$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa File: 9632c414-89db-304c-bf1d-7e66cbea85d4.roa (raw, json) Hash identifier: 7MRkr6JVSyD+lZeSOYBkALbG/CCs5AZiGdN7IyWh5Tk= Subject key identifier: A8:78:04:E4:52:7D:89:30:2B:C1:C8:14:B8:61:6D:3D:69:1E:65:96 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584A741A974B6BF3075E405915C0 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa Signing time: Tue 08 Jul 2025 19:48:06 +0000 ROA not before: Tue 08 Jul 2025 19:48:06 +0000 ROA not after: Mon 06 Oct 2025 19:48:06 +0000 asID: 16509 IP address blocks: 68.71.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:1a:97:4b:6b:f3:07:5e:40:59:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Jul 8 19:48:06 2025 GMT Not After : Oct 6 19:48:06 2025 GMT Subject: CN=f4afe473-53a2-4611-b292-9ce2948664b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:ed:49:57:44:b2:c0:f8:13:eb:e8:68:54: 8e:df:81:63:6a:8d:a0:1d:de:56:38:19:14:bf:f5: 94:2f:ad:3e:08:90:d5:46:f6:4c:94:ca:1c:9c:2a: f1:30:2e:b2:c5:6c:34:45:03:b8:33:03:6f:2b:0e: 59:f2:a4:db:3b:6a:e8:66:ef:5c:62:32:0e:57:b3: fa:21:fa:f6:69:e1:27:41:fb:89:b7:e0:12:ec:19: f8:f8:51:fe:94:78:0f:11:e9:d9:c5:d1:d2:1b:d5: 7e:c7:b2:1b:e2:21:4f:24:a0:55:69:cb:92:0b:41: a1:33:7d:cf:02:ba:3a:51:1d:04:06:2e:60:4c:13: 5b:a8:8a:0f:30:3c:26:f3:03:00:dd:6f:fa:df:bc: 8c:94:34:13:1f:db:7f:19:1f:9d:52:f1:22:9f:ab: 2c:f0:15:46:1d:e8:a8:cc:31:15:ed:cd:84:3f:c6: 6f:6b:42:82:87:55:2b:f9:f6:70:53:8c:77:c6:f3: e5:70:5d:b8:78:6a:75:19:2d:06:b8:71:8f:e5:3e: cf:10:2a:91:da:9e:5f:6a:f5:49:39:8f:c3:25:32: 07:fb:84:f9:f7:22:6b:3e:11:fe:a8:99:2f:39:f4: f2:27:cb:a6:9d:05:43:84:70:44:cc:0c:27:96:3b: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:78:04:E4:52:7D:89:30:2B:C1:C8:14:B8:61:6D:3D:69:1E:65:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:28:b4:d6:9e:8e:7a:5b:80:1c:6c:65:2b:d3:21:ca:72:81: 14:e0:42:9a:e5:c8:64:06:56:19:d5:73:b4:a1:1a:e7:11:58: ac:79:25:98:66:5e:f5:5f:f9:21:6e:75:71:83:71:5b:a4:cb: 84:b1:1c:3e:3a:63:86:de:8e:3d:91:6d:a1:74:10:30:66:db: 55:05:d7:60:fb:9b:a4:e3:35:a2:c7:fc:9e:40:5b:f6:ed:c1: 59:a9:ae:82:bb:42:75:e7:2c:c2:38:c1:aa:c9:0b:8c:e2:6e: d1:17:a5:78:91:8c:4e:b7:a5:df:16:0a:37:f8:97:a0:5b:ba: bf:04:3d:f9:9d:11:1b:b0:e1:d1:7b:a1:13:67:1f:ff:a3:d0: a9:ea:0c:bd:15:21:4d:0c:15:a3:92:ac:3d:8d:d2:4b:8f:b1: 8a:26:0d:ba:0e:41:0f:fb:dc:29:d8:f6:fc:32:be:d5:99:68: 16:a3:b2:a0:3c:f0:ee:60:2e:8c:22:ba:b2:ca:b6:2c:d4:d3: 64:d6:c6:e4:e8:34:25:89:50:99:1c:1e:6f:f3:57:1d:63:56: 91:a2:14:06:9e:e6:f4:02:55:36:6a:27:c5:1f:fc:39:b8:c4: 81:2f:8d:83:a3:a0:ad:ed:bc:2e:31:4e:25:60:6f:b0:f4:7a: 3b:d7:39:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0GpdLa/MHXkBZFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDcwODE5NDgwNloXDTI1MTAwNjE5NDgwNlowLzEtMCsGA1UEAxMk ZjRhZmU0NzMtNTNhMi00NjExLWIyOTItOWNlMjk0ODY2NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXrtSVdEssD4E+voaFSO34Fjao2gHd5WOBkU v/WUL60+CJDVRvZMlMocnCrxMC6yxWw0RQO4MwNvKw5Z8qTbO2roZu9cYjIOV7P6 Ifr2aeEnQfuJt+AS7Bn4+FH+lHgPEenZxdHSG9V+x7Ib4iFPJKBVacuSC0GhM33P Aro6UR0EBi5gTBNbqIoPMDwm8wMA3W/637yMlDQTH9t/GR+dUvEin6ss8BVGHeio zDEV7c2EP8Zva0KCh1Ur+fZwU4x3xvPlcF24eGp1GS0GuHGP5T7PECqR2p5favVJ OY/DJTIH+4T59yJrPhH+qJkvOfTyJ8umnQVDhHBEzAwnljsQ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh4BORSfYkwK8HIFLhhbT1pHmWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvOTYzMmM0MTQtODlkYi0z MDRjLWJmMWQtN2U2NmNiZWE4NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgotNaejnpbgBxsZSvTIcpygRTgQprlyGQGVhnVc7ShGucRWKx5JZhm XvVf+SFudXGDcVuky4SxHD46Y4bejj2RbaF0EDBm21UF12D7m6TjNaLH/J5AW/bt wVmproK7QnXnLMI4warJC4zibtEXpXiRjE63pd8WCjf4l6Bbur8EPfmdERuw4dF7 oRNnH/+j0KnqDL0VIU0MFaOSrD2N0kuPsYomDboOQQ/73CnY9vwyvtWZaBajsqA8 8O5gLowiurLKtizU02TWxuToNCWJUJkcHm/zVx1jVpGiFAae5vQCVTZqJ8Uf/Dm4 xIEvjYOjoK3tvC4xTiVgb7D0ejvXOTc= -----END CERTIFICATE-----Generated at Wed Jul 23 11:56:19 2025 by rpki-client