$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa File: 1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa (raw, json) Hash identifier: xXjASplJqeDZOuZi3tGkBmDYNfaz++swsx/y1cFuqeE= Subject key identifier: C4:FD:35:7B:26:4C:8C:53:0A:80:4E:B3:D4:08:43:04:5F:98:DB:19 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584AE5C66EA6DDCF5CFB22D8FE80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 22423 IP address blocks: 68.182.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:6e:a6:dd:cf:5c:fb:22:d8:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=4c0f0f7e-5848-49f1-adc9-0c9e1652484d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6a:2f:99:82:8b:74:4b:19:d3:d3:eb:07:d5: e1:a4:fe:10:af:57:d9:10:3e:71:c8:03:aa:9a:69: 48:ab:da:30:7c:43:c8:af:df:08:8a:10:4b:db:16: 81:4d:72:94:7d:a1:51:2e:c4:70:b9:7f:fa:1d:18: 67:ce:34:0c:a4:c3:cb:21:b5:17:46:8e:ae:50:7a: 6a:16:cc:10:65:c2:4f:80:da:95:58:39:0f:a4:59: 44:0b:30:97:4f:9e:5b:ca:49:6f:4e:55:98:77:4b: 16:61:80:7e:8a:fb:8b:5e:3b:f2:ec:fa:0f:5c:9c: e0:42:22:5f:a7:c5:43:b8:20:d5:e2:0d:37:45:8e: f0:5e:bc:fc:33:24:fb:13:cb:1f:9a:1a:73:0d:d7: bc:58:04:25:bc:cc:5d:6e:1a:07:84:76:37:3a:d3: c8:28:9c:78:d4:b0:41:67:9f:0d:c2:f1:66:f3:98: cc:f0:03:e5:42:65:79:8f:0b:73:e7:15:30:c4:c4: a8:28:65:8a:e5:77:86:78:ac:7d:90:b6:f2:2e:a5: f8:1c:a5:5f:7a:c0:a5:89:b5:39:8a:f7:ce:16:da: 2f:18:17:e3:26:20:e2:08:83:fb:32:50:8a:3b:7e: 05:5f:40:3e:11:9b:a5:ef:96:42:0e:2f:96:75:61: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FD:35:7B:26:4C:8C:53:0A:80:4E:B3:D4:08:43:04:5F:98:DB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:9f:85:99:35:60:df:4e:c9:8c:56:e2:1b:64:53:38:1e:4b: 9d:dd:eb:70:1b:2b:3a:ee:f6:7f:1e:f8:9e:b4:21:57:79:7c: b9:b6:d4:00:e4:93:40:06:0f:41:57:82:62:80:f2:ae:70:48: 2b:09:30:2b:ea:ec:ab:89:00:f2:e5:67:c2:cb:29:a4:e7:61: 01:07:04:8b:5b:cc:fa:94:8d:2d:b3:57:b1:7d:21:18:a5:45: a8:82:12:bc:92:74:ec:a5:d6:4a:7b:57:40:fe:6f:5c:32:35: c1:48:6a:35:9f:64:ba:50:13:71:c6:fd:bd:9d:41:04:35:3c: 5f:95:1f:17:79:15:d7:98:b6:52:bd:17:ee:61:9e:82:ab:cc: 9d:07:14:6c:47:a1:0c:9f:a3:20:ab:b4:dc:27:c9:9f:f6:6d: 1f:33:7f:f9:4a:18:5e:8b:e6:c4:d5:e1:fe:18:b8:02:6a:a8: 64:49:fb:69:8a:e9:42:07:71:b0:82:9a:34:c3:f3:cc:d6:c9: 8f:4f:67:90:e3:93:8a:68:c2:99:a8:d9:a5:6a:14:c5:4c:1f: 17:e2:10:6b:ca:2e:40:b4:3e:f6:27:86:d0:8c:40:b4:5a:4d: d4:45:3e:9b:fa:0d:5a:96:c5:48:a5:0e:1b:b9:0a:8f:e3:4c: bb:78:92:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxm6m3c9c+yLY/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk NGMwZjBmN2UtNTg0OC00OWYxLWFkYzktMGM5ZTE2NTI0ODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmovmYKLdEsZ09PrB9XhpP4Qr1fZED5xyAOq mmlIq9owfEPIr98IihBL2xaBTXKUfaFRLsRwuX/6HRhnzjQMpMPLIbUXRo6uUHpq FswQZcJPgNqVWDkPpFlECzCXT55byklvTlWYd0sWYYB+ivuLXjvy7PoPXJzgQiJf p8VDuCDV4g03RY7wXrz8MyT7E8sfmhpzDde8WAQlvMxdbhoHhHY3OtPIKJx41LBB Z58NwvFm85jM8APlQmV5jwtz5xUwxMSoKGWK5XeGeKx9kLbyLqX4HKVfesClibU5 ivfOFtovGBfjJiDiCIP7MlCKO34FX0A+EZul75ZCDi+WdWEgIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT9NXsmTIxTCoBOs9QIQwRfmNsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWViNjNlNWQtNDY5Ni0z OWM1LWE3MTEtMGVhNDIyYmY4YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRLYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN2fhZk1YN9OyYxW4htkUzgeS53d63AbKzru9n8e+J60IVd5fLm21ADk k0AGD0FXgmKA8q5wSCsJMCvq7KuJAPLlZ8LLKaTnYQEHBItbzPqUjS2zV7F9IRil RaiCErySdOyl1kp7V0D+b1wyNcFIajWfZLpQE3HG/b2dQQQ1PF+VHxd5FdeYtlK9 F+5hnoKrzJ0HFGxHoQyfoyCrtNwnyZ/2bR8zf/lKGF6L5sTV4f4YuAJqqGRJ+2mK 6UIHcbCCmjTD88zWyY9PZ5Djk4powpmo2aVqFMVMHxfiEGvKLkC0PvYnhtCMQLRa TdRFPpv6DVqWxUilDhu5Co/jTLt4kuU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:15 2025 by rpki-client