$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa File: 60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa (raw, json) Hash identifier: dYjvT9CJz02X0IRCnZp6EV65lHd/plRvNXbRDEWkhV8= Subject key identifier: CE:EA:E9:E8:E4:A9:31:37:11:8E:1D:0D:5F:AD:1A:B8:DF:18:77:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031C17C0940F217F410BF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 68.35.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:c1:7c:09:40:f2:17:f4:10:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=84f479bb-c8b1-49e9-b7a8-4e16d2eddc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:89:e7:7b:8c:c2:f2:c4:e8:df:60:24:42: a7:79:1c:ff:34:02:5f:7d:71:db:9e:8f:de:2f:85: c3:35:ba:c3:24:e5:46:f8:79:85:d7:df:78:ca:a5: e1:b3:40:87:db:3b:d7:f8:d7:44:d5:5d:82:83:b0: 02:08:60:e4:36:0e:d9:7d:a9:d5:bb:c7:b1:00:0a: 81:26:2b:ba:52:06:f5:8f:de:76:3f:fa:08:ac:03: 0e:58:1e:03:e5:8a:31:52:9a:b4:ee:0d:d7:41:55: 8c:9e:5d:15:8d:4d:d7:1f:ec:4d:78:57:83:4c:b5: 34:e8:6d:c3:33:d6:73:61:fc:86:da:10:ae:7f:35: 97:c6:26:b2:d2:9c:e5:b4:d2:86:f6:92:8f:ae:b8: f1:af:4b:25:c7:6b:5c:4b:c4:8f:6d:d1:6b:94:69: a2:e4:9e:dd:28:9c:d3:3e:0c:77:cb:3e:ef:26:17: 37:7b:3e:4d:70:2b:55:2d:cd:da:e3:7a:e1:30:83: 98:69:ea:f3:2e:c7:32:44:85:c4:ed:ae:6d:5f:3e: 60:ed:11:09:c0:0b:92:a9:c3:f8:02:9f:f4:dc:47: da:2f:f0:61:8e:d9:39:ea:a9:be:26:cc:07:19:05: e4:6b:3b:c1:00:07:55:8f:fa:fc:4d:64:47:f8:7d: 42:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:E9:E8:E4:A9:31:37:11:8E:1D:0D:5F:AD:1A:B8:DF:18:77:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9d:52:85:00:87:fe:27:8f:71:25:69:8c:c6:8d:fc:b2:ac: b8:ed:e8:de:2e:7b:05:fe:96:bb:56:33:f5:b6:05:2a:10:78: 00:da:56:71:0e:b3:7b:11:88:b7:c9:5d:c8:7a:e9:85:82:8c: 23:4e:20:ae:4b:bc:7b:3d:b4:ae:63:e8:e9:41:6e:69:82:cf: 56:5b:eb:83:a2:d5:f3:3d:dc:ac:a1:a0:7c:73:74:4b:6b:36: 29:5a:f4:89:76:7c:93:7c:eb:4d:f2:14:ab:a0:3b:2e:8c:d8: 93:6e:ac:26:21:00:46:03:77:0d:fc:6e:d8:cb:16:ca:c6:63: c7:06:94:79:94:d0:ed:ec:f3:6d:e6:5d:79:dd:f3:96:60:2a: a6:99:00:49:66:a0:da:72:34:49:14:19:41:d9:e1:4f:42:72: fd:23:29:b4:fd:2a:80:88:f9:4b:75:dd:b8:59:f9:2a:20:59: 53:e3:14:a5:f0:90:4f:cb:54:be:73:60:8d:0a:55:0f:7a:10: 7a:1a:2e:b9:b7:ec:bf:1d:90:dd:d2:06:b5:ec:da:20:bb:b8: 51:8f:3f:17:5a:30:a6:da:6e:8b:d2:16:e5:59:99:ea:bd:87: 90:2c:95:49:3e:5c:b6:4a:30:b6:de:a1:21:16:89:a7:c6:55: 18:f4:02:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMcF8CUDyF/QQv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ODRmNDc5YmItYzhiMS00OWU5LWI3YTgtNGUxNmQyZWRkYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQiJ53uMwvLE6N9gJEKneRz/NAJffXHbno/e L4XDNbrDJOVG+HmF1994yqXhs0CH2zvX+NdE1V2Cg7ACCGDkNg7ZfanVu8exAAqB Jiu6Ugb1j952P/oIrAMOWB4D5YoxUpq07g3XQVWMnl0VjU3XH+xNeFeDTLU06G3D M9ZzYfyG2hCufzWXxiay0pzltNKG9pKPrrjxr0slx2tcS8SPbdFrlGmi5J7dKJzT Pgx3yz7vJhc3ez5NcCtVLc3a43rhMIOYaerzLscyRIXE7a5tXz5g7REJwAuSqcP4 Ap/03EfaL/Bhjtk56qm+JswHGQXkazvBAAdVj/r8TWRH+H1CRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7q6ejkqTE3EY4dDV+tGrjfGHeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBmODg1Y2MtM2FjNy0z ZTlhLTk1YmYtYTYxZDBkOTQ3ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWdUoUAh/4nj3ElaYzGjfyyrLjt6N4uewX+lrtWM/W2BSoQeADaVnEO s3sRiLfJXch66YWCjCNOIK5LvHs9tK5j6OlBbmmCz1Zb64Oi1fM93KyhoHxzdEtr Nila9Il2fJN8603yFKugOy6M2JNurCYhAEYDdw38btjLFsrGY8cGlHmU0O3s823m XXnd85ZgKqaZAElmoNpyNEkUGUHZ4U9Ccv0jKbT9KoCI+Ut13bhZ+SogWVPjFKXw kE/LVL5zYI0KVQ96EHoaLrm37L8dkN3SBrXs2iC7uFGPPxdaMKbabovSFuVZmeq9 h5AslUk+XLZKMLbeoSEWiafGVRj0Ahc= -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:54 2025 by rpki-client