$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/237eab70-580a-3b80-8b65-d28d1535e406.roa File: 237eab70-580a-3b80-8b65-d28d1535e406.roa (raw, json) Hash identifier: XavQP3MRokteVPPqqQKV2i+7q1f9cxhC+MbcRTI8CZs= Subject key identifier: 42:81:D0:AE:A8:3E:02:89:17:AD:89:B1:A1:6B:38:26:1A:F7:65:53 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584AA85BB862EE9EA37868CF7000 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/237eab70-580a-3b80-8b65-d28d1535e406.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 23115 IP address blocks: 216.68.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b8:62:ee:9e:a3:78:68:cf:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=1daffc02-7de1-491b-a058-8df86ce330fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:f0:ba:8f:b3:a2:52:66:42:0b:63:a6:ff: 02:f5:d9:8f:de:0a:41:2f:21:30:5c:9b:64:80:59: f3:7e:bb:90:70:64:e9:d7:10:b4:88:57:8b:79:f4: 9b:65:f1:0b:af:6f:c0:2c:7f:37:3e:8e:21:d0:77: 2b:2b:28:94:32:ff:79:1f:25:10:7e:bd:a3:e1:0a: a8:7c:e5:88:42:03:3d:cc:78:65:cd:f3:11:30:a7: 66:84:c4:e8:0b:0e:d8:c9:50:48:2a:d9:62:a6:de: 68:21:ae:29:e1:e2:77:f4:87:09:1f:e6:e9:f0:bd: ab:f9:16:03:d4:4b:9e:b5:2c:83:31:f3:70:27:af: 7c:c3:4a:1b:f1:c9:8e:ed:24:2a:e6:f6:30:c5:3e: b1:c5:0c:4d:6d:3c:89:c7:ed:ac:be:d2:5c:e7:1f: c8:64:ff:18:ec:be:51:97:a8:22:ed:c8:0f:8d:0e: 8b:50:c9:00:aa:e6:67:f5:24:fd:c5:51:f0:f2:e6: 5a:40:88:ac:bc:37:99:9f:6f:1c:5a:54:8c:fb:c3: c8:28:39:b6:02:dd:40:3e:18:18:ae:88:27:66:c5: 01:7d:92:0d:57:cb:bc:23:84:02:a6:62:ef:95:e3: 4d:30:1b:5d:df:bb:a8:c8:ce:b6:3c:83:10:92:ac: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:81:D0:AE:A8:3E:02:89:17:AD:89:B1:A1:6B:38:26:1A:F7:65:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/237eab70-580a-3b80-8b65-d28d1535e406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:83:61:13:35:79:05:f1:61:fc:24:2d:6e:fa:d0:75:e9:e4: ed:07:a2:fc:8d:0b:b4:cf:45:88:36:dc:81:62:16:26:4e:93: 8f:b1:d0:34:47:8a:64:a9:dd:bf:74:c3:20:63:c8:ec:7b:bd: f3:92:a6:4c:cc:1f:17:71:c4:39:43:f3:5b:c2:90:ba:e2:4a: 1e:2b:81:45:0a:d9:18:6c:d6:ab:7b:ee:4e:f1:6a:2f:e1:b6: 23:b0:33:01:00:ef:13:aa:d0:1a:aa:94:17:bb:a2:6f:9a:c5: 3a:d9:19:7e:95:34:93:f8:bf:a8:d6:43:37:f6:1e:33:91:35: 09:7d:1a:1b:7c:d4:49:e5:d7:22:f9:93:49:8b:ee:a8:4e:6f: 4c:a9:8d:c5:da:aa:7c:34:cd:18:10:b9:89:dc:c6:90:7a:76: aa:2a:28:d3:ca:79:ca:12:64:0c:c9:2d:ac:6a:6c:fb:7f:c6: 5d:52:c2:31:c8:b6:93:6d:3b:4d:a9:7b:05:a7:ea:fc:fe:0a: ad:18:e1:cf:69:ca:8d:9c:02:5d:9b:76:44:93:49:f7:7c:34: 97:82:6f:05:1a:55:45:d5:44:73:33:67:b7:f6:46:4a:5e:06: 3e:c2:98:2d:de:de:8b:e1:be:c9:4c:9b:91:a8:b0:b8:c4:2b: 44:52:b1:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7hi7p6jeGjPcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MWRhZmZjMDItN2RlMS00OTFiLWEwNTgtOGRmODZjZTMzMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLTwuo+zolJmQgtjpv8C9dmP3gpBLyEwXJtk gFnzfruQcGTp1xC0iFeLefSbZfELr2/ALH83Po4h0HcrKyiUMv95HyUQfr2j4Qqo fOWIQgM9zHhlzfMRMKdmhMToCw7YyVBIKtlipt5oIa4p4eJ39IcJH+bp8L2r+RYD 1EuetSyDMfNwJ698w0ob8cmO7SQq5vYwxT6xxQxNbTyJx+2svtJc5x/IZP8Y7L5R l6gi7cgPjQ6LUMkAquZn9ST9xVHw8uZaQIisvDeZn28cWlSM+8PIKDm2At1APhgY rognZsUBfZINV8u8I4QCpmLvleNNMBtd37uoyM62PIMQkqw9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKB0K6oPgKJF62JsaFrOCYa92VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMjM3ZWFiNzAtNTgwYS0z YjgwLThiNjUtZDI4ZDE1MzVlNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2EREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWDYRM1eQXxYfwkLW760HXp5O0HovyNC7TPRYg23IFiFiZOk4+x0DRH imSp3b90wyBjyOx7vfOSpkzMHxdxxDlD81vCkLriSh4rgUUK2Rhs1qt77k7xai/h tiOwMwEA7xOq0BqqlBe7om+axTrZGX6VNJP4v6jWQzf2HjORNQl9Ght81Enl1yL5 k0mL7qhOb0ypjcXaqnw0zRgQuYncxpB6dqoqKNPKecoSZAzJLaxqbPt/xl1SwjHI tpNtO02pewWn6vz+Cq0Y4c9pyo2cAl2bdkSTSfd8NJeCbwUaVUXVRHMzZ7f2Rkpe Bj7CmC3e3ovhvslMm5GosLjEK0RSsTA= -----END CERTIFICATE-----Generated at Wed Jul 30 13:18:23 2025 by rpki-client