$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/e987ec66-2c5d-3252-b9c5-20ac757b08fa.roa File: e987ec66-2c5d-3252-b9c5-20ac757b08fa.roa (raw, json) Hash identifier: z7hFyDobBiT4+wou28t4E+s0EyBCXGnOrXARj5q+TV4= Subject key identifier: 1A:3D:53:D2:0B:E2:6E:00:0F:73:B3:41:A7:76:6B:A4:2C:A5:49:C1 Certificate issuer: /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Certificate serial: 010D0C9F4328584A920631566E7C1A6BEC7BB680 Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/e987ec66-2c5d-3252-b9c5-20ac757b08fa.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 20115 IP address blocks: 192.100.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:31:56:6e:7c:1a:6b:ec:7b:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=0066a90b-2b61-409c-94b5-af9a35693e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:f1:98:ef:ad:3c:82:4a:8d:e1:cd:36:fb: ed:35:fd:6a:14:3a:e7:a9:8d:17:8e:c8:39:e8:ea: 0f:dc:7a:13:09:f7:e0:79:9a:57:1f:de:4c:a4:5c: 6b:cb:ae:c7:c0:57:b7:8b:32:34:26:82:e3:c4:55: 9a:61:ef:19:c6:1e:5a:aa:2b:3e:1b:7e:b4:3d:d5: 8c:fc:bc:b7:eb:95:df:5e:6a:d1:ea:b6:df:ab:1e: a5:2b:44:2e:5d:18:ae:2e:8b:04:22:08:ba:95:7f: 34:66:be:ff:02:79:d2:0d:6f:be:73:1b:58:8f:be: c0:8c:60:d3:69:73:b9:44:ed:bf:d9:f1:48:d1:c4: cd:a7:81:5b:9a:87:87:ac:20:74:91:43:b1:0c:a2: 02:60:34:55:c0:0d:d7:05:e6:14:ba:4e:ca:e2:c2: fe:c1:91:30:91:4e:76:30:cf:04:eb:7d:bb:7c:fa: 7a:24:60:32:8c:cc:f0:4c:a5:06:03:95:bf:c0:fe: c4:9d:35:11:b5:6d:cc:0a:82:7f:61:4c:31:55:78: 1a:86:62:aa:41:39:14:df:d0:0f:0d:a4:e1:be:fc: cd:3c:0c:14:3a:fd:a1:89:8a:a2:2e:5e:2b:5a:b1: 10:4a:65:04:5d:8c:ab:a5:9f:21:62:ed:c0:a5:d5: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3D:53:D2:0B:E2:6E:00:0F:73:B3:41:A7:76:6B:A4:2C:A5:49:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/e987ec66-2c5d-3252-b9c5-20ac757b08fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl X509v3 Authority Key Identifier: keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer sbgp-ipAddrBlock: critical IPv4: 192.100.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c9:20:35:a9:59:86:1d:ea:24:8a:cf:b7:0b:d9:c5:bd:f1: 46:62:0e:62:12:e6:22:6e:4b:83:75:ac:ad:f7:63:d2:e5:d5: 1b:2a:d7:59:96:65:8e:00:1e:9f:b3:6e:09:0e:aa:f8:05:bf: 0b:40:11:5d:07:fd:16:9c:75:93:75:3e:0a:7f:c8:94:b3:f8: 73:5e:fd:20:d0:ec:c5:f2:93:9a:4c:67:b4:48:5a:37:70:99: 05:8f:58:13:c9:77:20:19:07:00:ec:72:42:bb:b1:49:09:51: df:bf:1f:c9:5e:f0:7c:c1:c7:5f:5e:92:87:82:ba:b2:10:c2: 86:1e:4f:be:3e:2b:83:3c:6c:74:85:69:37:19:93:02:04:cd: 3c:68:0a:c7:26:7b:84:9b:94:84:0b:8e:64:18:78:17:d7:bc: 22:4f:b8:95:c4:74:48:ed:2d:dc:4f:ff:db:32:83:a1:3c:aa: 22:7d:8f:3d:dc:9a:30:23:7e:ab:dd:3d:84:0a:39:88:fa:00: e8:4b:b6:17:dd:79:0d:e7:f7:47:a8:07:de:14:0c:3f:8e:f9: 79:f7:47:66:0e:5b:e9:09:42:f7:23:9c:cf:09:b6:c3:b7:e0: c6:ff:fb:e7:e6:82:85:e3:66:33:fd:c5:10:60:ea:53:b3:6f: b0:54:e2:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjFWbnwaa+x7toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk ZjhhMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk MDA2NmE5MGItMmI2MS00MDljLTk0YjUtYWY5YTM1NjkzZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTzxmO+tPIJKjeHNNvvtNf1qFDrnqY0Xjsg5 6OoP3HoTCffgeZpXH95MpFxry67HwFe3izI0JoLjxFWaYe8Zxh5aqis+G360PdWM /Ly365XfXmrR6rbfqx6lK0QuXRiuLosEIgi6lX80Zr7/AnnSDW++cxtYj77AjGDT aXO5RO2/2fFI0cTNp4FbmoeHrCB0kUOxDKICYDRVwA3XBeYUuk7K4sL+wZEwkU52 MM8E6327fPp6JGAyjMzwTKUGA5W/wP7EnTURtW3MCoJ/YUwxVXgahmKqQTkU39AP DaThvvzNPAwUOv2hiYqiLl4rWrEQSmUEXYyrpZ8hYu3ApdVFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo9U9IL4m4AD3OzQad2a6QspUnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvZTk4N2VjNjYtMmM1ZC0z MjUyLWI5YzUtMjBhYzc1N2IwOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj MzEwMmRmOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTJIDWpWYYd6iSKz7cL2cW98UZiDmIS5iJuS4N1rK33Y9Ll1Rsq11mW ZY4AHp+zbgkOqvgFvwtAEV0H/RacdZN1Pgp/yJSz+HNe/SDQ7MXyk5pMZ7RIWjdw mQWPWBPJdyAZBwDsckK7sUkJUd+/H8le8HzBx19ekoeCurIQwoYeT74+K4M8bHSF aTcZkwIEzTxoCscme4SblIQLjmQYeBfXvCJPuJXEdEjtLdxP/9syg6E8qiJ9jz3c mjAjfqvdPYQKOYj6AOhLthfdeQ3n90eoB94UDD+O+Xn3R2YOW+kJQvcjnM8JtsO3 4Mb/++fmgoXjZjP9xRBg6lOzb7BU4kI= -----END CERTIFICATE-----Generated at Mon Jul 21 13:07:42 2025 by rpki-client