$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa File: 829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa (raw, json) Hash identifier: Zar18H8sjW0QuVG1E2/VN8kOF5mnH0mJvOQmXA6uqXM= Subject key identifier: AB:5D:68:D0:54:50:17:3F:46:FF:9C:72:89:59:37:7E:91:C5:7E:D4 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584AD936603A63DB4D73F4410880 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 68.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:60:3a:63:db:4d:73:f4:41:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=34e822c6-b5d4-4e2e-b64b-ceb0724e40fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:71:55:8c:a9:d8:35:c9:6a:b0:32:1e:a7:8b: 66:60:d8:d0:e6:58:64:e2:9c:21:f6:10:32:05:e1: 94:1e:3b:09:c0:62:90:b5:ab:7d:8c:89:68:9d:95: 97:a0:e6:52:3d:97:39:d2:11:44:0e:ba:a1:ef:45: 96:cb:7c:11:4e:99:01:5e:0a:a1:46:7f:13:ba:58: 24:13:43:df:15:bb:02:d2:43:52:be:c6:b2:49:4b: 9c:6d:8f:20:19:c5:77:e9:b1:64:65:fb:8a:33:a4: ca:d1:99:c7:74:a9:2e:6c:a7:6e:3e:4a:81:69:be: 77:b5:05:5d:d9:89:2e:63:1b:20:f0:09:66:34:1d: 5a:f3:25:ca:57:37:6c:f5:2e:9d:52:af:8c:66:df: 2a:80:52:2d:e2:ac:7a:15:07:89:96:54:c7:b8:26: b8:8c:e9:5e:b2:0b:75:e1:b0:e9:8f:c3:ed:6e:4f: a0:81:0e:e2:d4:07:f9:a1:44:d3:f5:b4:66:75:ce: 31:c8:01:20:5d:2a:8e:49:94:6e:a5:9b:fd:31:c0: cf:02:8c:32:1b:55:88:2d:be:cd:37:84:0f:ca:c7: d0:9e:47:02:bd:7a:a0:09:95:94:63:94:eb:46:3b: 8b:f7:45:df:f2:f5:28:be:98:88:3e:b8:9d:c1:d3: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:68:D0:54:50:17:3F:46:FF:9C:72:89:59:37:7E:91:C5:7E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5d:85:8b:b3:4a:78:f0:85:91:93:fc:86:88:47:8c:2e:bb: 28:6f:da:34:2a:cf:79:d8:a3:f9:f6:8d:cf:70:b9:8a:06:6b: f8:8b:a5:5d:0d:50:25:1f:68:2e:d9:18:e9:07:69:f5:cc:a0: f7:98:a5:33:f4:5f:6d:59:07:0c:f9:23:c6:57:ed:df:f6:b2: 9a:5d:d8:af:35:8d:42:af:97:a8:c8:58:58:64:aa:d4:17:17: 16:df:06:ed:9f:5f:06:9c:1c:4d:d6:09:d3:e8:0f:b9:0b:b0: 46:2a:eb:87:5c:e1:4f:36:ec:81:5b:8d:0b:49:52:17:a6:50: fb:b0:d5:73:96:f1:c1:11:1c:25:31:d2:88:9f:2a:7d:37:5f: c8:d4:70:e0:8e:c7:73:1d:09:e3:7d:f9:64:ac:48:ad:47:94: 3d:08:6c:e9:c4:ad:02:d0:9a:f2:7b:77:f1:85:7d:4a:c0:39: bf:59:c0:82:c8:a4:d8:0a:db:cc:2e:3f:56:52:3c:ff:91:10: 94:a4:9f:d8:a3:fc:ac:88:f7:07:84:19:14:7e:8a:9c:b3:03: a4:26:bb:43:61:8e:c4:18:e7:61:d5:b8:bf:2a:25:42:a6:f1: 16:ea:c5:93:ef:1e:7f:e4:0f:5a:64:89:99:9c:03:62:7e:1b: af:3c:24:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmA6Y9tNc/RBCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MzRlODIyYzYtYjVkNC00ZTJlLWI2NGItY2ViMDcyNGU0MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63FVjKnYNclqsDIep4tmYNjQ5lhk4pwh9hAy BeGUHjsJwGKQtat9jIlonZWXoOZSPZc50hFEDrqh70WWy3wRTpkBXgqhRn8Tulgk E0PfFbsC0kNSvsaySUucbY8gGcV36bFkZfuKM6TK0ZnHdKkubKduPkqBab53tQVd 2YkuYxsg8AlmNB1a8yXKVzds9S6dUq+MZt8qgFIt4qx6FQeJllTHuCa4jOlesgt1 4bDpj8Ptbk+ggQ7i1Af5oUTT9bRmdc4xyAEgXSqOSZRupZv9McDPAowyG1WILb7N N4QPysfQnkcCvXqgCZWUY5TrRjuL90Xf8vUovpiIPridwdP6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtdaNBUUBc/Rv+ccolZN36RxX7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODI5ZWEwN2QtOWRiZS0z NmZkLWI0YWEtYzdiMzgwMzRmMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9dhYuzSnjwhZGT/IaIR4wuuyhv2jQqz3nYo/n2jc9wuYoGa/iLpV0N UCUfaC7ZGOkHafXMoPeYpTP0X21ZBwz5I8ZX7d/2sppd2K81jUKvl6jIWFhkqtQX FxbfBu2fXwacHE3WCdPoD7kLsEYq64dc4U827IFbjQtJUhemUPuw1XOW8cERHCUx 0oifKn03X8jUcOCOx3MdCeN9+WSsSK1HlD0IbOnErQLQmvJ7d/GFfUrAOb9ZwILI pNgK28wuP1ZSPP+REJSkn9ij/KyI9weEGRR+ipyzA6Qmu0NhjsQY52HVuL8qJUKm 8RbqxZPvHn/kD1pkiZmcA2J+G688JE8= -----END CERTIFICATE-----Generated at Sat Aug 23 08:11:30 2025 by rpki-client