKI2h5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJagKBZJR+QA3JGFzL0ExS3oQFLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOTNkYjg3NDktMjFhOC0z ZWQ3LWI2ODEtYjUxZTI2OTJmOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvS42LXm5ijEWG6NNMFpGL4c9LKsaD3BLA4HeYZ3vLVftE3UXpD3lak 93fdHlZ+Dlcc15X7kuQQsQZ7RszQOzE25Ma1HY4SYz1Wf32HY+/N8anaqj9qwGis 8TYW5whFVnClhnZJGt9a51z2b16N41zST40xd/Fu2OF1FH77+ohPC7gt/QThFShS UJzOHUCL0csM6Gi2ujKfj3Mvat2ZqtCBcawNff1yGeAUBAvm05LLCp9g/ut+3dJ7 wV/W82tHdrf8bCLToAvHcIJ2PC0CvX1xsDWtyQS2NM63x0yZa5UjnhmeslWnRuty AiJ+Klqkk6CETuQIKr/LxFh+F6b1g8g= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:35 2025 by rpki-client