$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa File: 148d2078-1122-3908-b198-db0b1c465bcc.roa (raw, json) Hash identifier: lEu0lDm3HkaO7B7diMnxttGEAmpRqRJbDE0xKccsYqk= Subject key identifier: 40:B6:0B:44:5C:E9:A8:7E:29:30:84:E8:80:39:3D:74:19:18:2C:B9 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC8B98E93EB74DB640440 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7106 IP address blocks: 68.65.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c8:b9:8e:93:eb:74:db:64:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=a23bfce2-495a-4ffe-bd5f-501a2fd4095a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:98:08:d9:ac:31:17:75:7f:08:5e:42:ee: d8:c3:d7:89:11:7b:c2:8d:d1:e5:e9:fd:ac:73:74: 23:ad:91:26:e1:0e:71:b8:56:a6:44:22:55:a5:a9: cf:5a:f7:8b:8b:04:29:50:e3:99:95:53:9f:3f:92: cd:bb:97:66:e8:06:22:01:da:a5:24:64:7a:f4:7f: 9d:31:66:d0:77:bd:39:85:43:f7:23:71:46:8e:e5: 54:e4:ae:57:13:3c:b6:5b:de:99:d1:78:e8:19:b5: 5d:1c:2e:66:48:bd:40:53:78:23:d5:61:a0:1b:a6: f2:92:b8:aa:c6:d7:8c:22:61:9a:8e:b4:e5:d9:f7: 0d:aa:8e:56:74:14:cd:4c:74:1d:41:d9:0d:80:7f: 52:e9:ee:aa:cd:82:80:56:86:49:de:6a:4a:59:b0: 7b:8d:68:f8:89:c0:22:a1:c2:b4:74:75:87:1f:b2: 17:4d:dd:53:b2:d4:4c:bf:5d:2c:cb:aa:82:7e:1f: 55:fc:ec:9a:4a:84:ae:f0:9d:57:0f:91:1e:b9:34: c3:61:7e:71:03:93:fe:e6:f0:61:76:82:67:33:51: b4:93:de:90:ca:e2:b5:7b:c6:f9:5b:18:c8:c4:40: aa:8b:13:44:de:66:74:41:20:b2:9d:56:c6:5b:10: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B6:0B:44:5C:E9:A8:7E:29:30:84:E8:80:39:3D:74:19:18:2C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 68.65.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1f:5c:da:51:66:83:8d:e4:3c:a2:42:56:be:34:d6:49:23: 47:84:21:3e:b8:21:a3:c3:1c:e1:b7:8c:45:45:6d:46:f3:de: 41:f9:53:b4:5d:dc:65:f7:f6:2e:87:37:f4:a4:26:de:fa:02: 52:fa:78:41:0a:d0:6d:ed:ca:2e:e1:bb:ad:d4:56:b8:f9:09: a0:e4:3f:4b:d5:1d:16:8b:46:55:39:49:f7:2a:d9:69:00:af: 0c:1b:0a:4a:16:9a:ca:4d:50:3f:44:f3:8b:9e:e1:fb:e3:43: 3d:36:66:2c:15:9c:d5:f9:81:2a:e9:5d:96:c4:10:01:1b:4b: ae:16:e3:9b:60:cf:c7:04:e5:0b:38:f2:d3:aa:24:37:2b:6b: d7:6f:ae:d3:df:71:da:7f:ca:43:a8:18:a8:50:e3:71:04:cd: dd:f6:ec:02:59:46:6d:a4:0c:90:14:d5:8b:18:3a:2d:54:6a: 94:54:f3:84:9a:71:93:e2:57:5a:f3:12:03:9c:03:5e:82:7e: 34:ed:39:da:99:4d:74:66:65:44:b3:a1:52:97:1c:45:9e:4f: 89:5d:77:20:7b:13:96:d6:70:5e:95:fc:8f:00:43:f8:68:87: b0:40:54:fc:08:30:33:7e:8e:e3:39:6b:19:0b:48:27:c6:e5: eb:c4:19:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8i5jpPrdNtkBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YTIzYmZjZTItNDk1YS00ZmZlLWJkNWYtNTAxYTJmZDQwOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgaYCNmsMRd1fwheQu7Yw9eJEXvCjdHl6f2s c3QjrZEm4Q5xuFamRCJVpanPWveLiwQpUOOZlVOfP5LNu5dm6AYiAdqlJGR69H+d MWbQd705hUP3I3FGjuVU5K5XEzy2W96Z0XjoGbVdHC5mSL1AU3gj1WGgG6bykriq xteMImGajrTl2fcNqo5WdBTNTHQdQdkNgH9S6e6qzYKAVoZJ3mpKWbB7jWj4icAi ocK0dHWHH7IXTd1TstRMv10sy6qCfh9V/OyaSoSu8J1XD5EeuTTDYX5xA5P+5vBh doJnM1G0k96QyuK1e8b5WxjIxECqixNE3mZ0QSCynVbGWxC/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC2C0Rc6ah+KTCE6IA5PXQZGCy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMTQ4ZDIwNzgtMTEyMi0z OTA4LWIxOTgtZGIwYjFjNDY1YmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGofXNpRZoON5DyiQla+NNZJI0eEIT64IaPDHOG3jEVFbUbz3kH5U7Rd 3GX39i6HN/SkJt76AlL6eEEK0G3tyi7hu63UVrj5CaDkP0vVHRaLRlU5Sfcq2WkA rwwbCkoWmspNUD9E84ue4fvjQz02ZiwVnNX5gSrpXZbEEAEbS64W45tgz8cE5Qs4 8tOqJDcra9dvrtPfcdp/ykOoGKhQ43EEzd327AJZRm2kDJAU1YsYOi1UapRU84Sa cZPiV1rzEgOcA16CfjTtOdqZTXRmZUSzoVKXHEWeT4lddyB7E5bWcF6V/I8AQ/ho h7BAVPwIMDN+juM5axkLSCfG5evEGdk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:03:05 2025 by rpki-client