$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa File: 7ab7b27a-d14d-39af-9d87-f3f814730a14.roa (raw, json) Hash identifier: sQpdRafxKoOvxJkblpmT1ItJIN8eK1fdRj1sx6hWVMs= Subject key identifier: 9B:FA:70:56:EE:5E:63:63:8C:DC:D0:7B:1E:0F:0D:F3:16:CE:C4:79 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1EB7DB665C0A7D017AC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 68.232.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1e:b7:db:66:5c:0a:7d:01:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=39b73b09-71a7-45ee-aa12-fb8799d8d20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:84:c5:fe:ae:a6:e5:4e:0a:c7:11:53:49: b3:45:43:af:e4:ca:9c:b1:73:2a:37:37:18:14:bf: 64:af:42:e1:dd:56:ba:f5:bd:78:f3:1d:bd:47:8b: 77:cc:49:f3:87:b0:be:e0:8f:1d:68:58:60:36:81: 0e:83:dc:30:72:43:57:4e:3a:44:73:70:29:07:9e: e3:18:e1:c2:27:28:9c:4a:8c:a1:20:04:35:32:ab: 46:d9:ce:6a:c2:9d:40:09:ee:2f:a5:ae:c6:b5:11: 01:e1:d7:71:fc:e6:c2:61:80:2f:cd:aa:e6:7e:e7: 27:ad:76:81:74:56:29:e2:e1:79:81:3d:46:b2:ea: 54:15:84:19:98:45:b5:0a:b0:91:0f:42:e3:3a:08: b3:37:02:93:43:2e:9d:45:43:75:a4:a0:b0:36:b1: 7a:3f:7c:50:ab:e5:79:45:23:75:03:58:03:9c:36: 35:ac:a3:fc:f4:0b:23:c4:c7:b7:bf:2c:4a:d3:4a: 5c:47:b7:8c:d1:5c:6c:86:cd:23:b9:52:7a:10:e7: 51:b5:e5:ad:e6:5f:db:fe:70:6c:e4:4f:fe:c0:00: 8a:ea:1d:60:fc:88:41:21:fb:fc:56:11:02:06:61: 57:06:b1:53:15:22:51:1a:07:ce:3a:85:da:48:de: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FA:70:56:EE:5E:63:63:8C:DC:D0:7B:1E:0F:0D:F3:16:CE:C4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5f:17:d6:49:66:1d:a8:7b:0b:91:ba:20:77:87:38:23:ee: 6c:14:c2:cc:8e:88:f6:14:e3:a9:1c:eb:e9:a4:a1:af:b4:29: e3:09:bb:04:7b:f8:30:af:26:8c:5f:4d:22:a6:41:39:7e:5e: d2:d2:4a:a1:5a:ca:65:5d:cc:53:0a:e6:77:e2:e9:64:3d:81: 74:c2:f6:54:58:b1:89:9a:a9:39:cb:06:a4:6e:f1:dd:0c:fe: b1:65:bd:6c:08:e4:3c:73:49:39:49:fd:d5:46:a6:48:be:97: 78:e4:0e:86:16:37:80:a5:7d:90:ef:bc:5d:2c:55:a8:ed:5f: 85:11:01:cf:67:8e:53:5d:af:ea:32:01:20:ec:f5:ec:05:34: 05:2d:b2:5a:fe:2e:df:34:0b:0e:02:69:47:0e:4c:3e:53:fa: c9:6d:04:a8:42:56:27:6c:12:94:ff:aa:76:dd:3a:6a:5f:cb: 9a:c4:6d:53:b7:ce:6b:c1:81:94:8c:98:7e:7a:74:7f:5d:55: a6:eb:f9:74:f6:e8:f6:fb:0f:43:cf:d3:6c:6c:e9:3f:9c:90: 19:e2:76:18:a5:6d:13:96:7a:4e:8c:42:ff:6b:a0:0a:01:fa: 16:5b:a2:2e:60:45:f5:34:ba:88:12:7e:4f:62:4e:ab:72:b6: 3a:3e:cd:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx6322ZcCn0BesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MzliNzNiMDktNzFhNy00NWVlLWFhMTItZmI4Nzk5ZDhkMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcCExf6upuVOCscRU0mzRUOv5MqcsXMqNzcY FL9kr0Lh3Va69b148x29R4t3zEnzh7C+4I8daFhgNoEOg9wwckNXTjpEc3ApB57j GOHCJyicSoyhIAQ1MqtG2c5qwp1ACe4vpa7GtREB4ddx/ObCYYAvzarmfucnrXaB dFYp4uF5gT1GsupUFYQZmEW1CrCRD0LjOgizNwKTQy6dRUN1pKCwNrF6P3xQq+V5 RSN1A1gDnDY1rKP89AsjxMe3vyxK00pcR7eM0Vxshs0juVJ6EOdRteWt5l/b/nBs 5E/+wACK6h1g/IhBIfv8VhECBmFXBrFTFSJRGgfOOoXaSN7H0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJv6cFbuXmNjjNzQex4PDfMWzsR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2FiN2IyN2EtZDE0ZC0z OWFmLTlkODctZjNmODE0NzMwYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRfF9ZJZh2oewuRuiB3hzgj7mwUwsyOiPYU46kc6+mkoa+0KeMJuwR7 +DCvJoxfTSKmQTl+XtLSSqFaymVdzFMK5nfi6WQ9gXTC9lRYsYmaqTnLBqRu8d0M /rFlvWwI5DxzSTlJ/dVGpki+l3jkDoYWN4ClfZDvvF0sVajtX4URAc9njlNdr+oy ASDs9ewFNAUtslr+Lt80Cw4CaUcOTD5T+sltBKhCVidsEpT/qnbdOmpfy5rEbVO3 zmvBgZSMmH56dH9dVabr+XT26Pb7D0PP02xs6T+ckBnidhilbROWek6MQv9roAoB +hZboi5gRfU0uogSfk9iTqtytjo+zYk= -----END CERTIFICATE-----Generated at Mon Jun 30 10:44:50 2025 by rpki-client