$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa File: c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa (raw, json) Hash identifier: Fy3fB2NREwg2Bov4JFxe71U3POH8TpcSqZq1zoBJHTU= Subject key identifier: 26:BF:38:B3:B6:06:BF:C6:DA:ED:A5:D7:4D:32:6F:5D:D3:29:F2:76 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36DA8C6E6EA74D1C3C8880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.238.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:da:8c:6e:6e:a7:4d:1c:3c:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=d3c026fc-c343-4d76-9115-709b3091f368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:e1:ff:0c:ed:ed:91:d2:06:d2:8c:33:a1: 0c:73:b7:c1:0d:ff:fc:3e:cf:08:cd:d0:a0:cd:63: 16:02:48:05:d2:71:c7:6b:19:0b:9d:5e:5c:d1:45: 93:80:1f:2d:39:84:67:c4:1d:0c:b6:49:32:10:84: 69:c4:08:02:5f:a3:d3:42:88:34:81:2f:5d:e9:cc: 9d:04:5d:eb:15:40:d6:36:98:81:6f:c1:3a:8b:7c: 79:e2:ef:15:96:90:88:5a:eb:a4:2a:50:a0:bc:2b: 9d:f8:6a:a4:e3:bf:b9:71:93:f1:ae:f3:d7:88:98: b5:86:0f:46:1b:61:44:68:e9:8a:d5:7f:98:6b:e4: 61:a7:16:8f:d6:a4:1d:4b:67:7d:1f:6d:70:7b:28: 8c:f2:a7:08:7f:53:54:89:7a:47:9d:01:67:ce:8c: 93:dd:d5:75:b4:21:6d:31:09:8b:34:a4:6e:64:ea: e1:5c:d5:82:d4:a7:75:8f:fc:41:17:ab:a5:35:20: 0c:42:73:35:af:56:da:e0:82:a0:ae:67:4f:d1:b8: 77:0d:aa:3d:5a:93:92:3b:88:be:ec:ad:cc:49:16: 1b:98:cf:b1:0b:ef:ef:fe:9d:8e:8a:1f:16:a4:02: 41:a7:57:07:23:07:a6:ea:b5:62:72:ac:4a:ed:81: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BF:38:B3:B6:06:BF:C6:DA:ED:A5:D7:4D:32:6F:5D:D3:29:F2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7cdc388-b7ea-3628-9ec9-8c8a36a9c063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:76:4b:9f:e3:28:2c:5a:32:c8:90:72:66:ec:62:87:60:9c: e6:e2:41:68:f6:5f:81:63:8e:f7:d4:ce:82:88:e2:b3:2e:ff: 3c:36:96:f2:18:c1:92:71:d8:af:c7:4f:9d:df:37:f2:00:7b: 58:a3:2f:7d:58:ee:68:5a:c3:c4:6c:d1:33:98:67:a3:7d:b9: 6d:31:4e:ba:f1:23:5e:71:83:7c:2f:92:1c:68:71:b2:44:ac: d3:cf:fd:16:85:cf:5d:1d:bf:9a:51:e2:60:11:30:1a:2f:d3: 68:0a:96:70:5c:08:05:f1:37:3c:22:4e:50:c2:21:c7:a9:e3: 1e:6d:6c:4d:2d:ea:66:4a:c8:d0:9d:2e:0e:98:8e:9d:bb:4b: e6:4d:18:65:3e:ca:0b:71:c0:9b:a7:11:f9:28:29:15:34:4e: 6c:7e:51:62:79:ff:b0:02:7c:c6:6f:08:47:6f:13:48:c4:bd: fa:f9:1a:68:04:fb:0b:d9:3f:9b:ee:e4:c1:2d:8a:94:53:0b: c3:31:af:f4:09:60:6b:93:e7:5b:47:16:56:8e:a9:f3:40:1a: 88:fb:1e:0b:5a:37:c5:03:bf:6e:2c:4d:2b:ed:06:23:9d:a7: f8:36:74:eb:65:25:19:61:fb:b9:ff:d3:2a:ec:0a:c8:b1:4b: 3b:f9:f9:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtqMbm6nTRw8iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDNjMDI2ZmMtYzM0My00ZDc2LTkxMTUtNzA5YjMwOTFmMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vXh/wzt7ZHSBtKMM6EMc7fBDf/8Ps8IzdCg zWMWAkgF0nHHaxkLnV5c0UWTgB8tOYRnxB0MtkkyEIRpxAgCX6PTQog0gS9d6cyd BF3rFUDWNpiBb8E6i3x54u8VlpCIWuukKlCgvCud+Gqk47+5cZPxrvPXiJi1hg9G G2FEaOmK1X+Ya+RhpxaP1qQdS2d9H21weyiM8qcIf1NUiXpHnQFnzoyT3dV1tCFt MQmLNKRuZOrhXNWC1Kd1j/xBF6ulNSAMQnM1r1ba4IKgrmdP0bh3Dao9WpOSO4i+ 7K3MSRYbmM+xC+/v/p2Oih8WpAJBp1cHIwem6rVicqxK7YHSdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCa/OLO2Br/G2u2l100yb13TKfJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdjZGMzODgtYjdlYS0z NjI4LTllYzktOGM4YTM2YTljMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV2S5/jKCxaMsiQcmbsYodgnObiQWj2X4FjjvfUzoKI4rMu/zw2lvIY wZJx2K/HT53fN/IAe1ijL31Y7mhaw8Rs0TOYZ6N9uW0xTrrxI15xg3wvkhxocbJE rNPP/RaFz10dv5pR4mARMBov02gKlnBcCAXxNzwiTlDCIcep4x5tbE0t6mZKyNCd Lg6Yjp27S+ZNGGU+ygtxwJunEfkoKRU0Tmx+UWJ5/7ACfMZvCEdvE0jEvfr5GmgE +wvZP5vu5MEtipRTC8Mxr/QJYGuT51tHFlaOqfNAGoj7HgtaN8UDv24sTSvtBiOd p/g2dOtlJRlh+7n/0yrsCsixSzv5+cQ= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:15 2025 by rpki-client