$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed847f52-15f9-3e95-addc-3a1b2d522ada.roa File: ed847f52-15f9-3e95-addc-3a1b2d522ada.roa (raw, json) Hash identifier: k+RiPKw3MNWRSsU9H/3SH001N7Kf9uXkNLmoBRVxK8E= Subject key identifier: 98:2C:E3:30:C8:59:F8:39:85:7C:DD:1C:95:E6:A1:C8:44:78:39:82 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF68691A557C27F81C1E74A08 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed847f52-15f9-3e95-addc-3a1b2d522ada.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 40.80.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:91:a5:57:c2:7f:81:c1:e7:4a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=e36a4cc9-d2ae-41db-b9e7-5771382c45ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9c:72:12:b9:db:39:41:86:1c:a0:5c:d9:53: f9:0c:ad:75:60:e4:63:7e:41:7a:74:e6:89:64:6e: e3:c1:13:23:51:5d:e9:ed:6f:ca:48:43:05:0a:ef: 2d:fc:2b:a9:f6:95:87:c8:31:e9:35:20:ae:c0:9e: 58:46:96:cc:96:8f:f2:58:b9:50:03:6f:21:35:c7: 2a:6d:48:2b:7e:88:19:b6:9a:b6:20:e9:aa:db:1c: 16:d4:8f:01:4a:10:2e:46:5c:3a:04:5b:ab:fb:13: 66:89:78:c2:31:6e:a7:d0:d6:80:d2:31:f5:5f:6c: e0:80:0b:60:79:7a:ed:15:96:7f:0d:75:87:c4:b1: 5e:b6:a9:0f:32:a9:4b:1e:0e:4f:3f:b5:30:5c:08: 9e:a3:8e:aa:c3:64:36:87:fe:39:c5:3f:62:67:85: 0a:ab:5f:1c:be:ca:f6:3d:04:1c:60:22:66:63:b4: 90:9a:3e:50:62:96:6d:1b:d0:3f:bd:72:d9:e6:98: 45:06:0c:45:a4:c8:c0:31:08:bc:c6:26:bc:b9:e0: 40:37:a5:fa:04:30:c5:9c:cc:35:58:d1:8e:f9:9b: 44:54:a8:8a:b4:82:30:eb:c1:9d:07:de:30:40:ba: 98:c9:ec:a2:1b:de:86:df:07:03:ee:b2:1a:08:5f: 20:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:E3:30:C8:59:F8:39:85:7C:DD:1C:95:E6:A1:C8:44:78:39:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed847f52-15f9-3e95-addc-3a1b2d522ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.80.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8c:3a:ba:54:c8:5e:7a:f9:3d:be:e7:e0:05:2d:a5:31:9d: e9:71:90:9d:b9:a7:88:12:06:12:45:3b:1f:0f:bc:48:73:05: fb:55:22:e9:c0:26:d3:d0:f8:b9:5a:39:c7:cf:0d:ac:eb:d3: 16:ff:76:13:3b:d8:bd:45:7b:07:d0:dd:44:1c:9b:6f:72:fc: 2f:a8:ec:bd:15:c8:77:da:71:38:d8:a9:a2:5c:6a:00:31:c9: c2:74:79:3d:bb:43:65:63:84:6b:af:3e:44:94:b7:dc:83:95: e7:05:7f:49:a8:5e:7e:7f:dc:10:67:dd:eb:05:41:c7:e5:ea: 81:81:70:ec:3b:77:cc:17:92:c9:d2:9f:16:74:7f:7b:60:25: a9:7a:bc:ef:c2:f7:88:12:06:43:2f:9c:8c:b1:0e:25:0a:d6: f7:6b:00:ae:52:c5:db:38:ef:1e:6d:7b:56:f2:62:c7:37:85: 14:dc:0d:ba:f7:14:4a:80:66:c3:d6:0a:cf:4c:d3:b9:da:7d: e3:b5:b6:57:92:db:9b:f8:8a:58:f9:ae:29:c5:a4:4e:d0:57: 68:da:fe:52:2e:66:84:b5:31:41:29:71:61:32:2c:3a:0a:83: 10:31:d3:c1:cf:73:ac:a5:96:dc:40:3d:f3:87:1d:9c:e0:8b: de:21:00:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpGlV8J/gcHnSggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZTM2YTRjYzktZDJhZS00MWRiLWI5ZTctNTc3MTM4MmM0NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJxyErnbOUGGHKBc2VP5DK11YORjfkF6dOaJ ZG7jwRMjUV3p7W/KSEMFCu8t/Cup9pWHyDHpNSCuwJ5YRpbMlo/yWLlQA28hNccq bUgrfogZtpq2IOmq2xwW1I8BShAuRlw6BFur+xNmiXjCMW6n0NaA0jH1X2zggAtg eXrtFZZ/DXWHxLFetqkPMqlLHg5PP7UwXAieo46qw2Q2h/45xT9iZ4UKq18cvsr2 PQQcYCJmY7SQmj5QYpZtG9A/vXLZ5phFBgxFpMjAMQi8xia8ueBAN6X6BDDFnMw1 WNGO+ZtEVKiKtIIw68GdB94wQLqYyeyiG96G3wcD7rIaCF8g1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgs4zDIWfg5hXzdHJXmochEeDmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWQ4NDdmNTItMTVmOS0z ZTk1LWFkZGMtM2ExYjJkNTIyYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqMOrpUyF56+T2+5+AFLaUxnelxkJ25p4gSBhJFOx8PvEhzBftVIunA JtPQ+LlaOcfPDazr0xb/dhM72L1FewfQ3UQcm29y/C+o7L0VyHfacTjYqaJcagAx ycJ0eT27Q2VjhGuvPkSUt9yDlecFf0moXn5/3BBn3esFQcfl6oGBcOw7d8wXksnS nxZ0f3tgJal6vO/C94gSBkMvnIyxDiUK1vdrAK5Sxds47x5te1byYsc3hRTcDbr3 FEqAZsPWCs9M07nafeO1tleS25v4ilj5rinFpE7QV2ja/lIuZoS1MUEpcWEyLDoK gxAx08HPc6ylltxAPfOHHZzgi94hAOM= -----END CERTIFICATE-----Generated at Tue Aug 26 06:35:27 2025 by rpki-client