$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa File: 1a07af80-4f86-3445-9db1-9d3ed1101688.roa (raw, json) Hash identifier: 1M8YFz1/nB8p3YWhADwcoQHmjBRffX/qewPBBu6NQuY= Subject key identifier: 2A:74:70:C0:3E:BE:17:16:C5:66:8E:77:AC:F3:11:3A:03:D4:41:F2 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584B1AD1778F346A1129B169E200 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 61317 IP address blocks: 68.67.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:77:8f:34:6a:11:29:b1:69:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=f59a352a-39bf-4503-90ea-05b7ed62c8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:5a:1b:8f:8d:fe:bf:59:8e:b6:1e:a7:1f: d2:a2:08:f4:68:fd:d1:60:25:56:2d:c2:46:bb:24: 67:5d:a9:7b:4e:4b:76:c2:2b:e2:c8:dd:12:50:89: b3:23:85:bb:4f:00:14:49:23:50:5d:60:91:d1:fc: d9:54:47:8d:dc:33:26:68:02:d0:36:02:ce:08:5c: 90:2d:31:cd:1d:bc:bf:be:30:4a:65:ce:dd:53:92: c0:57:82:d4:13:bf:6d:70:7f:7f:93:cb:cf:3e:91: f7:65:2d:33:de:2e:79:45:6c:f3:ba:42:b7:3c:30: f4:b1:e2:9b:28:37:08:2c:25:6b:a8:65:59:12:97: af:a8:3a:40:b0:0f:18:80:b7:57:2f:73:0e:4b:85: f1:d2:68:20:3a:9f:d3:91:f8:ba:9b:4f:70:a0:ff: 98:1a:14:35:e1:0e:97:2c:7b:6f:af:c7:88:91:a4: a2:ad:be:1e:84:4f:07:54:63:de:7f:d8:e1:7b:aa: f0:6a:30:ab:42:05:fb:cd:8a:38:8e:b7:98:dd:90: f2:43:9f:3b:ec:72:66:48:b9:60:51:67:ad:94:cc: a9:1e:d6:62:c0:97:e6:ad:52:e9:e5:9b:91:0e:38: 32:c0:af:69:39:08:35:32:33:1c:6d:be:44:10:b9: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:70:C0:3E:BE:17:16:C5:66:8E:77:AC:F3:11:3A:03:D4:41:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ed:37:65:92:1c:4f:a2:ab:a3:43:01:6b:d6:18:7f:0c:c1: 3e:5c:ca:5a:97:59:8e:22:38:4a:0f:71:83:6f:8b:af:93:50: a9:03:d2:18:cd:f2:d7:72:d7:6d:a1:c4:3b:b6:2c:cf:98:36: ae:7b:48:e3:4c:30:d9:ed:70:d1:0a:b9:f7:92:96:f9:1d:bc: a3:89:6b:64:c4:52:31:3a:e0:2a:70:64:e3:ae:d0:3b:62:ad: 98:a1:5f:fa:2c:32:33:b3:03:11:88:8c:01:dd:b9:b0:86:65: 80:15:d4:95:5c:e7:99:39:29:a8:b9:e5:15:93:00:3f:87:15: 21:7b:10:83:ec:cb:23:df:a3:71:30:e3:a2:56:d1:09:38:1a: 57:38:f1:d5:eb:aa:1c:0d:0c:0d:f0:50:1a:fe:57:da:39:20: d4:5f:8d:f3:19:04:f5:e5:54:f1:5b:86:67:3b:a8:43:a6:11: 2a:e9:0e:a4:31:86:ce:8c:fd:bc:c2:bc:cf:fd:df:90:44:73: 9f:d2:50:f5:3e:11:ff:00:46:56:8b:e8:72:e2:4c:b5:dc:9a: e7:24:21:fe:1d:a5:48:c7:01:0c:fb:68:38:52:68:78:4e:68: c6:59:4c:ed:81:98:32:3e:d9:e6:ad:c9:b1:92:43:93:81:6f: 5a:04:c1:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XePNGoRKbFp4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjU5YTM1MmEtMzliZi00NTAzLTkwZWEtMDViN2VkNjJjOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrtaG4+N/r9ZjrYepx/Sogj0aP3RYCVWLcJG uyRnXal7Tkt2wiviyN0SUImzI4W7TwAUSSNQXWCR0fzZVEeN3DMmaALQNgLOCFyQ LTHNHby/vjBKZc7dU5LAV4LUE79tcH9/k8vPPpH3ZS0z3i55RWzzukK3PDD0seKb KDcILCVrqGVZEpevqDpAsA8YgLdXL3MOS4Xx0mggOp/Tkfi6m09woP+YGhQ14Q6X LHtvr8eIkaSirb4ehE8HVGPef9jhe6rwajCrQgX7zYo4jreY3ZDyQ5877HJmSLlg UWetlMypHtZiwJfmrVLp5ZuRDjgywK9pOQg1MjMcbb5EELlCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp0cMA+vhcWxWaOd6zzEToD1EHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMWEwN2FmODAtNGY4Ni0z NDQ1LTlkYjEtOWQzZWQxMTAxNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIztN2WSHE+iq6NDAWvWGH8MwT5cylqXWY4iOEoPcYNvi6+TUKkD0hjN 8tdy122hxDu2LM+YNq57SONMMNntcNEKufeSlvkdvKOJa2TEUjE64CpwZOOu0Dti rZihX/osMjOzAxGIjAHdubCGZYAV1JVc55k5Kai55RWTAD+HFSF7EIPsyyPfo3Ew 46JW0Qk4Glc48dXrqhwNDA3wUBr+V9o5INRfjfMZBPXlVPFbhmc7qEOmESrpDqQx hs6M/bzCvM/935BEc5/SUPU+Ef8ARlaL6HLiTLXcmuckIf4dpUjHAQz7aDhSaHhO aMZZTO2BmDI+2eatybGSQ5OBb1oEwdE= -----END CERTIFICATE-----Generated at Thu Sep 18 14:32:22 2025 by rpki-client