$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa File: ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa (raw, json) Hash identifier: BVr3CZkeO0l1j/2mJfyUhrDuKkX1dGnbRV7bnEAaKRU= Subject key identifier: E6:3D:93:3F:51:1B:54:E6:76:66:C6:56:F4:95:A3:4A:1C:1C:48:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BDB40493C6997F8A28D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 68.163.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:db:40:49:3c:69:97:f8:a2:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=7b06eec6-90ed-4e80-b9e0-adbf6ec97951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:b6:2c:70:5c:2b:65:2c:6f:43:25:21:59: 35:a6:00:03:75:d4:ee:6d:16:18:0f:c2:f9:62:cd: df:8e:98:a2:cb:82:6a:d4:86:4a:fd:a6:96:88:5f: c3:c0:49:22:01:02:00:f4:b6:1b:d6:d4:45:35:21: 85:6a:df:d0:3b:67:69:29:b6:8c:74:a2:4a:17:05: e0:61:9b:33:d1:f9:13:41:b7:76:f7:28:64:fe:ba: 46:6e:9f:86:a1:fc:12:98:54:a0:76:5d:37:f5:33: 01:1e:6c:a7:73:79:f4:c8:50:0e:f0:ae:ec:af:e8: ad:0f:58:7f:8c:4d:3f:bc:0f:a0:35:43:97:62:42: a4:8d:06:89:2e:f8:7c:a2:7b:8e:86:a6:9a:9b:c7: 04:e9:85:ec:7b:7d:80:49:56:fa:ff:bf:19:9f:64: e7:0a:2c:74:2f:cf:34:08:5d:cb:44:18:b3:00:06: 31:5d:06:e0:bd:da:85:20:f7:ce:29:d1:5c:e7:ce: c3:6b:0e:76:96:8e:c9:be:1c:81:53:d4:ac:c5:06: e3:c8:3b:56:9c:e5:4d:ef:82:b6:c1:43:be:f6:ee: d2:ce:10:1d:15:81:0e:5b:39:16:69:7f:e3:71:b9: fa:e2:02:2c:05:ed:52:76:29:a8:6c:5d:c0:bf:9c: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3D:93:3F:51:1B:54:E6:76:66:C6:56:F4:95:A3:4A:1C:1C:48:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.163.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f9:2d:0e:9b:9b:4d:ac:9f:2d:12:6e:32:f2:e1:09:86:a0: 40:5c:be:a8:6a:b5:5e:3e:d8:d7:e4:07:da:f9:2e:b4:37:29: 6c:ff:07:18:d0:ac:af:8d:3f:bb:58:52:47:67:03:5d:7d:a5: d4:39:5c:e7:ec:e2:ba:3f:ed:64:23:b1:88:50:c7:ae:54:28: 37:22:4e:35:80:72:83:c2:e2:99:41:9f:56:59:dc:62:a1:d5: cc:cc:d7:75:00:ea:1c:05:e4:5c:f8:57:64:53:28:e2:11:d1: b8:00:38:da:71:fb:41:0f:32:f1:da:66:10:f0:f4:94:8b:6c: 38:6b:60:93:77:4e:82:2e:e7:0c:cf:0a:fa:ab:01:24:4b:83: be:9c:81:a7:91:39:ea:26:42:48:43:d2:31:61:6f:76:41:a6: 68:75:e4:12:cb:5e:c8:b8:00:70:5d:8b:ff:ba:c3:b0:a1:4c: f2:c2:bd:dc:9d:97:9d:46:6d:80:3f:0a:f0:bf:0f:06:47:23: ab:ef:9b:e7:f1:70:f4:51:1b:f0:34:b4:67:73:b2:5a:d7:a0: d8:c3:a7:b4:3f:d3:b1:b0:4e:cb:9c:9b:da:af:6d:17:03:e3: 66:fc:14:af:b2:a5:7b:8c:f7:00:6d:dd:a3:7a:68:5a:80:92: f1:7e:9a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9tASTxpl/iijQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk N2IwNmVlYzYtOTBlZC00ZTgwLWI5ZTAtYWRiZjZlYzk3OTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso62LHBcK2Usb0MlIVk1pgADddTubRYYD8L5 Ys3fjpiiy4Jq1IZK/aaWiF/DwEkiAQIA9LYb1tRFNSGFat/QO2dpKbaMdKJKFwXg YZsz0fkTQbd29yhk/rpGbp+GofwSmFSgdl039TMBHmync3n0yFAO8K7sr+itD1h/ jE0/vA+gNUOXYkKkjQaJLvh8onuOhqaam8cE6YXse32ASVb6/78Zn2TnCix0L880 CF3LRBizAAYxXQbgvdqFIPfOKdFc587Daw52lo7JvhyBU9SsxQbjyDtWnOVN74K2 wUO+9u7SzhAdFYEOWzkWaX/jcbn64gIsBe1SdimobF3Av5w/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY9kz9RG1TmdmbGVvSVo0ocHEhxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWM4ZjQyMjUtMjZlYS0z ZTA1LWI3MGEtM2MxMjdkM2I5YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX5LQ6bm02sny0SbjLy4QmGoEBcvqhqtV4+2NfkB9r5LrQ3KWz/BxjQ rK+NP7tYUkdnA119pdQ5XOfs4ro/7WQjsYhQx65UKDciTjWAcoPC4plBn1ZZ3GKh 1czM13UA6hwF5Fz4V2RTKOIR0bgAONpx+0EPMvHaZhDw9JSLbDhrYJN3ToIu5wzP CvqrASRLg76cgaeROeomQkhD0jFhb3ZBpmh15BLLXsi4AHBdi/+6w7ChTPLCvdyd l51GbYA/CvC/DwZHI6vvm+fxcPRRG/A0tGdzslrXoNjDp7Q/07GwTsucm9qvbRcD 42b8FK+ypXuM9wBt3aN6aFqAkvF+mjE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:18 2025 by rpki-client