$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb84e6c5-c969-3183-94a3-d4009b317b7c.roa File: cb84e6c5-c969-3183-94a3-d4009b317b7c.roa (raw, json) Hash identifier: yECpio7mNSLvWe6dmEqpOVMLK0ElevZeUyipEexP4+U= Subject key identifier: EE:D0:9F:B1:8A:38:35:81:0A:97:F5:A4:3D:98:65:04:75:E4:50:08 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B6D2C90A5C4EC691A93ECCB00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb84e6c5-c969-3183-94a3-d4009b317b7c.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 54879 IP address blocks: 68.66.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:90:a5:c4:ec:69:1a:93:ec:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=487af8a1-66c7-45f0-909c-63173e7fee88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:ee:45:6e:8c:31:01:19:c6:61:50:89:8d: e3:02:d2:1b:0a:dd:2f:50:80:8f:80:05:84:0c:ee: cd:f6:f6:6c:8c:68:13:08:ff:5d:f5:24:b0:8e:1f: 69:13:53:04:f0:bb:a2:b5:3d:90:b1:60:9d:3a:b2: 78:9b:be:1c:fd:9b:78:c5:5c:8e:9f:a1:b9:b5:2a: bd:bb:6e:3d:3c:23:97:24:eb:35:56:ed:5b:e0:f0: d0:2d:07:83:b0:26:bd:17:44:12:5c:71:42:5e:cd: ac:61:cf:b6:7d:a0:36:dc:4f:41:f4:fa:02:98:59: fc:62:48:f2:dc:3b:29:63:c7:c6:02:38:d8:fe:bf: b6:58:5a:67:f2:43:44:6a:a1:d3:98:f8:4a:97:8e: 4e:17:1d:a1:d3:a2:19:64:17:a4:d4:37:f2:fa:bd: 3b:50:84:3d:2d:8e:b8:62:f9:52:89:ca:e4:7e:f8: 56:51:9c:0f:ca:4b:50:60:39:d1:b4:05:1e:1f:0c: 11:21:97:81:50:a5:53:3e:03:9b:77:e6:99:c0:ec: bd:3a:75:e5:93:2f:5f:37:5f:1f:2d:7c:99:bc:d1: 9b:6f:7a:bb:68:2a:ca:b4:b0:e6:c8:fe:a9:71:09: 88:c7:0a:19:50:69:86:64:04:ac:06:63:5a:ca:16: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:9F:B1:8A:38:35:81:0A:97:F5:A4:3D:98:65:04:75:E4:50:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb84e6c5-c969-3183-94a3-d4009b317b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.66.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2e:b0:99:db:a3:1d:04:88:51:33:06:b6:56:b4:f1:8e:06: 7d:4c:b7:53:fb:41:93:9f:5c:57:90:11:06:32:5c:50:a7:27: c6:c9:db:f0:af:94:7c:85:08:32:02:f2:49:c8:52:c7:2c:19: c9:09:81:7c:e4:10:c2:9d:10:4d:88:d4:42:9c:c4:a4:c0:70: 31:80:49:f1:cf:6a:73:b6:90:2a:5e:3a:b5:7b:cb:9b:2b:7f: 6b:1e:96:b7:55:88:a9:03:ee:77:9f:3c:f6:ef:c0:4a:ba:bc: 47:c7:a9:87:16:4a:5a:37:89:bb:5c:98:aa:25:43:ac:14:a7: 92:fb:ff:d5:15:4d:39:fa:ab:2b:31:15:f1:10:12:ff:1e:99: 3e:03:4a:12:c5:f1:00:0a:d3:1c:9c:b2:e0:cc:30:d1:aa:d1: 30:76:29:8e:eb:b2:e9:7a:e7:e8:a3:90:2a:e5:47:ef:32:3e: 19:44:02:68:c5:0b:67:c0:8e:13:8a:ed:11:50:55:e7:46:65: 95:05:b9:8c:67:fe:87:30:04:a5:1c:4d:d4:ec:bc:7d:9a:46: a5:9f:37:31:f7:13:9a:bb:de:05:4c:f3:37:13:46:23:54:1b: f8:18:00:7f:63:b1:b4:05:80:b7:96:b3:e6:cd:26:a5:d0:d1: 43:be:c7:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJClxOxpGpPsywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDg3YWY4YTEtNjZjNy00NWYwLTkwOWMtNjMxNzNlN2ZlZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLnuRW6MMQEZxmFQiY3jAtIbCt0vUICPgAWE DO7N9vZsjGgTCP9d9SSwjh9pE1ME8LuitT2QsWCdOrJ4m74c/Zt4xVyOn6G5tSq9 u249PCOXJOs1Vu1b4PDQLQeDsCa9F0QSXHFCXs2sYc+2faA23E9B9PoCmFn8Ykjy 3DspY8fGAjjY/r+2WFpn8kNEaqHTmPhKl45OFx2h06IZZBek1Dfy+r07UIQ9LY64 YvlSicrkfvhWUZwPyktQYDnRtAUeHwwRIZeBUKVTPgObd+aZwOy9OnXlky9fN18f LXyZvNGbb3q7aCrKtLDmyP6pcQmIxwoZUGmGZASsBmNayhbkSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7Qn7GKODWBCpf1pD2YZQR15FAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2I4NGU2YzUtYzk2OS0z MTgzLTk0YTMtZDQwMDliMzE3YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4usJnbox0EiFEzBrZWtPGOBn1Mt1P7QZOfXFeQEQYyXFCnJ8bJ2/Cv lHyFCDIC8knIUscsGckJgXzkEMKdEE2I1EKcxKTAcDGASfHPanO2kCpeOrV7y5sr f2selrdViKkD7nefPPbvwEq6vEfHqYcWSlo3ibtcmKolQ6wUp5L7/9UVTTn6qysx FfEQEv8emT4DShLF8QAK0xycsuDMMNGq0TB2KY7rsul65+ijkCrlR+8yPhlEAmjF C2fAjhOK7RFQVedGZZUFuYxn/ocwBKUcTdTsvH2aRqWfNzH3E5q73gVM8zcTRiNU G/gYAH9jsbQFgLeWs+bNJqXQ0UO+xy4= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:21 2025 by rpki-client