$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa File: c1cad078-8b5d-38b5-8141-35b1324af051.roa (raw, json) Hash identifier: SRRCmnYNADTSsMxgk0LASJnEI+diCNwJ7ywSAx94/oA= Subject key identifier: 92:0A:76:27:12:0C:E4:54:4E:07:1B:B9:1F:E2:99:20:35:13:8A:B6 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584AF52122F4032614CBA9D29480 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 400040 IP address blocks: 68.67.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:22:f4:03:26:14:cb:a9:d2:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=b7891a9a-fabf-42f6-98f7-a09fc0d4b0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:93:d4:43:2e:46:e4:64:75:23:fc:0d:6c: ea:ef:93:b2:4a:5e:9e:99:45:d8:10:ed:e5:d8:9e: 67:bc:52:73:1b:0c:3f:65:14:47:99:28:f9:53:39: 44:b3:f0:66:19:48:9f:a1:df:e8:bd:42:2c:03:f9: d8:5c:42:6f:89:64:13:05:78:14:bc:23:cc:0d:48: 65:3b:99:7a:6c:e2:d4:b4:50:4b:ad:f3:d5:a0:65: b1:a6:d0:8a:de:57:c5:2d:aa:12:21:a8:8d:02:d4: da:f7:cf:72:6c:95:ea:21:7f:79:a8:38:ff:eb:ff: 81:82:a2:fb:8d:8f:7a:ee:f5:40:3c:10:ca:6d:ab: 6d:bb:3a:e6:30:56:ff:30:7f:9b:6a:cd:fe:e1:eb: 14:e8:6c:45:37:be:dd:26:fb:fd:16:41:ba:cb:35: 39:ed:e6:c6:6e:01:6d:8c:c7:49:ae:a1:b2:d4:ba: f4:d0:cd:48:3e:4c:bc:58:34:d4:d9:d9:e9:64:39: b4:9b:7a:69:7c:ab:53:4b:8c:ea:b0:f1:db:0e:64: 35:e7:0c:87:95:0b:41:eb:0a:81:ae:6c:f2:77:88: 8d:f4:d0:0c:ff:29:d6:c6:c9:d6:a4:4a:d3:d5:3d: de:56:ce:99:0e:4c:e7:cc:4f:0b:ba:0b:1d:aa:ae: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0A:76:27:12:0C:E4:54:4E:07:1B:B9:1F:E2:99:20:35:13:8A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:ff:48:95:82:2e:8f:95:28:ab:29:2e:b1:6c:18:cc:2a:c8: 06:72:62:e3:b6:63:61:66:54:69:10:68:48:5f:37:cb:43:19: 14:4b:0c:0d:9b:14:79:db:d0:03:26:40:75:c6:97:53:d5:bd: 35:b9:61:93:88:23:ff:f6:c5:83:d6:1e:2a:02:24:2a:22:f4: 28:35:2e:a4:17:0c:23:4c:25:9e:30:00:2a:78:69:13:80:30: 94:b5:4a:71:dd:78:ec:7e:44:f9:49:a6:1e:22:5f:ce:d3:df: c7:79:cb:f0:5d:ef:d0:30:c5:08:c1:78:d8:c3:e0:6d:46:39: 77:d8:cd:79:d7:4f:b4:9a:98:9b:02:09:2c:ee:15:93:56:e8: 98:c4:58:0e:5d:b5:22:c5:27:58:65:24:3a:f2:1f:e1:60:f5: 3c:9e:62:40:63:eb:1e:e3:9f:c0:54:8e:21:76:f3:64:22:3d: e2:8c:26:71:ac:ff:bf:a8:28:74:6c:48:6d:aa:ac:9a:39:73: bb:ba:41:a7:fc:8a:74:cf:ba:3a:28:b8:37:b8:5b:c9:2d:aa: e4:d9:28:d0:72:34:e2:a6:ff:82:66:77:94:3d:1f:ec:9d:83: c6:e9:c7:ea:e9:c1:ef:b5:c3:fb:4c:d8:b1:e1:9e:89:b2:bf: 1d:c8:95:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISL0AyYUy6nSlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Yjc4OTFhOWEtZmFiZi00MmY2LTk4ZjctYTA5ZmMwZDRiMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseuT1EMuRuRkdSP8DWzq75OySl6emUXYEO3l 2J5nvFJzGww/ZRRHmSj5UzlEs/BmGUifod/ovUIsA/nYXEJviWQTBXgUvCPMDUhl O5l6bOLUtFBLrfPVoGWxptCK3lfFLaoSIaiNAtTa989ybJXqIX95qDj/6/+BgqL7 jY967vVAPBDKbattuzrmMFb/MH+bas3+4esU6GxFN77dJvv9FkG6yzU57ebGbgFt jMdJrqGy1Lr00M1IPky8WDTU2dnpZDm0m3ppfKtTS4zqsPHbDmQ15wyHlQtB6wqB rmzyd4iN9NAM/ynWxsnWpErT1T3eVs6ZDkznzE8Lugsdqq6LuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIKdicSDORUTgcbuR/imSA1E4q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYzFjYWQwNzgtOGI1ZC0z OGI1LTgxNDEtMzViMTMyNGFmMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANn/SJWCLo+VKKspLrFsGMwqyAZyYuO2Y2FmVGkQaEhfN8tDGRRLDA2b FHnb0AMmQHXGl1PVvTW5YZOII//2xYPWHioCJCoi9Cg1LqQXDCNMJZ4wACp4aROA MJS1SnHdeOx+RPlJph4iX87T38d5y/Bd79AwxQjBeNjD4G1GOXfYzXnXT7SamJsC CSzuFZNW6JjEWA5dtSLFJ1hlJDryH+Fg9TyeYkBj6x7jn8BUjiF282QiPeKMJnGs /7+oKHRsSG2qrJo5c7u6Qaf8inTPujoouDe4W8ktquTZKNByNOKm/4Jmd5Q9H+yd g8bpx+rpwe+1w/tM2LHhnomyvx3IlSE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:04 2025 by rpki-client