$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa File: 502505e1-d06b-3b30-bd54-58420c555658.roa (raw, json) Hash identifier: 2u17cyhsQbsk6LeA0tK1Nu5WDZ5d50K2W00zdJajyGY= Subject key identifier: 10:6E:21:C7:86:27:8A:88:02:F0:C4:35:12:CF:F8:CE:12:54:C9:4D Certificate issuer: /CN=068fe099-ec29-42a6-8cc8-92597523d41f Certificate serial: 010D0C9F4328584B21CC26A2DBF0E89ED35CE800 Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 33263 IP address blocks: 23.167.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:26:a2:db:f0:e8:9e:d3:5c:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=9cb62c6c-abca-4dba-a7bd-1947ecede506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:b7:21:ae:2e:49:54:0c:db:6c:f0:56:88: 42:04:76:8b:d8:09:4a:c9:d6:9e:44:be:8d:b4:03: 89:f9:ca:08:1a:15:eb:cc:e5:04:cb:94:b8:08:21: b8:5a:c6:a9:01:6b:16:ff:98:d3:9b:88:00:d7:16: 39:3f:1e:46:73:d9:0d:94:90:a5:d1:0b:d9:7e:35: 64:0f:65:32:8d:46:09:4f:7d:4e:fe:74:df:16:3e: af:7a:2f:7a:66:75:f8:ef:8a:1b:55:d0:1b:2d:62: 7d:ae:8a:7b:93:92:c1:17:a9:e6:9f:7b:71:6d:ad: fe:f8:a2:1a:bd:fa:e9:99:ae:72:5a:ce:c6:38:87: a9:29:30:a9:de:54:5d:cf:d3:9f:51:bd:27:63:f1: ef:fc:e1:23:7a:ba:25:b6:35:fa:c2:d0:2f:9f:54: e4:5c:e9:5e:d0:e0:1b:7b:a2:da:29:4d:ab:76:56: 6d:bc:02:b8:fd:11:ab:7b:70:14:50:91:7f:33:05: e5:29:80:79:29:8a:af:62:3d:f3:e7:94:4c:de:9c: 74:4e:83:4b:fa:22:a0:d3:1f:b7:60:6a:6e:ff:d7: 70:f5:4e:0c:25:4b:d2:28:30:8a:a9:a5:c9:b1:17: 86:66:c1:4c:f6:11:5d:12:e6:2d:82:56:5a:1a:70: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:21:C7:86:27:8A:88:02:F0:C4:35:12:CF:F8:CE:12:54:C9:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl X509v3 Authority Key Identifier: keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer sbgp-ipAddrBlock: critical IPv4: 23.167.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ba:25:53:82:10:f4:7c:99:06:44:91:02:8b:20:24:9e:d9: 24:19:39:7e:0a:3c:a0:0d:10:e4:a2:0b:3a:33:af:90:ec:fd: a8:f0:9c:19:ea:5a:57:21:ec:1d:6d:2a:ca:bb:09:65:98:58: a8:27:ce:55:8a:35:e3:7d:e2:6f:3f:3b:4d:d9:43:73:84:91: ac:ca:bf:97:b8:fc:9b:12:d3:78:7d:71:b9:5e:a5:98:95:07: 19:0d:72:65:6f:80:15:7f:51:3d:0a:7f:5c:e2:01:fd:17:86: 21:c4:a0:4c:bb:0f:eb:81:68:57:e5:4b:e8:79:0f:c4:7f:67: cb:ae:cb:d6:be:83:33:cf:b2:90:33:63:0a:df:ad:1f:7f:d7: 33:86:48:29:ba:ca:7f:e6:f1:22:d0:f1:ea:ef:4a:a2:36:85: 8b:08:a9:85:58:63:93:55:ed:9b:a0:60:5b:69:c9:a9:66:de: 41:dc:42:53:0d:46:21:6a:ca:a1:25:ac:93:2a:fa:16:b3:9e: 01:a9:d7:8d:01:ec:39:c4:f5:3c:6c:b8:9f:cd:4e:a0:3b:f0: d5:19:5f:ef:00:eb:58:12:10:f6:d8:54:b1:e9:7f:d6:bc:da: 63:af:f8:de:aa:9c:78:25:80:3e:a9:c1:50:c6:6a:f0:43:1d: bc:1e:1d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCai2/DontNc6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY4ZmUwOTktZWMyOS00MmE2LThjYzgtOTI1OTc1MjNk NDFmMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OWNiNjJjNmMtYWJjYS00ZGJhLWE3YmQtMTk0N2VjZWRlNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn763Ia4uSVQM22zwVohCBHaL2AlKydaeRL6N tAOJ+coIGhXrzOUEy5S4CCG4WsapAWsW/5jTm4gA1xY5Px5Gc9kNlJCl0QvZfjVk D2UyjUYJT31O/nTfFj6vei96ZnX474obVdAbLWJ9rop7k5LBF6nmn3txba3++KIa vfrpma5yWs7GOIepKTCp3lRdz9OfUb0nY/Hv/OEjeroltjX6wtAvn1TkXOle0OAb e6LaKU2rdlZtvAK4/RGre3AUUJF/MwXlKYB5KYqvYj3z55RM3px0ToNL+iKg0x+3 YGpu/9dw9U4MJUvSKDCKqaXJsReGZsFM9hFdEuYtglZaGnCS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBuIceGJ4qIAvDENRLP+M4SVMlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhm ZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5NzUyM2Q0MWYvNTAyNTA1ZTEtZDA2Yi0z YjMwLWJkNTQtNTg0MjBjNTU1NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY4ZmUwOTktZWMyOS00MmE2LThj YzgtOTI1OTc1MjNkNDFmLzA2OGZlMDk5LWVjMjktNDJhNi04Y2M4LTkyNTk3NTIz ZDQxZi5jcmwwHwYDVR0jBBgwFoAUnfzcYZk6aSe9RDWFcnIIBGiUojEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhmZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5 NzUyM2Q0MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6doMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW6JVOCEPR8mQZEkQKLICSe2SQZOX4KPKANEOSiCzozr5Ds/ajwnBnq Wlch7B1tKsq7CWWYWKgnzlWKNeN94m8/O03ZQ3OEkazKv5e4/JsS03h9cblepZiV BxkNcmVvgBV/UT0Kf1ziAf0XhiHEoEy7D+uBaFflS+h5D8R/Z8uuy9a+gzPPspAz YwrfrR9/1zOGSCm6yn/m8SLQ8ervSqI2hYsIqYVYY5NV7ZugYFtpyalm3kHcQlMN RiFqyqElrJMq+hazngGp140B7DnE9TxsuJ/NTqA78NUZX+8A61gSEPbYVLHpf9a8 2mOv+N6qnHglgD6pwVDGavBDHbweHck= -----END CERTIFICATE-----Generated at Wed Sep 10 09:09:31 2025 by rpki-client