$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa File: 7cf1b155-1ef2-3673-9779-9ab9f58972da.roa (raw, json) Hash identifier: S3DxEL1yJcn44iktwExH6qbuh5d/DUbp9oi1MesqxaA= Subject key identifier: 1D:F6:3D:12:39:5A:F4:4B:F1:D1:36:53:CE:3F:E6:26:CC:79:99:73 Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Certificate serial: 010D0C9F4328584AD23BBD67DF18DB4EF38DD840 Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 4476 IP address blocks: 192.68.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:bd:67:df:18:db:4e:f3:8d:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=fe65b8c9-b845-47d8-8383-81baf70b2fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:3f:2c:d1:d4:8f:5b:a5:7f:55:91:9f:3a: 46:af:01:64:58:fe:cc:60:29:04:bc:c5:3d:4c:57: 5f:d1:4d:c0:ec:68:c1:a5:b5:f4:0e:96:49:14:90: 26:79:38:e9:83:68:a0:2f:b4:b7:a3:65:1c:a6:62: c9:50:ef:64:d7:aa:50:d2:ec:3c:ac:27:6c:e4:b2: 2e:61:28:d6:5f:f9:65:af:71:b4:78:52:25:c6:30: d0:46:20:98:8b:82:4d:d1:c6:58:ba:4e:0e:a3:79: ab:3c:b0:d1:f7:4d:4d:66:45:fb:e1:c0:b4:e5:ba: f5:23:7b:95:c4:85:88:63:b0:f9:64:6b:4a:5e:2c: 72:ce:5e:ad:a9:ab:c3:b1:83:84:9a:48:54:43:ce: 33:06:f1:e3:e4:bd:10:c1:45:3c:c3:d8:30:e8:cf: dd:d6:25:e3:58:79:ce:6e:ea:28:0c:2c:56:ff:00: d5:aa:36:31:c8:38:88:84:0b:8d:2f:2a:c1:6b:9f: 82:14:2d:82:90:9a:66:e9:05:c8:c4:dd:21:4f:2c: cf:be:19:a3:6c:9b:6e:ce:de:87:a0:bf:c9:57:8d: 7e:af:4e:e8:6f:90:5d:9f:06:17:6c:7a:c6:07:06: f4:fe:4e:6e:aa:a9:c2:17:7c:7e:c6:ea:9b:09:37: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F6:3D:12:39:5A:F4:4B:F1:D1:36:53:CE:3F:E6:26:CC:79:99:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl X509v3 Authority Key Identifier: keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer sbgp-ipAddrBlock: critical IPv4: 192.68.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:84:38:54:8f:42:a7:11:d2:b4:7e:f7:65:1e:80:3b:08:9b: 27:1a:f6:8b:10:43:59:13:c7:6b:99:f8:05:6a:52:35:e4:ce: 55:fd:5e:7f:34:2f:b3:01:87:0b:8e:c4:3f:93:2f:57:02:30: 14:1c:92:96:29:68:43:ef:69:c2:77:00:23:59:1f:96:75:04: 83:68:5f:78:47:2f:95:56:9e:b0:af:c1:85:da:52:ba:13:83: 06:3d:de:ff:79:0b:6e:2b:bc:50:2b:65:46:30:c7:30:4e:a9: 5d:90:26:25:c0:b5:f5:17:fc:52:c3:05:d6:5c:5a:24:70:c4: 4a:7e:8c:dc:54:ce:13:69:64:ca:74:16:14:fe:6b:f5:db:a8: dd:8e:5b:b7:8b:1b:d3:6d:e2:18:00:0e:db:61:10:0d:46:a1: a2:bb:3b:83:55:48:e1:3a:ea:4f:88:9d:b8:76:4b:4d:4b:e8: ce:5d:83:c6:22:45:0a:4b:cd:27:44:46:97:01:d4:4c:64:53: 39:af:1a:33:df:4f:b3:f7:eb:8c:18:e6:3a:73:0a:b4:de:5e: 0e:ac:04:ea:34:ff:0e:c7:f0:7d:db:3a:62:3e:42:49:5c:de: 3c:34:4e:ec:65:38:5c:28:68:c3:fc:ee:3b:e4:3f:1a:6c:90: 0f:ab:21:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO71n3xjbTvON2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2 OTYzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmU2NWI4YzktYjg0NS00N2Q4LTgzODMtODFiYWY3MGIyZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikI/LNHUj1ulf1WRnzpGrwFkWP7MYCkEvMU9 TFdf0U3A7GjBpbX0DpZJFJAmeTjpg2igL7S3o2UcpmLJUO9k16pQ0uw8rCds5LIu YSjWX/llr3G0eFIlxjDQRiCYi4JN0cZYuk4Oo3mrPLDR901NZkX74cC05br1I3uV xIWIY7D5ZGtKXixyzl6tqavDsYOEmkhUQ84zBvHj5L0QwUU8w9gw6M/d1iXjWHnO buooDCxW/wDVqjYxyDiIhAuNLyrBa5+CFC2CkJpm6QXIxN0hTyzPvhmjbJtuzt6H oL/JV41+r07ob5BdnwYXbHrGBwb0/k5uqqnCF3x+xuqbCTdEEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB32PRI5WvRL8dE2U84/5ibMeZlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5 YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvN2NmMWIxNTUtMWVmMi0z NjczLTk3NzktOWFiOWY1ODk3MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4 NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2 ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGEOFSPQqcR0rR+92UegDsImyca9osQQ1kTx2uZ+AVqUjXkzlX9Xn80 L7MBhwuOxD+TL1cCMBQckpYpaEPvacJ3ACNZH5Z1BINoX3hHL5VWnrCvwYXaUroT gwY93v95C24rvFArZUYwxzBOqV2QJiXAtfUX/FLDBdZcWiRwxEp+jNxUzhNpZMp0 FhT+a/XbqN2OW7eLG9Nt4hgADtthEA1GoaK7O4NVSOE66k+Inbh2S01L6M5dg8Yi RQpLzSdERpcB1ExkUzmvGjPfT7P364wY5jpzCrTeXg6sBOo0/w7H8H3bOmI+Qklc 3jw0TuxlOFwoaMP87jvkPxpskA+rISo= -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:56 2025 by rpki-client