$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa File: 7288e10f-3acf-3954-8944-fda616a3c43c.roa (raw, json) Hash identifier: YC9Faq0yHq/lLZnPkCAPhQ5vbySbInj80K9enm1Z3Gs= Subject key identifier: B2:8E:CC:57:7B:84:C6:BB:A2:48:31:2A:CF:88:27:04:44:5D:3C:C0 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CEB99632E24E2872DE80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 68.67.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ce:b9:96:32:e2:4e:28:72:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=ea1da73e-e1cf-45c4-86a0-fff06a3da59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5a:ac:ce:43:71:27:4f:92:f8:b5:18:22:8c: ff:02:5a:92:88:f2:d3:df:b5:03:2d:3e:d0:a1:af: 9b:ef:53:4a:82:18:ff:63:1c:d6:39:f5:c4:42:44: 95:ab:7b:4f:7d:81:be:1d:3c:ad:48:e8:db:0f:c3: 91:be:83:0d:26:4a:2f:22:70:57:86:93:8d:c6:02: 82:db:78:7f:ec:4a:55:82:ec:df:d9:17:fd:27:4c: 4e:b7:b8:06:0c:7e:43:68:02:d7:ae:b7:e1:47:42: 41:41:58:20:ac:20:ea:b9:2f:33:d9:42:37:e0:2e: e6:29:e7:67:8c:8b:42:bf:c5:91:9d:54:7b:cd:c4: fb:91:0e:41:c8:79:e0:99:01:d4:2e:dc:3b:2f:45: 80:7d:f0:8d:c2:05:02:df:bf:a9:51:f1:d3:45:e0: 53:26:80:94:40:0a:78:03:41:f8:83:91:89:30:78: 0e:8d:c6:f2:9d:23:57:26:7d:aa:60:22:26:08:92: 1d:7e:7a:d7:5d:02:fa:67:32:3f:79:f0:e1:8a:d1: 41:7a:6d:56:9c:dd:d1:10:3a:d3:39:c3:97:4d:9b: 7e:b4:2b:b4:b6:c2:7f:0d:8f:46:eb:04:41:9d:91: e4:29:90:5f:ea:19:f9:15:9f:6f:ad:11:b5:73:6d: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:CC:57:7B:84:C6:BB:A2:48:31:2A:CF:88:27:04:44:5D:3C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.67.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6c:44:66:93:c6:a9:78:b9:85:5a:7a:93:5d:c7:e8:44:43: e4:6d:ee:1b:16:45:c3:b7:38:70:44:40:22:1c:d7:58:bd:c3: 95:5b:2c:e3:63:a5:40:ff:66:90:35:89:bd:67:1d:42:39:bb: ca:e3:c8:55:14:f7:b7:29:51:d3:ad:3c:33:18:d6:e8:ec:f3: 58:03:2f:da:54:a0:8b:fb:e9:3a:78:64:5c:3b:30:01:91:c6: fb:8c:c6:f8:c9:cc:b5:00:de:6b:5b:0c:f9:be:3e:07:9b:4e: f5:cb:62:2e:fe:fb:7b:8e:29:88:bb:6b:77:42:0c:ad:4c:7f: fe:6f:75:a3:13:45:0a:1f:7a:7c:30:fb:8d:24:65:f0:03:6f: 18:9d:76:d6:8a:f4:da:30:29:7d:61:93:49:42:e7:4f:e1:9d: 5b:04:3d:ea:b5:c5:7c:9d:92:6f:28:3e:c8:24:5e:18:b3:89: 14:c7:e6:0c:31:b0:03:59:fa:38:09:03:a4:ca:1d:52:1a:8f: 2c:6b:b2:11:ae:48:1c:0f:f9:8f:88:60:bb:71:9b:93:35:93: a8:12:24:19:b6:36:c6:09:32:22:cd:a7:69:4a:c7:25:2a:66: 6d:39:aa:a9:4d:d0:b6:28:4f:ee:ff:5d:35:1d:f5:26:aa:fc: ff:aa:bb:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds65ljLiTihy3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZWExZGE3M2UtZTFjZi00NWM0LTg2YTAtZmZmMDZhM2RhNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVqszkNxJ0+S+LUYIoz/AlqSiPLT37UDLT7Q oa+b71NKghj/YxzWOfXEQkSVq3tPfYG+HTytSOjbD8ORvoMNJkovInBXhpONxgKC 23h/7EpVguzf2Rf9J0xOt7gGDH5DaALXrrfhR0JBQVggrCDquS8z2UI34C7mKedn jItCv8WRnVR7zcT7kQ5ByHngmQHULtw7L0WAffCNwgUC37+pUfHTReBTJoCUQAp4 A0H4g5GJMHgOjcbynSNXJn2qYCImCJIdfnrXXQL6ZzI/efDhitFBem1WnN3REDrT OcOXTZt+tCu0tsJ/DY9G6wRBnZHkKZBf6hn5FZ9vrRG1c21a0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKOzFd7hMa7okgxKs+IJwREXTzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzI4OGUxMGYtM2FjZi0z OTU0LTg5NDQtZmRhNjE2YTNjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERENQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlsRGaTxql4uYVaepNdx+hEQ+Rt7hsWRcO3OHBEQCIc11i9w5VbLONj pUD/ZpA1ib1nHUI5u8rjyFUU97cpUdOtPDMY1ujs81gDL9pUoIv76Tp4ZFw7MAGR xvuMxvjJzLUA3mtbDPm+PgebTvXLYi7++3uOKYi7a3dCDK1Mf/5vdaMTRQofenww +40kZfADbxiddtaK9NowKX1hk0lC50/hnVsEPeq1xXydkm8oPsgkXhiziRTH5gwx sANZ+jgJA6TKHVIajyxrshGuSBwP+Y+IYLtxm5M1k6gSJBm2NsYJMiLNp2lKxyUq Zm05qqlN0LYoT+7/XTUd9Saq/P+quyI= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:48 2025 by rpki-client