$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa File: 946b774e-ccb3-388d-8c32-e409c858b27c.roa (raw, json) Hash identifier: 7IdhRfuiLpHFFjFoTgFQiBsDqP99EPM4OWZtwAeKrEw= Subject key identifier: 20:C2:52:EB:A4:E0:1E:D9:85:52:55:44:AF:03:C4:52:CD:FA:C3:ED Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6290D61D6DAEF3993235A380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 54004 IP address blocks: 68.182.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d6:1d:6d:ae:f3:99:32:35:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=c94915ef-0724-45f7-b215-669ecc149397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:5f:1c:cf:1a:43:e8:41:14:f2:27:c1:b2: ac:8f:ac:99:76:80:0d:6f:52:2a:f5:45:72:85:ff: 0c:c3:70:ba:21:35:61:18:c0:fd:5c:1d:25:22:bc: 52:a8:13:d5:67:2d:a0:17:94:82:c5:ca:51:d9:c7: 36:55:03:c8:ee:f9:db:9d:49:37:19:0a:11:21:25: 06:9b:5c:54:57:86:54:16:77:7d:46:2d:b3:5f:f7: 9e:64:35:22:5b:5c:0a:1c:93:8d:3f:a9:73:23:29: ed:4b:40:f2:51:46:d4:c1:bd:70:6e:19:7f:ea:aa: 86:8d:88:5d:6c:37:4f:99:32:87:7f:15:a4:20:b9: e0:5d:99:99:6b:57:88:cd:f4:3c:cd:23:50:cd:54: c4:c1:5a:98:80:8b:00:9d:8b:50:2e:f4:56:01:34: ab:ff:d0:87:d4:b5:4f:c6:d2:1a:11:5e:3e:c2:27: b3:f7:56:c8:79:91:ad:91:95:a6:f9:63:e0:8e:19: c1:33:94:a0:73:4d:2d:d4:b7:fe:7e:96:78:be:b5: 76:44:c4:2c:81:60:1c:d2:60:e5:d0:b5:ac:83:d3: 94:92:f9:01:7e:eb:cf:80:91:b9:a9:b1:37:9f:67: cd:43:c4:a4:ed:48:77:12:96:39:99:e1:2e:3d:16: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C2:52:EB:A4:E0:1E:D9:85:52:55:44:AF:03:C4:52:CD:FA:C3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:35:0c:d9:38:95:15:87:89:04:d0:05:3c:50:f6:ef:21:13: a9:94:c6:5d:96:cc:2a:35:16:b2:ac:a4:20:62:92:38:39:b4: fb:73:b3:a5:1a:da:7d:aa:63:60:dc:3a:e8:75:da:e9:7f:14: 34:2d:8c:cf:57:86:c7:c0:4d:07:fb:78:c0:96:c7:b3:87:4d: 53:86:b0:23:44:20:02:a9:cb:1d:e0:34:3c:93:7d:18:e4:58: 95:d9:cb:b0:74:ad:4f:56:b2:6e:a9:12:11:e8:95:e1:da:04: 02:90:34:a2:0b:e6:3e:5a:75:b0:71:31:89:44:c8:77:98:0e: 15:8d:6e:72:00:c7:c7:cc:5f:b0:32:82:b4:da:0c:1b:e5:f4: 6f:8f:86:8f:6f:e6:6c:ad:37:64:96:1f:be:f2:54:27:5c:1a: 6a:62:69:2c:e9:75:c0:cb:69:c4:8f:ac:6c:e8:ba:3a:d9:c1: f9:d7:b1:e0:42:f0:c8:ca:63:b3:a3:36:74:0e:13:bd:43:23: 22:61:50:5b:cd:38:f8:bf:c9:02:99:f9:c2:86:3b:4a:af:e4: ee:51:17:ee:da:d9:48:ef:8d:76:a8:ed:95:70:b7:08:53:30: c2:03:cc:b8:91:c6:ce:74:2e:0c:a6:0b:27:ac:9e:13:09:50: aa:0a:59:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNYdba7zmTI1o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Yzk0OTE1ZWYtMDcyNC00NWY3LWIyMTUtNjY5ZWNjMTQ5Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV9fHM8aQ+hBFPInwbKsj6yZdoANb1Iq9UVy hf8Mw3C6ITVhGMD9XB0lIrxSqBPVZy2gF5SCxcpR2cc2VQPI7vnbnUk3GQoRISUG m1xUV4ZUFnd9Ri2zX/eeZDUiW1wKHJONP6lzIyntS0DyUUbUwb1wbhl/6qqGjYhd bDdPmTKHfxWkILngXZmZa1eIzfQ8zSNQzVTEwVqYgIsAnYtQLvRWATSr/9CH1LVP xtIaEV4+wiez91bIeZGtkZWm+WPgjhnBM5Sgc00t1Lf+fpZ4vrV2RMQsgWAc0mDl 0LWsg9OUkvkBfuvPgJG5qbE3n2fNQ8Sk7Uh3EpY5meEuPRbtnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDCUuuk4B7ZhVJVRK8DxFLN+sPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTQ2Yjc3NGUtY2NiMy0z ODhkLThjMzItZTQwOWM4NThiMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM1DNk4lRWHiQTQBTxQ9u8hE6mUxl2WzCo1FrKspCBikjg5tPtzs6Ua 2n2qY2DcOuh12ul/FDQtjM9XhsfATQf7eMCWx7OHTVOGsCNEIAKpyx3gNDyTfRjk WJXZy7B0rU9Wsm6pEhHoleHaBAKQNKIL5j5adbBxMYlEyHeYDhWNbnIAx8fMX7Ay grTaDBvl9G+Pho9v5mytN2SWH77yVCdcGmpiaSzpdcDLacSPrGzoujrZwfnXseBC 8MjKY7OjNnQOE71DIyJhUFvNOPi/yQKZ+cKGO0qv5O5RF+7a2UjvjXao7ZVwtwhT MMIDzLiRxs50LgymCyesnhMJUKoKWRo= -----END CERTIFICATE-----Generated at Fri Jul 25 19:23:50 2025 by rpki-client