$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa File: bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa (raw, json) Hash identifier: DDucJKF2W8PNyjU1OHoRMfdUmPMkm9yUF2UlA2Nnboc= Subject key identifier: A8:5A:2F:6A:E7:94:A6:D3:5D:9A:DC:49:9F:84:0A:F4:39:C6:65:69 Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F4328584A5CFB335925651227EE7E5F80 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 19318 IP address blocks: 68.168.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:33:59:25:65:12:27:ee:7e:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7a748a29-ce77-4a73-88de-024ffd4f384f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fd:9b:09:2b:b4:c0:b7:c2:5a:1a:e8:f0:87: 90:f0:b8:b5:71:45:a7:bc:c9:39:cc:9f:95:fd:18: 8e:a9:6a:90:f7:58:80:af:bb:6f:16:1d:db:49:af: e5:66:a1:75:96:13:af:a1:39:45:8b:3e:c1:80:80: a1:05:6c:91:7f:7b:6a:bc:36:cb:cc:01:98:5c:f2: df:2a:66:cd:80:df:19:55:16:e0:36:89:20:cb:7a: cb:37:60:a0:52:ab:a6:60:92:ec:3f:71:02:e7:f1: b9:6e:86:98:54:33:87:e5:81:c2:3a:8d:26:64:07: 04:b5:d6:27:eb:28:0c:42:f1:30:28:53:f2:92:4e: 56:0b:19:d1:3d:7f:c8:b7:2d:23:89:0b:a5:cb:15: 05:64:de:88:69:1f:4a:29:12:79:84:bc:ff:56:e7: 61:1a:47:4f:5d:89:45:b3:44:f7:3a:05:a8:c3:b6: 82:f7:81:1d:ef:10:93:fc:84:6e:55:93:36:07:50: ea:30:4f:b8:3c:95:e6:80:71:a8:0a:57:d9:e5:da: ac:7f:1b:1c:85:01:f2:37:97:03:bd:fc:73:ec:d1: 4f:10:f7:1d:aa:e5:d6:1b:fa:85:2e:7a:bb:42:bb: 28:84:93:87:e9:64:fd:9e:2a:61:a5:2e:3e:ac:c6: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5A:2F:6A:E7:94:A6:D3:5D:9A:DC:49:9F:84:0A:F4:39:C6:65:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 68.168.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:de:1b:d7:ee:f6:28:f4:52:c7:0b:ce:22:17:89:ac:69:b1: b3:fa:e4:35:38:99:05:d1:2f:f7:58:28:51:9a:3a:2f:59:b2: 88:af:60:e6:cc:eb:b8:93:cf:05:64:45:40:6f:c5:e9:b4:b4: d7:0e:d9:ab:cf:0b:8d:6d:7c:b8:16:ad:8a:91:c3:1a:2f:23: fb:0c:63:19:a5:91:15:91:27:4d:5d:8c:18:59:94:f9:81:23: ba:2d:d0:a4:12:cc:ea:8d:98:10:e3:7b:c5:ad:91:f9:e5:c1: 0b:74:3e:9b:bd:6a:a8:3a:2e:ba:85:9f:fe:40:31:a1:87:58: 9d:d1:d3:98:87:20:b8:60:82:28:44:b3:9f:3f:2b:dd:08:7e: cd:b0:8c:f4:ca:28:fc:68:a4:f2:c0:7a:ee:58:ba:31:8a:3d: 25:5e:b5:c0:41:68:f7:de:9a:5e:3e:ca:ba:c2:3d:32:f6:aa: d3:67:5c:95:73:06:5f:97:7b:a7:fe:99:b7:51:82:d0:be:4a: 3e:47:db:ca:c0:39:c5:40:bd:fb:0b:89:aa:f6:46:4f:b0:1a: 17:65:21:ce:2a:a9:f8:26:a8:c2:ba:7f:4c:69:0d:50:dd:1c: b0:25:d8:4b:eb:31:97:cf:d3:2b:03:bd:c0:ce:81:7d:6a:01: d4:e8:51:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zNZJWUSJ+5+X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk N2E3NDhhMjktY2U3Ny00YTczLTg4ZGUtMDI0ZmZkNGYzODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/2bCSu0wLfCWhro8IeQ8Li1cUWnvMk5zJ+V /RiOqWqQ91iAr7tvFh3bSa/lZqF1lhOvoTlFiz7BgIChBWyRf3tqvDbLzAGYXPLf KmbNgN8ZVRbgNokgy3rLN2CgUqumYJLsP3EC5/G5boaYVDOH5YHCOo0mZAcEtdYn 6ygMQvEwKFPykk5WCxnRPX/Ity0jiQulyxUFZN6IaR9KKRJ5hLz/VudhGkdPXYlF s0T3OgWow7aC94Ed7xCT/IRuVZM2B1DqME+4PJXmgHGoClfZ5dqsfxschQHyN5cD vfxz7NFPEPcdquXWG/qFLnq7QrsohJOH6WT9niphpS4+rMa7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhaL2rnlKbTXZrcSZ+ECvQ5xmVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvYmJjN2EyMGUtMmI2NC0z ZDU5LThjNTgtODY2ZGI1Y2RjOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKjVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPeG9fu9ij0UscLziIXiaxpsbP65DU4mQXRL/dYKFGaOi9ZsoivYObM 67iTzwVkRUBvxem0tNcO2avPC41tfLgWrYqRwxovI/sMYxmlkRWRJ01djBhZlPmB I7ot0KQSzOqNmBDje8WtkfnlwQt0Ppu9aqg6LrqFn/5AMaGHWJ3R05iHILhggihE s58/K90Ifs2wjPTKKPxopPLAeu5YujGKPSVetcBBaPfeml4+yrrCPTL2qtNnXJVz Bl+Xe6f+mbdRgtC+Sj5H28rAOcVAvfsLiar2Rk+wGhdlIc4qqfgmqMK6f0xpDVDd HLAl2EvrMZfP0ysDvcDOgX1qAdToUZ4= -----END CERTIFICATE-----Generated at Wed Jul 9 14:34:15 2025 by rpki-client