$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9aee28f5-d0fd-3382-bbb3-1a0320d8afb8.roa File: 9aee28f5-d0fd-3382-bbb3-1a0320d8afb8.roa (raw, json) Hash identifier: ib13qEcZIUwhm6JCYdFyWNU2vpBp3oNO1hXL7L0ETJ8= Subject key identifier: CB:4C:76:3A:2C:AB:D5:B4:AD:7C:E6:2F:A8:8C:63:EA:A5:4C:FE:75 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AD5A885BB5234D6ABEDB0FD80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9aee28f5-d0fd-3382-bbb3-1a0320d8afb8.roa Signing time: Tue 12 Aug 2025 18:27:30 +0000 ROA not before: Tue 12 Aug 2025 18:27:30 +0000 ROA not after: Mon 10 Nov 2025 19:27:30 +0000 asID: 20115 IP address blocks: 68.114.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:a8:85:bb:52:34:d6:ab:ed:b0:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 12 18:27:30 2025 GMT Not After : Nov 10 19:27:30 2025 GMT Subject: CN=35b98c7b-c0c7-45df-afbb-e78e5e4077f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:b4:6c:82:40:5d:11:94:17:2b:25:32:26: 89:04:75:ab:3e:7e:dd:4e:d2:50:3b:8a:63:88:0e: db:7f:40:a1:8a:74:c4:83:1d:e5:40:00:b9:92:cb: 13:55:75:9f:7c:88:8f:6e:9e:d9:74:32:70:16:39: b6:91:3c:b4:cf:70:ca:99:08:4f:60:f4:0b:47:9a: c9:fe:58:b7:c7:86:df:a5:ca:08:40:14:8b:35:02: 2a:d2:9d:f8:cb:dd:ba:07:c8:d2:00:5a:b9:6f:5f: 4e:c5:ae:c5:9a:82:27:ac:b4:df:48:e9:c9:a2:2a: 4a:eb:6d:76:ab:7d:32:34:70:b0:ed:6e:61:ca:9d: f1:a7:b3:60:aa:7e:4d:33:d5:e7:32:52:ae:10:0d: ad:29:e1:b1:12:dc:99:56:90:a1:b8:1f:a4:18:15: eb:72:bf:be:74:07:ab:12:c5:45:63:47:16:fd:5c: b5:42:93:9e:a9:d5:73:6c:ec:df:2b:35:bc:e9:d1: 61:26:af:fa:c0:80:38:bc:ba:bf:b2:d0:a6:75:60: e2:c8:d0:cb:1b:b7:58:0d:33:07:c9:b7:12:09:a7: 34:82:5c:27:d2:5c:66:07:2d:3c:a8:48:d7:68:2b: a9:02:07:32:31:49:d3:65:e1:c0:4c:61:69:0b:ff: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4C:76:3A:2C:AB:D5:B4:AD:7C:E6:2F:A8:8C:63:EA:A5:4C:FE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9aee28f5-d0fd-3382-bbb3-1a0320d8afb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:79:f5:e6:85:06:4a:b1:90:ce:74:2c:de:ea:7f:a7:f4:2d: 43:4f:9f:b9:fd:38:1c:61:ba:de:5d:82:1a:cd:f1:44:12:8f: a5:f1:12:96:2c:2e:e5:97:77:b3:8e:52:f5:0b:51:fb:a6:fa: f9:34:bf:3f:9f:88:17:75:65:2f:5e:8a:f7:00:e3:b0:55:b5: a0:b2:09:9f:b6:3f:11:b4:1b:50:b5:1a:d4:d6:ea:20:8c:fa: 10:93:09:f6:f7:07:84:bb:d3:1d:1d:e7:9d:f5:89:2a:0c:07: a7:0b:2f:da:ce:32:31:a8:ec:6f:a1:98:1c:8c:9a:56:73:cb: 22:8c:e6:28:da:4a:8c:91:8e:dd:78:37:50:b1:bb:b6:fb:ec: 8f:df:e4:72:1e:9f:79:01:c6:0a:25:e5:b5:9a:6f:bc:2c:44: e7:52:0c:eb:3a:9a:49:68:e4:a1:19:ca:f2:af:66:7e:20:42: 2a:dc:e4:9d:0b:9f:e3:12:a0:a7:b2:09:9d:b0:01:eb:39:f5: 24:5b:0c:10:24:81:74:f5:68:31:db:d6:83:9a:26:d7:9a:32: 2d:92:4d:1f:c4:46:e2:ab:63:44:58:9f:94:1f:70:c8:e4:3f: 74:37:d9:69:32:02:28:8e:d7:1d:17:57:fd:dc:5d:94:5e:49: 3d:ba:49:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVqIW7UjTWq+2w/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDgxMjE4MjczMFoXDTI1MTExMDE5MjczMFowLzEtMCsGA1UEAxMk MzViOThjN2ItYzBjNy00NWRmLWFmYmItZTc4ZTVlNDA3N2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHG0bIJAXRGUFyslMiaJBHWrPn7dTtJQO4pj iA7bf0ChinTEgx3lQAC5kssTVXWffIiPbp7ZdDJwFjm2kTy0z3DKmQhPYPQLR5rJ /li3x4bfpcoIQBSLNQIq0p34y926B8jSAFq5b19Oxa7FmoInrLTfSOnJoipK6212 q30yNHCw7W5hyp3xp7Ngqn5NM9XnMlKuEA2tKeGxEtyZVpChuB+kGBXrcr++dAer EsVFY0cW/Vy1QpOeqdVzbOzfKzW86dFhJq/6wIA4vLq/stCmdWDiyNDLG7dYDTMH ybcSCac0glwn0lxmBy08qEjXaCupAgcyMUnTZeHATGFpC/+nowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtMdjosq9W0rXzmL6iMY+qlTP51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWFlZTI4ZjUtZDBmZC0z MzgyLWJiYjMtMWEwMzIwZDhhZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALh59eaFBkqxkM50LN7qf6f0LUNPn7n9OBxhut5dghrN8UQSj6XxEpYs LuWXd7OOUvULUfum+vk0vz+fiBd1ZS9eivcA47BVtaCyCZ+2PxG0G1C1GtTW6iCM +hCTCfb3B4S70x0d5531iSoMB6cLL9rOMjGo7G+hmByMmlZzyyKM5ijaSoyRjt14 N1Cxu7b77I/f5HIen3kBxgol5bWab7wsROdSDOs6mklo5KEZyvKvZn4gQirc5J0L n+MSoKeyCZ2wAes59SRbDBAkgXT1aDHb1oOaJteaMi2STR/ERuKrY0RYn5QfcMjk P3Q32WkyAiiO1x0XV/3cXZReST26Sf8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:38 2025 by rpki-client