$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa File: 8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa (raw, json) Hash identifier: 9YWxmvziUy+gIgo7VklZsl9HTRXuZMIZEpNheZPrOLw= Subject key identifier: 47:0C:1B:34:94:4F:BE:FC:85:4A:45:85:BE:E9:B4:98:1E:11:C3:2E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36D91DFA43175F1B02A200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.161.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d9:1d:fa:43:17:5f:1b:02:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=6008739c-b930-4c74-a7a3-0c454523a8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:6a:56:93:78:0a:2f:da:c8:5d:92:5f:69: 7f:cd:f2:4c:22:ca:3d:24:05:0d:75:67:9b:df:36: 75:63:15:4e:12:42:13:c2:d1:f0:da:be:c1:38:15: eb:7e:1a:7d:24:fe:83:15:5c:9d:55:de:df:33:46: 04:63:a9:c3:aa:7c:83:ad:88:5e:0d:94:41:57:9a: 89:be:68:f3:08:11:c1:92:7b:ab:f4:48:a7:7e:5f: 1e:28:89:95:23:21:e0:72:ac:0a:51:2d:87:95:77: 81:b4:67:50:9c:45:df:3d:b1:1f:a1:c8:7c:44:4e: 34:6a:6c:a3:67:24:60:95:a7:17:b6:a4:27:aa:eb: 13:5c:b6:39:12:cf:b1:33:f3:55:92:7f:9e:0f:05: c8:29:9d:ca:9c:c2:24:a8:e5:77:f0:a7:5d:70:79: a8:09:12:ec:e9:4d:7c:d4:3e:1d:59:49:8a:9d:fe: 3a:b7:e9:9a:8f:eb:ad:ef:47:94:d2:29:b4:34:08: 45:3d:ec:a5:42:ac:44:41:fd:29:0f:cf:3d:55:6a: d4:bb:92:c4:41:da:be:87:4f:f6:61:96:c5:68:98: aa:df:09:19:53:67:f2:5d:d3:ed:dd:0b:1a:45:20: cf:42:f9:65:47:be:ce:f7:64:73:14:ce:0c:91:6c: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0C:1B:34:94:4F:BE:FC:85:4A:45:85:BE:E9:B4:98:1E:11:C3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:41:f0:8b:ba:87:2a:a6:8e:73:c7:9d:46:51:4c:51:f6:45: 54:9c:64:8f:2e:9f:6b:c3:48:60:d4:8e:b3:34:86:a4:f8:0d: d9:5f:a4:2b:fd:a7:5e:73:51:a3:56:ed:7d:44:0e:bb:17:0f: 3e:4d:33:c6:31:c6:0c:50:20:27:c7:25:71:c8:a3:3d:37:0b: fd:0f:43:7c:f1:64:48:aa:7a:ca:84:ab:de:02:d9:31:af:fa: 2e:79:63:ad:f1:23:2d:31:d0:3a:1e:63:46:e3:e7:63:66:06: 6e:6d:49:b5:ad:3c:70:ba:26:3c:39:a4:3c:ce:d6:e9:38:52: 43:26:bf:8c:f5:38:7f:6b:c1:85:be:71:5b:49:bb:a8:a6:0a: b0:30:c7:3b:6f:ca:88:a8:54:64:00:02:3b:b4:93:a7:b1:2d: d7:d4:1e:56:b3:83:9d:c6:c1:39:79:b3:08:62:0e:70:d3:9c: e6:8e:fa:e6:6d:dd:aa:58:b4:23:bb:a1:83:48:27:96:d6:5b: 66:7c:36:02:34:a3:fe:4f:17:19:7d:c8:7c:16:b4:59:07:78: 79:8f:d6:b0:99:b1:b1:14:39:1b:33:64:7d:c2:3e:62:38:05: 7b:5a:6d:b3:f8:cf:b2:15:e2:e4:3d:73:22:0d:95:14:1b:39: 94:be:ac:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtkd+kMXXxsCogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NjAwODczOWMtYjkzMC00Yzc0LWE3YTMtMGM0NTQ1MjNhOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdZqVpN4Ci/ayF2SX2l/zfJMIso9JAUNdWeb 3zZ1YxVOEkITwtHw2r7BOBXrfhp9JP6DFVydVd7fM0YEY6nDqnyDrYheDZRBV5qJ vmjzCBHBknur9Einfl8eKImVIyHgcqwKUS2HlXeBtGdQnEXfPbEfoch8RE40amyj ZyRglacXtqQnqusTXLY5Es+xM/NVkn+eDwXIKZ3KnMIkqOV38KddcHmoCRLs6U18 1D4dWUmKnf46t+maj+ut70eU0im0NAhFPeylQqxEQf0pD889VWrUu5LEQdq+h0/2 YZbFaJiq3wkZU2fyXdPt3QsaRSDPQvllR77O92RzFM4MkWzTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcMGzSUT778hUpFhb7ptJgeEcMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGQxN2M5ZTgtY2M4MC0z ZTQ3LWJlNTctMWEyZGNhZGU4NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlB8Iu6hyqmjnPHnUZRTFH2RVScZI8un2vDSGDUjrM0hqT4DdlfpCv9 p15zUaNW7X1EDrsXDz5NM8YxxgxQICfHJXHIoz03C/0PQ3zxZEiqesqEq94C2TGv +i55Y63xIy0x0DoeY0bj52NmBm5tSbWtPHC6Jjw5pDzO1uk4UkMmv4z1OH9rwYW+ cVtJu6imCrAwxztvyoioVGQAAju0k6exLdfUHlazg53GwTl5swhiDnDTnOaO+uZt 3apYtCO7oYNIJ5bWW2Z8NgI0o/5PFxl9yHwWtFkHeHmP1rCZsbEUORszZH3CPmI4 BXtabbP4z7IV4uQ9cyINlRQbOZS+rCo= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:51 2025 by rpki-client