$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa File: b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa (raw, json) Hash identifier: DElX8JKUbIDPgl+gzDnwfUkGHL82Tayt0lXMBhCOrkw= Subject key identifier: E0:C3:EA:6B:0A:F5:3C:0B:C2:E0:43:0E:2E:10:C6:8C:78:59:6D:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB8DEB5B7B673698CEADC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7725 IP address blocks: 68.85.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:8d:eb:5b:7b:67:36:98:ce:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7c5f81ce-dd5b-405e-9c92-488a521a9ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:db:56:f6:64:2c:41:a4:cc:42:af:2a:39: 8a:08:e2:c5:ca:74:ca:7f:1c:93:39:de:5a:bd:7b: 8e:58:a6:97:22:cf:b2:97:32:7c:11:e0:cc:8b:ab: 76:40:9b:8e:bb:86:4c:43:b8:dc:c3:76:8a:72:2b: 11:ce:32:4a:0d:11:24:b5:a5:48:2b:3d:64:34:5a: 79:4e:98:16:ea:66:07:34:12:41:c2:d4:47:31:14: e6:cf:3b:e9:0f:5b:32:ea:73:2e:69:f7:6a:a6:82: 9c:e7:ab:53:d9:2c:c0:aa:df:68:29:a0:51:78:e4: bf:d8:ff:70:cb:3b:43:9c:08:6a:cf:80:84:c0:a6: e6:a4:64:7e:f5:69:d9:76:8e:d5:38:b1:f3:6c:98: 3a:16:38:34:66:1f:62:1f:6f:c6:f8:26:0f:9b:a2: e7:ee:56:58:72:9a:43:b8:84:51:c3:cc:6a:01:95: 5d:94:1c:6c:c6:89:33:9b:1f:69:2f:b9:97:ba:59: cc:f0:37:65:ef:ed:4c:c0:10:7b:6c:6c:a2:74:71: b7:cb:4f:c5:fa:81:45:a9:77:ab:5f:32:7d:cf:20: 9d:bf:3e:40:29:00:40:7e:85:65:00:6c:76:7c:a5: ce:2b:3e:0e:3f:3d:fb:ed:2a:46:ef:1c:25:30:0b: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C3:EA:6B:0A:F5:3C:0B:C2:E0:43:0E:2E:10:C6:8C:78:59:6D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fa:28:a6:52:6b:03:82:bc:6f:fb:be:d4:f2:43:dd:d8:dd: 92:14:b5:d0:38:74:d4:6c:b3:f9:a7:d7:01:f9:37:07:4b:d3: ae:77:f8:68:e5:98:da:cb:01:f0:7b:1b:b2:35:1e:86:8a:04: 26:81:02:45:39:47:b9:ff:4c:77:53:bd:13:8a:1c:0b:bd:b4: 0c:02:33:53:74:e7:6e:da:c2:ff:0c:57:1a:04:72:48:be:7a: ea:4b:8d:70:3f:2b:e4:36:14:d9:56:62:fc:b4:76:4d:19:29: 88:15:80:0f:72:43:02:a7:ff:39:13:9e:20:39:20:3c:09:39: 88:07:bb:15:80:31:ee:ca:2f:5c:b0:58:bb:9b:a3:33:3b:2e: e8:10:f0:13:f8:8d:6f:50:f7:fc:c5:0e:72:3e:f8:f3:6d:a2: 31:86:18:03:e3:95:a0:ae:24:71:9b:c1:31:8e:37:7d:49:16: 84:44:54:f0:aa:26:a3:c2:eb:c5:43:64:b9:b3:68:00:78:f1: 9b:f5:c0:9e:62:33:05:b1:6a:8d:9e:19:31:08:d0:1e:3e:37: 0c:73:c0:b1:39:66:d9:b4:b2:21:e2:74:94:71:5b:10:de:d3: 8a:f9:77:76:cb:71:f4:7e:bb:37:16:23:22:4a:03:af:a9:34: 6a:96:b7:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+43rW3tnNpjOrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk N2M1ZjgxY2UtZGQ1Yi00MDVlLTljOTItNDg4YTUyMWE5YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi77bVvZkLEGkzEKvKjmKCOLFynTKfxyTOd5a vXuOWKaXIs+ylzJ8EeDMi6t2QJuOu4ZMQ7jcw3aKcisRzjJKDREktaVIKz1kNFp5 TpgW6mYHNBJBwtRHMRTmzzvpD1sy6nMuafdqpoKc56tT2SzAqt9oKaBReOS/2P9w yztDnAhqz4CEwKbmpGR+9WnZdo7VOLHzbJg6Fjg0Zh9iH2/G+CYPm6Ln7lZYcppD uIRRw8xqAZVdlBxsxokzmx9pL7mXulnM8Ddl7+1MwBB7bGyidHG3y0/F+oFFqXer XzJ9zyCdvz5AKQBAfoVlAGx2fKXOKz4OPz377SpG7xwlMAuQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODD6msK9TwLwuBDDi4Qxox4WW0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdkOTg5NzctYWRjMC0z NTE0LTlhNWUtNWRhNmRlNmUzYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP6KKZSawOCvG/7vtTyQ93Y3ZIUtdA4dNRss/mn1wH5NwdL0653+Gjl mNrLAfB7G7I1HoaKBCaBAkU5R7n/THdTvROKHAu9tAwCM1N0527awv8MVxoEcki+ eupLjXA/K+Q2FNlWYvy0dk0ZKYgVgA9yQwKn/zkTniA5IDwJOYgHuxWAMe7KL1yw WLubozM7LugQ8BP4jW9Q9/zFDnI++PNtojGGGAPjlaCuJHGbwTGON31JFoREVPCq JqPC68VDZLmzaAB48Zv1wJ5iMwWxao2eGTEI0B4+NwxzwLE5Ztm0siHidJRxWxDe 04r5d3bLcfR+uzcWIyJKA6+pNGqWtyc= -----END CERTIFICATE-----Generated at Sun Jul 20 21:31:27 2025 by rpki-client