$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa File: 7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa (raw, json) Hash identifier: 2KaZ2gn9gJJzx/9syEFJYYkoKd/R4CMAN7xFLOgkFQQ= Subject key identifier: 82:FF:B5:88:CE:C8:D5:A5:71:9F:05:7C:47:B4:84:D1:13:F1:55:42 Certificate issuer: /CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Certificate serial: 010D0C9F4328584A8575EC43F7ED644EDCDFBFC0 Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 149522 IP address blocks: 68.69.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ec:43:f7:ed:64:4e:dc:df:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=beda17ba-a271-41ad-84ad-ab5f30fd55ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:47:c9:98:9d:cf:44:07:d9:d3:4b:e4:3a: c5:f6:f1:ed:69:ea:35:98:de:c9:1f:c3:4d:04:4e: fb:41:ea:b9:c6:fe:96:21:8f:1c:1e:2b:5b:93:01: 54:11:c4:b3:31:98:20:dd:5e:74:ea:d1:56:b9:2c: 4f:54:b3:4b:92:95:6d:bc:7e:b4:47:32:49:42:fb: 83:c9:9b:ee:57:df:3b:b7:05:a7:1a:22:52:c9:38: 08:76:9d:52:60:bb:a0:80:fd:b1:f6:62:29:10:f4: c2:9e:bd:34:9f:e8:1e:84:69:b0:34:82:3e:4e:b3: 09:3f:01:86:b6:17:e7:e2:e4:72:ae:c6:21:23:30: e6:a6:fb:fd:63:6b:09:26:24:ff:ed:cb:c4:07:4d: 9d:60:e6:9b:ca:e0:9e:50:d3:40:fb:53:30:a2:0e: 5e:06:5b:89:3a:71:65:42:0b:cd:42:c0:8b:79:e2: 4a:9a:e8:f5:0d:7f:1a:40:34:ac:3f:d6:1a:6c:64: 21:50:47:00:7e:c7:4a:b8:3f:a1:74:8f:86:6e:c1: 9c:b0:4d:88:be:27:7b:e8:d8:0f:17:32:2c:a0:36: 24:27:61:e5:85:39:e4:2e:88:87:ce:ef:7b:b7:c0: 44:c0:40:81:eb:d9:ec:73:14:87:3a:fb:ed:70:43: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:B5:88:CE:C8:D5:A5:71:9F:05:7C:47:B4:84:D1:13:F1:55:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl X509v3 Authority Key Identifier: keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer sbgp-ipAddrBlock: critical IPv4: 68.69.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:21:9c:91:4f:7a:f5:b6:dd:e1:b1:c6:f2:65:a5:61:1a:8f: c7:83:a9:94:af:75:b4:16:5d:cc:f4:6d:86:26:de:8d:2e:02: 1b:04:ba:75:f2:cd:56:92:9d:c7:e2:cb:3b:dd:9c:e4:96:77: 94:48:ca:c4:07:53:dc:c3:4a:53:33:8c:97:4b:76:30:c1:0a: 89:10:85:32:35:1c:35:a5:fe:bc:d3:a5:85:bc:fe:9f:87:4b: 59:ec:86:ae:52:01:5c:39:74:61:03:c7:06:ee:0d:76:1b:37: df:8c:ef:f9:34:08:4f:80:13:07:dc:a7:a0:6a:91:07:cf:54: 0a:4a:a1:30:d7:6a:70:44:31:a5:2f:94:ab:f5:65:fe:d2:de: e1:ce:04:fb:da:36:c2:9c:d8:5e:ba:fd:b7:d0:01:7b:31:72: 6c:3b:cd:1c:3d:cf:79:8f:c8:c5:da:fa:f7:42:6b:73:66:5f: 4c:7c:9d:e3:76:60:c4:89:ac:1b:b2:15:98:c1:57:ba:5e:85: 31:8a:9a:a3:dd:63:01:76:79:ec:5b:b0:64:5d:48:6f:88:0d: 80:ce:24:36:72:be:03:90:fc:a2:f5:54:82:ec:85:0c:75:3c: 59:a7:82:af:80:78:06:d9:90:6f:b4:76:d1:ac:49:dd:59:b4: 04:52:55:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdexD9+1kTtzfv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4Y2U5MzctYjY1Yy00ODg5LThhM2MtMTQ1ZDcxOTQ5 ZTE0MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk YmVkYTE3YmEtYTI3MS00MWFkLTg0YWQtYWI1ZjMwZmQ1NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApixHyZidz0QH2dNL5DrF9vHtaeo1mN7JH8NN BE77Qeq5xv6WIY8cHitbkwFUEcSzMZgg3V506tFWuSxPVLNLkpVtvH60RzJJQvuD yZvuV987twWnGiJSyTgIdp1SYLuggP2x9mIpEPTCnr00n+gehGmwNII+TrMJPwGG thfn4uRyrsYhIzDmpvv9Y2sJJiT/7cvEB02dYOabyuCeUNNA+1Mwog5eBluJOnFl QgvNQsCLeeJKmuj1DX8aQDSsP9YabGQhUEcAfsdKuD+hdI+GbsGcsE2Ivid76NgP FzIsoDYkJ2HlhTnkLoiHzu97t8BEwECB69nscxSHOvvtcEOMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL/tYjOyNWlcZ8FfEe0hNET8VVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjhj ZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVkNzE5NDllMTQvN2I2YzAzZTYtNGZhYy0z NDhhLThkM2UtNTRjN2RlZjFjMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y4Y2U5MzctYjY1Yy00ODg5LThh M2MtMTQ1ZDcxOTQ5ZTE0LzNmOGNlOTM3LWI2NWMtNDg4OS04YTNjLTE0NWQ3MTk0 OWUxNC5jcmwwHwYDVR0jBBgwFoAUc3qUl97jg8GLnVAV0wQoUem2uAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zZjhjZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVk NzE5NDllMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHchnJFPevW23eGxxvJlpWEaj8eDqZSvdbQWXcz0bYYm3o0uAhsEunXy zVaSncfiyzvdnOSWd5RIysQHU9zDSlMzjJdLdjDBCokQhTI1HDWl/rzTpYW8/p+H S1nshq5SAVw5dGEDxwbuDXYbN9+M7/k0CE+AEwfcp6BqkQfPVApKoTDXanBEMaUv lKv1Zf7S3uHOBPvaNsKc2F66/bfQAXsxcmw7zRw9z3mPyMXa+vdCa3NmX0x8neN2 YMSJrBuyFZjBV7pehTGKmqPdYwF2eexbsGRdSG+IDYDOJDZyvgOQ/KL1VILshQx1 PFmngq+AeAbZkG+0dtGsSd1ZtARSVSg= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:30 2025 by rpki-client