$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa File: 29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa (raw, json) Hash identifier: tVztq+ASNdzr4pgUeHapPe0wH5aM2NRoEHkuhZAwj+U= Subject key identifier: F4:07:B0:93:71:7D:94:52:69:37:B5:69:B2:CE:80:ED:E1:FF:26:7A Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584AC4608E0E9CC4B26B92B79220 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa Signing time: Wed 06 Aug 2025 13:53:45 +0000 ROA not before: Wed 06 Aug 2025 13:53:45 +0000 ROA not after: Tue 04 Nov 2025 14:53:45 +0000 asID: 7843 IP address blocks: 68.170.0.0/24 maxlen: 24 68.170.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:60:8e:0e:9c:c4:b2:6b:92:b7:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Aug 6 13:53:45 2025 GMT Not After : Nov 4 14:53:45 2025 GMT Subject: CN=f8fe8861-4a48-422d-88d2-2f917a7e0568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:54:14:d2:8e:cb:11:a2:c3:7b:7b:80:f6: 1f:a1:68:b6:62:f5:d1:17:a1:50:db:e7:d3:60:24: 8d:c6:9e:57:a5:e8:17:f4:bd:10:be:49:be:9c:9d: b2:e2:2e:8d:3a:f9:42:40:da:65:8b:b8:01:4e:64: 7e:27:c2:b0:70:8d:83:97:14:0e:82:c4:b0:04:19: e0:79:46:3b:ab:bf:2e:61:62:cb:b8:51:c6:3b:19: 5d:52:b6:eb:c1:27:53:a3:25:87:b2:46:05:b0:0c: 36:88:55:9f:05:8e:c3:f2:cd:af:0c:9a:78:35:6c: 7f:1e:35:a1:aa:13:55:a1:ca:9f:d5:38:98:b1:10: 0e:4a:a3:96:db:00:e2:38:e2:16:0c:06:d3:b2:22: 40:26:09:ee:56:26:53:d7:f7:2f:44:8f:78:c6:b4: fd:8c:62:eb:5e:ee:18:5d:1c:5c:fb:f9:4c:8f:80: 66:89:b7:ee:d0:31:36:e0:97:da:bd:49:0e:26:97: b3:c6:d1:8e:ce:03:5d:6d:fd:4b:51:9b:a1:be:2f: cf:d4:22:27:24:be:01:cf:55:83:3a:90:d6:d0:e4: 31:4d:ad:81:77:86:64:55:4c:d6:de:25:cb:6a:4d: 58:9a:b4:93:40:5b:64:0b:e5:75:86:cb:c5:65:58: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:07:B0:93:71:7D:94:52:69:37:B5:69:B2:CE:80:ED:E1:FF:26:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:72:77:a6:69:83:ff:e0:09:33:86:a4:1c:24:03:21:f3:11: b9:f6:b2:4b:f1:dd:f2:d2:a7:cc:ba:25:fb:ec:68:9e:05:b9: d0:3d:39:ed:02:15:50:58:64:50:75:e3:c3:c4:ba:89:33:6d: e9:a3:bf:4a:63:15:6a:f0:4e:1b:b2:5b:49:28:e1:8a:89:c4: 79:52:27:ed:c1:4d:9c:a2:41:85:73:4e:1e:29:89:95:17:0c: 70:81:5a:94:3f:ee:d4:fc:1a:52:ec:f5:fb:f1:e6:bd:86:ae: 92:66:4d:0f:51:ed:9b:0a:04:63:19:86:17:3a:48:06:27:b6: ac:f9:90:6b:2b:9a:04:a0:01:45:c8:84:ab:ad:26:71:27:60: c9:03:09:82:5c:c3:1f:e9:53:c0:7a:ea:f7:24:13:81:c1:02: 8e:ef:6b:ec:a1:88:68:c8:c3:8b:e3:35:36:e5:06:e4:e1:b2: bf:c3:36:45:e2:17:6c:6c:ac:76:62:dc:18:07:0e:85:cb:08: 07:61:21:25:55:ca:a9:7d:ee:c3:14:c2:01:78:85:d4:04:38: 84:a7:dd:1a:ab:f7:4d:a9:3f:a8:3d:b4:9c:ce:c2:42:c8:33: 32:e6:d0:f9:25:7f:f6:c7:df:71:02:12:10:ee:c4:5f:c2:df: 2f:4b:09:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErEYI4OnMSya5K3kiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MDgwNjEzNTM0NVoXDTI1MTEwNDE0NTM0NVowLzEtMCsGA1UEAxMk ZjhmZTg4NjEtNGE0OC00MjJkLTg4ZDItMmY5MTdhN2UwNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtApUFNKOyxGiw3t7gPYfoWi2YvXRF6FQ2+fT YCSNxp5XpegX9L0Qvkm+nJ2y4i6NOvlCQNpli7gBTmR+J8KwcI2DlxQOgsSwBBng eUY7q78uYWLLuFHGOxldUrbrwSdToyWHskYFsAw2iFWfBY7D8s2vDJp4NWx/HjWh qhNVocqf1TiYsRAOSqOW2wDiOOIWDAbTsiJAJgnuViZT1/cvRI94xrT9jGLrXu4Y XRxc+/lMj4Bmibfu0DE24JfavUkOJpezxtGOzgNdbf1LUZuhvi/P1CInJL4Bz1WD OpDW0OQxTa2Bd4ZkVUzW3iXLak1YmrSTQFtkC+V1hsvFZVhyWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQHsJNxfZRSaTe1abLOgO3h/yZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMjkyMzZlNGEtODEzMy0z N2ZhLWE0YmMtZDVjMGE3NzIxZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVyd6Zpg//gCTOGpBwkAyHzEbn2skvx3fLSp8y6JfvsaJ4FudA9Oe0C FVBYZFB148PEuokzbemjv0pjFWrwThuyW0ko4YqJxHlSJ+3BTZyiQYVzTh4piZUX DHCBWpQ/7tT8GlLs9fvx5r2GrpJmTQ9R7ZsKBGMZhhc6SAYntqz5kGsrmgSgAUXI hKutJnEnYMkDCYJcwx/pU8B66vckE4HBAo7va+yhiGjIw4vjNTblBuThsr/DNkXi F2xsrHZi3BgHDoXLCAdhISVVyql97sMUwgF4hdQEOISn3Rqr902pP6g9tJzOwkLI MzLm0Pklf/bH33ECEhDuxF/C3y9LCSk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:12 2025 by rpki-client