$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd212487-dc20-3599-9aac-9dcd55d705d8.roa File: cd212487-dc20-3599-9aac-9dcd55d705d8.roa (raw, json) Hash identifier: bKl6YVIcyu/3OsSMkuK6w3MeBMn7UyK6KMB72GxDhP8= Subject key identifier: 9F:DD:AB:AD:55:78:49:F1:9A:F4:3B:D1:71:11:C8:B9:81:2B:7E:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C05DF26FA2F8FE34F9200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd212487-dc20-3599-9aac-9dcd55d705d8.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 68.238.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:05:df:26:fa:2f:8f:e3:4f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=2241438c-4bd1-4bf8-8dbb-1921959f8eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:81:61:05:a1:44:d6:f8:eb:e6:aa:20:e8: f1:52:0f:ca:e9:62:d8:e8:47:9b:bd:13:1a:77:72: 20:ff:19:da:42:dd:94:63:77:dd:4d:db:df:f4:47: cd:df:54:f8:89:a6:d3:cc:69:e7:f1:c4:c2:cc:69: 89:58:07:0f:9a:58:03:c8:f9:be:cc:4c:a0:4b:16: 0a:07:e1:0f:b2:6f:4e:09:08:6e:a0:79:bf:ff:07: 7c:fd:b4:62:c3:94:d2:d3:c2:f5:46:b5:85:0b:26: e2:29:4d:27:2c:1e:02:fc:d1:0b:7a:ad:b7:f2:7d: 70:38:f4:7a:dc:99:27:d4:ca:9b:70:15:12:87:68: 3d:81:a1:62:31:17:83:27:d9:87:8e:de:09:7b:ef: 34:4b:a9:f2:a2:3e:9a:4e:3f:55:04:0d:ce:2a:d9: 38:62:29:81:e7:87:41:d8:69:d1:f9:9e:47:5a:eb: f0:b8:5f:26:a7:94:b6:c2:3d:2e:4c:b9:7d:9b:ce: 45:a5:c7:a3:2d:18:24:e2:c5:52:26:e2:1e:74:d9: 7e:71:f0:f2:6d:da:d7:cc:99:07:2a:2e:66:50:62: c0:37:2b:a7:87:b6:4f:68:be:08:02:b4:da:45:14: 43:29:aa:74:7a:d8:3c:28:21:70:0a:eb:79:80:f4: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:AB:AD:55:78:49:F1:9A:F4:3B:D1:71:11:C8:B9:81:2B:7E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd212487-dc20-3599-9aac-9dcd55d705d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e9:11:72:ba:69:0e:5e:7a:28:71:51:e0:64:ff:75:fb:fb: 87:ac:d1:2c:6d:e9:37:28:cf:a8:52:cb:10:c2:af:ed:73:88: 67:1a:fc:b2:54:40:4f:bd:58:38:a9:3a:d2:30:22:1c:f1:bc: 51:2b:a3:4e:ba:2a:68:cf:eb:38:52:13:3f:87:a3:9a:c1:9e: 34:0e:12:7d:ed:d1:14:4a:7a:1d:22:f0:1f:a2:10:f1:23:8c: 96:e9:27:87:b5:f5:79:df:85:86:50:79:44:da:a0:f1:de:ea: be:72:75:c8:7f:62:f9:b3:84:cd:0a:4c:ba:b0:d0:4d:7f:02: c1:7b:00:f1:a8:4e:48:85:7a:3e:7c:c8:b0:e0:84:46:20:a2: 8c:28:c4:c2:00:70:02:ff:c6:ec:14:8f:3a:42:e7:aa:13:00: 23:0b:78:6a:f4:41:f8:ed:c3:e5:5c:3f:24:c2:75:b9:9b:ce: 85:32:35:6e:09:1b:1d:b3:36:3f:5a:79:65:36:62:b3:31:7b: 37:5a:7f:5f:9e:6c:cc:65:70:94:4d:5c:69:c6:2e:92:a6:b1: 6b:3a:bc:95:ae:6a:b2:70:86:7f:7b:49:04:49:6d:fb:21:10: 04:4d:60:ac:14:36:53:70:6e:f7:4a:6e:77:d7:db:a4:52:55: 5d:fd:c0:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAXfJvovj+NPkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjI0MTQzOGMtNGJkMS00YmY4LThkYmItMTkyMTk1OWY4ZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0mBYQWhRNb46+aqIOjxUg/K6WLY6EebvRMa d3Ig/xnaQt2UY3fdTdvf9EfN31T4iabTzGnn8cTCzGmJWAcPmlgDyPm+zEygSxYK B+EPsm9OCQhuoHm//wd8/bRiw5TS08L1RrWFCybiKU0nLB4C/NELeq238n1wOPR6 3Jkn1MqbcBUSh2g9gaFiMReDJ9mHjt4Je+80S6nyoj6aTj9VBA3OKtk4YimB54dB 2GnR+Z5HWuvwuF8mp5S2wj0uTLl9m85FpcejLRgk4sVSJuIedNl+cfDybdrXzJkH Ki5mUGLANyunh7ZPaL4IArTaRRRDKap0etg8KCFwCut5gPT8VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/dq61VeEnxmvQ70XERyLmBK34mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2QyMTI0ODctZGMyMC0z NTk5LTlhYWMtOWRjZDU1ZDcwNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRO6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnpEXK6aQ5eeihxUeBk/3X7+4es0Sxt6Tcoz6hSyxDCr+1ziGca/LJU QE+9WDipOtIwIhzxvFEro066KmjP6zhSEz+Ho5rBnjQOEn3t0RRKeh0i8B+iEPEj jJbpJ4e19XnfhYZQeUTaoPHe6r5ydch/YvmzhM0KTLqw0E1/AsF7APGoTkiFej58 yLDghEYgoowoxMIAcAL/xuwUjzpC56oTACMLeGr0Qfjtw+VcPyTCdbmbzoUyNW4J Gx2zNj9aeWU2YrMxezdaf1+ebMxlcJRNXGnGLpKmsWs6vJWuarJwhn97SQRJbfsh EARNYKwUNlNwbvdKbnfX26RSVV39wHk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:45 2025 by rpki-client