$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e9e6ff7c-245f-3e2a-95fe-7952feb142a7.roa File: e9e6ff7c-245f-3e2a-95fe-7952feb142a7.roa (raw, json) Hash identifier: bKLBxRvcOsxqYQn7LUqssU8PV+XhcepHQOemDnVP6qY= Subject key identifier: B4:AB:E6:DC:D3:6B:93:7F:41:A2:BE:4D:2B:AF:59:90:EB:D1:4C:8A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A6C55DCFB35C303C097619A80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e9e6ff7c-245f-3e2a-95fe-7952feb142a7.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 29940 IP address blocks: 68.70.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dc:fb:35:c3:03:c0:97:61:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=c2732f77-4e97-4b6b-b677-83be14e7c4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:1a:84:4d:be:03:dd:3c:bf:58:5c:19:7e: 69:47:af:c3:c3:1c:6f:51:b3:99:b7:36:ec:a0:7a: c5:28:7d:66:f7:de:5a:28:61:71:86:df:53:55:2b: a0:35:2d:f9:38:dc:43:2a:73:39:b0:42:d1:e2:b6: be:06:41:e9:b6:4c:89:25:82:ae:8e:30:f9:d5:bc: a4:40:f9:b0:7a:34:51:55:36:df:f9:2e:08:f0:c9: aa:f5:f5:b6:3e:2a:62:8c:50:2e:c9:e1:9e:d2:e9: 62:d6:71:1f:88:bf:69:bb:ab:9a:4b:b8:68:ce:19: ab:9a:5e:8e:a9:52:d7:5a:71:bc:44:fe:14:75:d9: 3c:c9:54:31:09:b1:84:26:9e:84:45:2e:79:57:02: 26:3e:b7:36:7b:d2:0e:0b:a5:eb:da:52:0f:f7:11: af:2b:54:5c:dd:22:98:81:a3:79:40:9a:db:e9:8c: d8:4f:13:79:9c:4c:63:0a:c3:d6:8d:14:16:d6:df: 38:c0:91:6e:e0:a5:71:d8:c0:d3:bd:19:d7:50:67: 91:39:64:87:5d:fb:8d:2b:5f:f9:7c:bf:0c:61:76: f6:ac:48:ff:23:b2:a2:cd:15:3e:24:ac:2a:c9:88: 0b:c4:aa:2e:07:57:c6:1f:0f:4a:76:91:f5:27:1e: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AB:E6:DC:D3:6B:93:7F:41:A2:BE:4D:2B:AF:59:90:EB:D1:4C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e9e6ff7c-245f-3e2a-95fe-7952feb142a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 68.70.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:44:d8:32:c8:1f:1a:af:7d:9e:f0:ae:8c:52:d5:31:bd:67: 4f:5c:e7:f0:20:7c:c3:b8:af:da:3d:87:ec:90:32:3c:5e:ce: 2c:4d:33:bc:64:8d:da:df:1e:5c:3c:c0:42:38:2e:cc:c1:1e: 05:89:76:9b:2d:36:06:8b:65:71:b4:c5:30:07:c4:1e:90:3a: 86:68:9e:e4:f0:56:83:d9:11:96:e7:f0:6b:27:05:7b:db:43: ed:46:c3:0e:e5:a1:38:48:8d:6f:75:97:99:bc:8e:6d:8d:8f: 16:4f:f2:71:22:4f:c9:6a:90:d4:03:eb:30:26:22:50:c7:8f: a7:91:f2:85:56:98:bb:28:f5:36:f6:cf:67:e3:5f:23:16:c7: 89:9f:d7:9b:f6:22:f3:e9:82:92:d7:33:7c:b5:e6:6a:64:ad: fa:46:35:5f:86:5f:31:52:7e:8c:75:59:49:08:41:47:02:b9: af:5c:5d:3e:ef:97:d6:1b:b6:2e:bf:8d:d8:d2:f9:18:85:b8: fb:4e:a0:49:d4:b6:d3:f9:73:1f:e2:c4:03:13:c6:ed:8d:94: 00:79:be:c8:88:7f:7f:49:a9:73:49:cf:50:e6:56:bd:15:49: 31:0a:01:af:93:2e:42:7d:c3:31:6a:76:52:d1:64:99:19:48: b1:9c:7f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdz7NcMDwJdhmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YzI3MzJmNzctNGU5Ny00YjZiLWI2NzctODNiZTE0ZTdjNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOEahE2+A908v1hcGX5pR6/DwxxvUbOZtzbs oHrFKH1m995aKGFxht9TVSugNS35ONxDKnM5sELR4ra+BkHptkyJJYKujjD51byk QPmwejRRVTbf+S4I8Mmq9fW2PipijFAuyeGe0uli1nEfiL9pu6uaS7hozhmrml6O qVLXWnG8RP4Uddk8yVQxCbGEJp6ERS55VwImPrc2e9IOC6Xr2lIP9xGvK1Rc3SKY gaN5QJrb6YzYTxN5nExjCsPWjRQW1t84wJFu4KVx2MDTvRnXUGeROWSHXfuNK1/5 fL8MYXb2rEj/I7KizRU+JKwqyYgLxKouB1fGHw9KdpH1Jx6WXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSr5tzTa5N/QaK+TSuvWZDr0UyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZTllNmZmN2MtMjQ1Zi0z ZTJhLTk1ZmUtNzk1MmZlYjE0MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJE2DLIHxqvfZ7wroxS1TG9Z09c5/AgfMO4r9o9h+yQMjxezixNM7xk jdrfHlw8wEI4LszBHgWJdpstNgaLZXG0xTAHxB6QOoZonuTwVoPZEZbn8GsnBXvb Q+1Gww7loThIjW91l5m8jm2NjxZP8nEiT8lqkNQD6zAmIlDHj6eR8oVWmLso9Tb2 z2fjXyMWx4mf15v2IvPpgpLXM3y15mpkrfpGNV+GXzFSfox1WUkIQUcCua9cXT7v l9Ybti6/jdjS+RiFuPtOoEnUttP5cx/ixAMTxu2NlAB5vsiIf39JqXNJz1DmVr0V STEKAa+TLkJ9wzFqdlLRZJkZSLGcfzA= -----END CERTIFICATE-----Generated at Wed Jul 9 20:18:50 2025 by rpki-client