$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa File: 4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa (raw, json) Hash identifier: L3kxlG212GOMYNFkttUmfvKPX7aIsA4Y0VKTd2bQkUY= Subject key identifier: 09:E7:54:D0:4E:6F:89:F4:79:4A:9E:78:D6:2A:7C:F3:D4:C1:32:FB Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584A94D0D0A7B65E14809D623300 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 834 IP address blocks: 68.67.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d0:a7:b6:5e:14:80:9d:62:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=894be66f-5939-47bb-a550-90a9794e723b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:3f:03:02:91:92:59:1f:5a:3b:11:bf:01: 34:5a:04:17:df:af:a6:c9:48:a7:d8:64:f7:78:54: fc:01:83:2f:3d:44:c6:5c:0b:94:35:d1:7d:ce:d3: 0f:52:35:c2:f8:d5:42:8e:88:00:55:c8:03:f7:2f: cb:cb:6c:03:43:66:85:9a:17:aa:5c:55:ea:e0:51: 67:bc:7c:ff:28:0b:77:73:af:7d:4c:12:a6:21:36: 32:33:8f:dd:f2:8f:44:d3:ec:49:46:02:18:11:d8: e0:13:84:fe:01:ad:72:df:c5:c5:c9:ec:ce:cc:da: 9c:e5:5a:f9:a1:d1:d6:9c:42:07:0f:75:c1:da:5a: bd:4f:09:26:87:d8:15:0f:58:9b:37:1e:7a:69:9d: 54:0e:67:cb:5d:af:f6:af:37:e3:a6:91:8f:6c:85: 16:6b:8c:fd:7c:bf:18:af:db:88:fa:85:a3:93:61: 2f:fd:f1:c4:3b:a8:3b:88:69:75:b9:ae:b7:9d:f4: 32:37:fe:87:86:32:07:68:ea:7a:db:98:18:fc:a7: f2:66:a2:78:13:7c:fb:93:45:ae:7e:36:1d:ef:21: 69:98:37:87:7b:b5:a4:24:58:d4:a0:81:96:0d:74: 55:ef:57:2a:6b:98:ed:df:73:7f:ef:13:c1:53:9e: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E7:54:D0:4E:6F:89:F4:79:4A:9E:78:D6:2A:7C:F3:D4:C1:32:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:df:6c:d2:ba:0d:e0:79:13:6a:99:36:f2:20:95:32:19:d0: b6:76:a6:a4:a1:36:a4:65:a7:49:fc:e8:cb:bd:8d:df:8c:43: 24:9d:b4:1c:4c:cc:b2:4d:0d:51:55:b6:e0:3c:57:f5:7f:a4: a5:af:9d:3c:aa:df:ec:a5:b8:a8:0d:bd:8c:14:28:36:67:57: db:fd:d0:b1:55:ce:e6:5b:d4:fd:09:02:01:40:81:5c:9b:21: b7:3d:ac:8e:03:f7:a1:b0:38:f9:77:39:42:c1:08:30:7a:01: 87:b0:7c:da:80:81:28:90:60:dc:dd:67:54:47:1b:cd:3c:6f: a3:28:c3:bd:bf:68:35:2c:29:fa:6c:81:c8:39:f4:2e:cc:4c: c9:25:48:6b:e1:eb:19:de:ed:a7:ff:a3:0a:23:6b:8a:cc:ce: de:21:07:09:de:77:bb:05:27:c2:bf:b8:58:dd:24:80:ab:a4: 45:9b:04:f4:c1:ea:c5:0d:b8:8d:f9:b4:2e:db:c6:79:e5:cc: 8b:e2:c5:7c:8a:31:f0:35:a8:ed:e9:b3:c1:49:bb:80:24:9c: de:6c:d3:db:b2:02:a9:0c:9b:61:7f:7f:93:1a:fe:1b:b4:a6: 32:ce:e1:d7:7c:9d:80:43:a9:6c:e8:b8:80:10:d1:19:46:ad: 6c:9c:64:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NCntl4UgJ1iMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk ODk0YmU2NmYtNTkzOS00N2JiLWE1NTAtOTBhOTc5NGU3MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LA/AwKRklkfWjsRvwE0WgQX36+myUin2GT3 eFT8AYMvPUTGXAuUNdF9ztMPUjXC+NVCjogAVcgD9y/Ly2wDQ2aFmheqXFXq4FFn vHz/KAt3c699TBKmITYyM4/d8o9E0+xJRgIYEdjgE4T+Aa1y38XFyezOzNqc5Vr5 odHWnEIHD3XB2lq9Twkmh9gVD1ibNx56aZ1UDmfLXa/2rzfjppGPbIUWa4z9fL8Y r9uI+oWjk2Ev/fHEO6g7iGl1ua63nfQyN/6HhjIHaOp625gY/KfyZqJ4E3z7k0Wu fjYd7yFpmDeHe7WkJFjUoIGWDXRV71cqa5jt33N/7xPBU57SkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnnVNBOb4n0eUqeeNYqfPPUwTL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNGU1ZTZhMmMtYmQyNS0z ZDAwLThhMWEtNDNiOGJlYjdhMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7fbNK6DeB5E2qZNvIglTIZ0LZ2pqShNqRlp0n86Mu9jd+MQySdtBxM zLJNDVFVtuA8V/V/pKWvnTyq3+yluKgNvYwUKDZnV9v90LFVzuZb1P0JAgFAgVyb Ibc9rI4D96GwOPl3OULBCDB6AYewfNqAgSiQYNzdZ1RHG808b6Mow72/aDUsKfps gcg59C7MTMklSGvh6xne7af/owoja4rMzt4hBwned7sFJ8K/uFjdJICrpEWbBPTB 6sUNuI35tC7bxnnlzIvixXyKMfA1qO3ps8FJu4AknN5s09uyAqkMm2F/f5Ma/hu0 pjLO4dd8nYBDqWzouIAQ0RlGrWycZMc= -----END CERTIFICATE-----Generated at Thu Jul 31 23:30:44 2025 by rpki-client