$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa File: ceeaa841-ed82-33d1-843a-3a411e6fee58.roa (raw, json) Hash identifier: Dl5e0PfyIOCbz2tj8cDnTojfmJ+K1kXH3brUBw2aYKM= Subject key identifier: 40:4C:15:B2:A3:E5:5E:A7:BC:B2:89:A2:B6:4E:B4:A5:6F:48:6C:0E Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584A66C0796621D35D0C96E62940 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 394195 IP address blocks: 68.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:79:66:21:d3:5d:0c:96:e6:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=6d4d587e-c0f0-4313-8d99-dbab7d3bf7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:22:77:97:31:7d:19:57:63:69:3c:aa:bb: 28:b6:45:28:0e:e8:cc:5b:35:1b:6c:f6:46:e4:a9: e6:10:e7:c3:df:93:da:1d:4b:04:8e:5b:ee:17:de: 31:ac:36:4a:6e:46:24:de:50:99:53:32:75:31:28: 0e:68:78:e4:c9:20:c7:99:e7:3a:99:b3:4a:59:77: c2:6e:0d:d6:e0:71:92:21:a9:ad:ce:da:a0:9f:da: d0:e8:3d:6f:71:90:ab:cd:e1:71:89:6b:21:51:3f: b6:56:5e:20:63:e7:4a:38:9c:10:a9:5a:85:5e:79: 7e:0b:08:32:fd:01:fd:76:75:49:4d:eb:07:80:c5: 65:de:ce:fb:04:a9:f5:71:9e:3e:e8:68:2a:b3:58: cc:c4:59:88:81:d0:ab:a6:6c:27:ba:a3:b0:8d:d8: bb:38:f6:22:0d:a6:9c:0c:25:f8:7e:cd:7c:a2:75: 5e:3c:e7:cf:ee:96:79:4b:8e:27:4c:53:53:c1:23: fb:b9:cf:2d:ea:58:d7:77:45:5b:71:62:1b:e0:34: 61:99:7b:57:ea:b7:6c:ca:38:31:f6:b7:59:32:5d: 7a:86:b1:4c:eb:5b:38:80:34:d7:3c:f4:b4:ec:a4: 46:6e:85:1b:c6:c5:ca:db:53:78:90:40:a7:8b:cd: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4C:15:B2:A3:E5:5E:A7:BC:B2:89:A2:B6:4E:B4:A5:6F:48:6C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 68.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a5:4a:2b:48:3d:57:33:b8:b7:37:89:4e:30:67:8c:0e:9f: a2:37:7e:b5:e2:4d:25:61:27:54:45:fc:2a:3a:ac:76:33:54: 68:86:89:8b:5b:8b:37:7b:94:bb:4c:c0:9a:b8:b5:c6:d3:7d: be:83:a8:ce:86:98:92:73:18:aa:d6:54:c8:2a:d3:6c:70:91: 27:95:9f:a3:86:e7:96:40:02:30:4b:25:84:25:fd:8c:79:bd: aa:59:1a:e7:24:b6:06:90:de:c0:8a:cb:84:62:44:a1:24:c9: 8a:0b:ff:65:bb:54:10:41:b6:73:ad:5e:6a:9f:bb:d1:9c:48: df:25:73:34:0d:41:b2:e6:aa:a3:3e:85:0b:53:e1:98:19:14: cd:e4:ce:7d:6e:42:04:f2:f0:34:7c:83:c4:ef:f6:a6:45:11: 9f:bb:1a:d3:d7:be:ba:23:b0:a3:e2:aa:10:db:96:b4:1a:9e: 7a:85:a3:26:dd:16:1d:4f:f8:bc:aa:79:b2:1d:34:7b:7d:97: 9d:ea:f6:ef:08:fa:94:5d:60:3b:1c:b3:84:de:50:39:b6:b7: ef:0e:48:c5:20:76:0a:3e:a7:e1:f9:19:30:d3:34:9c:32:32: d5:e1:52:26:34:96:79:f7:83:7d:54:8c:35:db:cf:5a:ba:49: 3d:60:da:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHlmIdNdDJbmKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NmQ0ZDU4N2UtYzBmMC00MzEzLThkOTktZGJhYjdkM2JmN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFMid5cxfRlXY2k8qrsotkUoDujMWzUbbPZG 5KnmEOfD35PaHUsEjlvuF94xrDZKbkYk3lCZUzJ1MSgOaHjkySDHmec6mbNKWXfC bg3W4HGSIamtztqgn9rQ6D1vcZCrzeFxiWshUT+2Vl4gY+dKOJwQqVqFXnl+Cwgy /QH9dnVJTesHgMVl3s77BKn1cZ4+6Ggqs1jMxFmIgdCrpmwnuqOwjdi7OPYiDaac DCX4fs18onVePOfP7pZ5S44nTFNTwSP7uc8t6ljXd0VbcWIb4DRhmXtX6rdsyjgx 9rdZMl16hrFM61s4gDTXPPS07KRGboUbxsXK21N4kECni83hxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBMFbKj5V6nvLKJorZOtKVvSGwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvY2VlYWE4NDEtZWQ4Mi0z M2QxLTg0M2EtM2E0MTFlNmZlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+lSitIPVczuLc3iU4wZ4wOn6I3frXiTSVhJ1RF/Co6rHYzVGiGiYtb izd7lLtMwJq4tcbTfb6DqM6GmJJzGKrWVMgq02xwkSeVn6OG55ZAAjBLJYQl/Yx5 vapZGucktgaQ3sCKy4RiRKEkyYoL/2W7VBBBtnOtXmqfu9GcSN8lczQNQbLmqqM+ hQtT4ZgZFM3kzn1uQgTy8DR8g8Tv9qZFEZ+7GtPXvrojsKPiqhDblrQannqFoybd Fh1P+LyqebIdNHt9l53q9u8I+pRdYDscs4TeUDm2t+8OSMUgdgo+p+H5GTDTNJwy MtXhUiY0lnn3g31UjDXbz1q6ST1g2pA= -----END CERTIFICATE-----Generated at Fri Jul 11 04:37:12 2025 by rpki-client