$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a29faf61-2606-37a4-8944-3b4057b51f57.roa File: a29faf61-2606-37a4-8944-3b4057b51f57.roa (raw, json) Hash identifier: 8tNYNyOe6tglW5LgrGgr/iRKT+/vvjb9/ikHyXyRhyQ= Subject key identifier: C0:66:72:78:04:B8:C5:1F:7C:68:F7:90:56:B4:B0:54:08:D6:D7:98 Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F4328584B2CF6E097D9A983683773BE20 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a29faf61-2606-37a4-8944-3b4057b51f57.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 36103 IP address blocks: 68.70.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e0:97:d9:a9:83:68:37:73:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=5ec3c452-dbcc-489c-807d-05875b9e20e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:88:32:7d:18:ab:2f:f7:bd:ac:3e:18:59: ce:8d:b7:82:f6:b1:52:2d:18:f4:56:0a:97:ee:00: 27:6a:eb:c5:5e:cf:3a:fb:0f:68:c5:2c:e6:ef:eb: fc:73:e2:94:b2:fa:99:44:95:99:40:81:b5:25:bb: f4:7a:25:8f:9a:54:9a:3e:06:60:7e:3f:a2:e5:b0: 71:76:0b:79:29:99:17:61:89:7d:2c:4b:f1:9b:0a: 69:53:3c:f3:0c:73:97:f8:29:6b:c4:d1:e1:10:e3: 22:4d:85:ad:6d:67:54:8c:03:7e:6b:34:30:d4:45: 63:be:f1:2a:96:15:0d:49:6f:c8:f6:28:6b:28:c5: ba:a5:6f:26:ae:a3:d1:75:36:36:a4:15:ca:ef:cd: 65:4f:e7:4c:cd:e2:31:d1:67:95:a1:f3:ef:73:37: 0e:4e:a9:ca:78:38:0e:b1:9e:46:a2:c2:e7:1c:9b: 12:ed:3e:35:32:c0:e6:04:87:0d:95:6c:e3:ab:99: 5f:b3:06:c9:ce:54:a3:26:92:e2:74:7c:78:fe:a4: f3:97:db:b6:be:02:81:a7:a9:ff:b4:a6:0e:8e:ad: 34:41:da:9c:1f:9a:17:6f:82:b9:40:6b:9d:c7:ff: 9e:0a:f1:a0:0c:af:4a:84:07:cb:80:3a:ba:55:7b: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:66:72:78:04:B8:C5:1F:7C:68:F7:90:56:B4:B0:54:08:D6:D7:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a29faf61-2606-37a4-8944-3b4057b51f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 68.70.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:52:7f:36:a9:f0:2e:65:85:ba:1f:98:6a:2d:00:be:3b:eb: c0:a3:3f:bb:b7:31:a9:c9:34:6b:c5:f2:31:45:64:63:15:6f: d7:99:73:11:3a:4e:bd:dd:6c:5a:b7:8d:93:10:dc:b8:1a:b4: a8:29:e0:e9:3b:6f:4c:ea:03:1e:a7:46:dd:56:48:9c:73:71: b3:e9:f4:e4:fa:b5:f0:d2:06:f8:1d:0b:ec:6f:f0:b0:b6:39: a2:11:58:1c:b2:40:43:af:85:c9:df:d4:97:e1:77:7b:cc:43: 7b:7c:f6:7e:06:50:74:da:a1:30:49:39:3b:6b:87:a6:2f:8d: 8a:0d:36:bf:5a:46:76:d3:93:a5:ef:1e:e4:1f:e9:92:a0:ee: 84:fd:fc:11:54:04:29:fa:35:af:e3:a5:db:52:8a:3c:ce:30: 95:1c:9c:57:cf:81:1b:eb:58:86:bf:b0:f4:e8:bc:12:ca:23: d1:4c:ce:62:2a:ae:ad:b3:14:49:ff:80:4e:24:e1:b1:96:04: e5:7a:b9:60:4f:bb:49:cb:96:95:60:78:7c:7f:35:79:8e:a7: f9:21:8f:46:f0:64:cb:66:07:86:2c:ef:60:63:a7:f9:76:9c: 82:e4:00:97:4b:61:a6:6d:e1:05:29:13:72:34:62:d5:8d:e9: f5:aa:86:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uCX2amDaDdzviAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NWVjM2M0NTItZGJjYy00ODljLTgwN2QtMDU4NzViOWUyMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEyIMn0Yqy/3vaw+GFnOjbeC9rFSLRj0VgqX 7gAnauvFXs86+w9oxSzm7+v8c+KUsvqZRJWZQIG1Jbv0eiWPmlSaPgZgfj+i5bBx dgt5KZkXYYl9LEvxmwppUzzzDHOX+ClrxNHhEOMiTYWtbWdUjAN+azQw1EVjvvEq lhUNSW/I9ihrKMW6pW8mrqPRdTY2pBXK781lT+dMzeIx0WeVofPvczcOTqnKeDgO sZ5GosLnHJsS7T41MsDmBIcNlWzjq5lfswbJzlSjJpLidHx4/qTzl9u2vgKBp6n/ tKYOjq00QdqcH5oXb4K5QGudx/+eCvGgDK9KhAfLgDq6VXsugQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBmcngEuMUffGj3kFa0sFQI1teYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvYTI5ZmFmNjEtMjYwNi0z N2E0LTg5NDQtM2I0MDU3YjUxZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1Sfzap8C5lhbofmGotAL4768CjP7u3ManJNGvF8jFFZGMVb9eZcxE6 Tr3dbFq3jZMQ3LgatKgp4Ok7b0zqAx6nRt1WSJxzcbPp9OT6tfDSBvgdC+xv8LC2 OaIRWByyQEOvhcnf1Jfhd3vMQ3t89n4GUHTaoTBJOTtrh6YvjYoNNr9aRnbTk6Xv HuQf6ZKg7oT9/BFUBCn6Na/jpdtSijzOMJUcnFfPgRvrWIa/sPTovBLKI9FMzmIq rq2zFEn/gE4k4bGWBOV6uWBPu0nLlpVgeHx/NXmOp/khj0bwZMtmB4Ys72Bjp/l2 nILkAJdLYaZt4QUpE3I0YtWN6fWqhmQ= -----END CERTIFICATE-----Generated at Sat Oct 11 07:25:29 2025 by rpki-client