$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa File: 8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (raw, json) Hash identifier: /pkSF4KFF3ZX6KYg22/7dH2r+79zo1y8iivYnnzsLd0= Subject key identifier: 46:D8:D0:74:1F:19:62:BF:83:64:D0:75:D9:81:C6:3A:90:29:AD:B5 Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Certificate serial: 010D0C9F4328584AB220CD796FF6EF7EC2CDB200 Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 14618 IP address blocks: 68.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:cd:79:6f:f6:ef:7e:c2:cd:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=c0dead52-6caf-4b00-86d5-5d6775f0b90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:20:b3:aa:8e:92:8d:ed:ed:92:e3:b5:9a: f3:c7:b2:78:92:cb:63:83:89:34:34:27:97:bf:ec: 91:d8:8e:a0:79:73:f9:4a:5e:ec:d3:9d:ed:a0:41: 8e:9b:84:4f:58:7e:2e:6e:14:d9:30:cd:b3:1d:31: 2d:68:c7:a0:89:69:70:a8:6f:63:fe:68:84:7e:32: 97:bc:1a:d3:ad:34:dc:8a:e0:54:ce:e5:17:3b:75: fe:c7:dd:2c:1c:0b:9a:12:cb:d3:e4:80:d6:03:00: 8b:b2:5a:fb:81:f8:a4:40:f0:dd:68:30:69:af:62: 89:39:41:4f:dc:0f:39:f2:73:29:62:5a:19:30:09: 62:de:23:7e:dc:81:fe:0a:ca:0d:4b:1c:03:ae:cb: e6:5b:08:ac:63:c9:55:38:16:fb:58:61:6d:2d:22: 87:4d:48:54:ea:6b:56:47:2a:1e:16:29:d0:d5:a4: d0:ea:03:66:d5:b4:3b:44:a9:7e:7c:1d:00:d0:cc: 99:5c:c2:11:96:b6:60:7c:eb:21:d3:e2:6e:07:1b: a7:b2:e0:fe:dd:a7:3d:a1:bd:54:59:91:65:ff:bf: e9:a5:8f:c5:0f:fe:d3:87:2e:47:5b:64:a2:35:29: c7:96:d8:de:e4:2a:2e:c7:38:3a:7e:31:86:5a:30: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D8:D0:74:1F:19:62:BF:83:64:D0:75:D9:81:C6:3A:90:29:AD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl X509v3 Authority Key Identifier: keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer sbgp-ipAddrBlock: critical IPv4: 68.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:cb:46:0b:43:29:01:49:a9:c1:36:51:e1:fc:71:f0:98:d3: bc:05:09:b4:96:52:81:42:f8:06:ea:c4:be:a9:16:65:6f:38: 0e:81:46:be:47:79:2a:1c:e4:17:70:60:59:f9:b3:4b:b5:79: cc:e6:9f:13:b1:15:cb:b1:f8:80:b6:d4:14:2d:d0:87:b3:ba: cf:3e:41:a8:89:12:2d:00:b4:4d:ec:d9:b6:e1:0f:97:ed:e2: 91:e6:56:13:4c:1d:77:62:b3:4c:89:53:ba:3e:0e:7a:83:47: 54:60:c9:60:9d:84:36:ee:15:1b:30:7c:c9:e0:c7:5f:0a:b0: 68:8f:9f:6d:c8:3e:1d:d8:6e:ea:3c:97:42:38:04:5e:7d:e6: 5e:96:b2:c4:c5:a6:6f:17:44:b0:64:cb:5a:b3:15:99:ea:0a: 95:bd:7b:cc:22:37:70:06:bd:b4:77:0f:0d:aa:f7:8f:1d:c0: 35:2f:d1:98:5b:98:92:0e:76:22:1b:55:44:82:cb:74:d2:4f: 1d:ae:05:42:74:34:3b:bb:36:1b:3e:2d:95:86:d9:d0:a3:dd: b9:9b:83:8d:7c:5c:54:27:19:66:11:bd:74:3c:c3:ce:b1:45: 2c:94:8e:2c:6d:e5:73:43:d3:4c:3a:d0:6b:c3:0a:48:04:2e: 85:42:f2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIM15b/bvfsLNsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3 OTI4MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzBkZWFkNTItNmNhZi00YjAwLTg2ZDUtNWQ2Nzc1ZjBiOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27wgs6qOko3t7ZLjtZrzx7J4kstjg4k0NCeX v+yR2I6geXP5Sl7s053toEGOm4RPWH4ubhTZMM2zHTEtaMegiWlwqG9j/miEfjKX vBrTrTTciuBUzuUXO3X+x90sHAuaEsvT5IDWAwCLslr7gfikQPDdaDBpr2KJOUFP 3A858nMpYloZMAli3iN+3IH+CsoNSxwDrsvmWwisY8lVOBb7WGFtLSKHTUhU6mtW RyoeFinQ1aTQ6gNm1bQ7RKl+fB0A0MyZXMIRlrZgfOsh0+JuBxunsuD+3ac9ob1U WZFl/7/ppY/FD/7Thy5HW2SiNSnHltje5Couxzg6fjGGWjCqyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbY0HQfGWK/g2TQddmBxjqQKa21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvOGFiOTg3NjMtNTdkOC0z NDA2LWE2ZWEtZjc4ZmFlNGVkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey ODc2ZTc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzLRgtDKQFJqcE2UeH8cfCY07wFCbSWUoFC+AbqxL6pFmVvOA6BRr5H eSoc5BdwYFn5s0u1eczmnxOxFcux+IC21BQt0Iezus8+QaiJEi0AtE3s2bbhD5ft 4pHmVhNMHXdis0yJU7o+DnqDR1RgyWCdhDbuFRswfMngx18KsGiPn23IPh3Ybuo8 l0I4BF595l6WssTFpm8XRLBky1qzFZnqCpW9e8wiN3AGvbR3Dw2q948dwDUv0Zhb mJIOdiIbVUSCy3TSTx2uBUJ0NDu7Nhs+LZWG2dCj3bmbg418XFQnGWYRvXQ8w86x RSyUjixt5XND00w60GvDCkgELoVC8jk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:47 2025 by rpki-client