$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa File: 14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa (raw, json) Hash identifier: gvu6CJZwd54Ig2Wpwd5w39VVOzGLLzHwstiTH4jwdC0= Subject key identifier: F4:71:11:A3:ED:9D:EF:D4:C4:33:30:8D:28:5D:6C:F5:CC:5A:B5:E8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7780A7009048AE6659274800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 54004 IP address blocks: 68.182.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a7:00:90:48:ae:66:59:27:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=85b0f775-7c4f-4963-aec4-cfee5d592d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:54:d9:1d:d5:76:6f:00:ff:01:85:f9:cc: 45:1c:46:d8:c6:f6:3c:98:f4:e6:82:d3:17:5c:a5: 21:80:2a:c5:69:b5:24:a9:d7:f6:3e:a9:92:0d:77: c9:7a:a3:2d:2b:ef:ed:f3:06:c3:1c:95:c9:0c:06: 9f:33:ea:cf:34:6b:c5:4b:7d:bc:1b:ff:55:a8:ae: ce:fb:9c:ba:1d:d0:d1:0c:56:a9:b0:53:73:77:0d: bb:bd:86:01:db:17:84:ad:d1:3b:7d:8c:4a:dc:ef: e1:88:72:fb:ec:08:ad:a7:71:20:c6:6d:93:0c:41: 53:2c:e9:be:95:8b:06:67:af:a0:d5:90:ec:2f:6d: d6:19:97:5a:56:db:ea:64:28:54:6d:ad:8c:84:da: ab:b9:ab:44:6b:0c:b6:5c:40:a3:89:9d:76:ab:09: 7d:5e:8d:70:12:1c:2c:f3:52:71:49:98:66:23:4b: 48:a3:3a:65:2e:db:32:d1:e3:95:f0:4e:e4:b8:dc: 74:9e:e8:e7:ed:8d:a6:6c:81:7e:bf:56:39:5a:65: 05:3a:17:80:cf:3b:87:2d:37:d3:0a:1b:e2:df:98: aa:e6:0d:82:c2:f8:2b:5b:52:dd:3e:3e:7e:8d:cb: 4d:51:13:79:10:89:40:2e:ee:ca:39:38:ca:f0:cd: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:71:11:A3:ED:9D:EF:D4:C4:33:30:8D:28:5D:6C:F5:CC:5A:B5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:34:ff:a5:8d:ba:30:82:8a:c6:25:4e:39:03:c6:4e:66:d6: b8:28:76:a0:b2:44:fb:f1:0e:e1:e1:78:ec:69:66:81:35:48: 94:a8:03:87:e5:70:24:74:d5:f3:f1:59:29:be:67:0e:80:2c: 97:cd:cb:4f:2b:4f:86:1b:b3:e1:25:03:8f:6d:8f:ab:d2:f2: 7d:4b:d0:95:9c:6a:32:0e:2a:00:5c:da:9f:c3:77:50:75:45: 8f:a0:8b:a6:4c:a9:e4:85:fb:e7:d0:35:c6:a6:0c:0e:21:26: 78:b0:cd:a4:36:f6:c5:e4:07:42:a3:b2:a5:33:00:46:bf:bd: f3:39:a2:9b:2b:b0:90:9a:d9:f4:59:f4:66:ff:2c:6d:64:0f: c9:a7:3a:43:65:3d:3f:dc:43:ea:02:cd:8e:ab:96:5f:62:34: ca:d3:f2:e4:37:01:07:19:35:71:80:77:bb:84:0d:ab:42:06: f1:a0:e9:de:36:58:fd:43:dd:66:c9:6e:3d:c2:9b:33:81:68: bc:5b:39:e3:21:9a:94:33:79:91:61:3c:5f:b4:b3:0e:34:b6: f7:f0:00:ec:90:b7:2e:83:74:79:51:12:07:0b:96:3f:e3:d8: 55:06:fe:ba:02:41:ed:a9:4d:97:2b:fa:71:11:3e:b6:9a:3e: f4:6f:79:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKcAkEiuZlknSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ODViMGY3NzUtN2M0Zi00OTYzLWFlYzQtY2ZlZTVkNTkyZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrJU2R3Vdm8A/wGF+cxFHEbYxvY8mPTmgtMX XKUhgCrFabUkqdf2PqmSDXfJeqMtK+/t8wbDHJXJDAafM+rPNGvFS328G/9VqK7O +5y6HdDRDFapsFNzdw27vYYB2xeErdE7fYxK3O/hiHL77Aitp3Egxm2TDEFTLOm+ lYsGZ6+g1ZDsL23WGZdaVtvqZChUba2MhNqruatEawy2XECjiZ12qwl9Xo1wEhws 81JxSZhmI0tIozplLtsy0eOV8E7kuNx0nujn7Y2mbIF+v1Y5WmUFOheAzzuHLTfT Chvi35iq5g2CwvgrW1LdPj5+jctNURN5EIlALu7KOTjK8M20GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRxEaPtne/UxDMwjShdbPXMWrXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTRlMDIwYTYtOGRlOS0z YjhhLTg3ZjItMTdhOWRiMWFhYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg0/6WNujCCisYlTjkDxk5m1rgodqCyRPvxDuHheOxpZoE1SJSoA4fl cCR01fPxWSm+Zw6ALJfNy08rT4Ybs+ElA49tj6vS8n1L0JWcajIOKgBc2p/Dd1B1 RY+gi6ZMqeSF++fQNcamDA4hJniwzaQ29sXkB0KjsqUzAEa/vfM5opsrsJCa2fRZ 9Gb/LG1kD8mnOkNlPT/cQ+oCzY6rll9iNMrT8uQ3AQcZNXGAd7uEDatCBvGg6d42 WP1D3WbJbj3CmzOBaLxbOeMhmpQzeZFhPF+0sw40tvfwAOyQty6DdHlREgcLlj/j 2FUG/roCQe2pTZcr+nERPraaPvRveeQ= -----END CERTIFICATE-----Generated at Fri Jul 25 19:32:12 2025 by rpki-client