$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa File: 52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa (raw, json) Hash identifier: 0o44QWqxN6PBJkhilI53ivX7Ec+ahDF4UMUBjz0Zm28= Subject key identifier: CB:E4:01:A7:88:7F:84:48:E6:32:98:A3:6D:0F:68:3F:DB:1B:97:E9 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584A94D0CF5FB6EB2492F8A85400 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 834 IP address blocks: 68.67.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:cf:5f:b6:eb:24:92:f8:a8:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=479fda92-bef1-4ae6-8027-a79dcbcc09fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:89:36:28:80:2f:c3:c7:67:ce:ce:62:7c:0b: 59:03:0b:1e:0e:47:d4:21:b1:59:b8:d0:47:b1:c4: 91:c7:b1:57:ee:b5:89:4e:3c:16:ba:a1:21:04:ee: 3e:93:85:34:5b:1a:af:22:8b:fe:d2:d3:f6:28:aa: 97:fc:b5:3c:20:1a:25:08:3d:ac:fc:d2:7b:86:fb: 1b:1d:3c:08:43:02:b5:94:0a:47:10:bd:5d:cb:7c: 29:ac:fd:2d:39:cc:63:95:49:b2:a5:5c:39:5d:ce: 52:65:94:e7:fd:f2:eb:61:ab:f3:d5:e7:a5:53:2d: de:0d:30:6e:f2:f5:3f:83:4e:d9:88:38:00:41:1b: 86:c3:97:5f:4c:e9:00:dd:11:fe:9e:78:c8:e0:4f: 62:42:bf:9a:cd:52:38:93:5a:4c:f8:83:67:d9:8e: e2:e9:06:7f:cc:e4:7a:85:a3:84:d4:52:ef:6d:2f: 0c:5f:69:dc:90:18:e4:94:e7:74:95:8c:f3:10:32: c9:5f:ec:fa:1a:8b:d5:cb:76:51:fa:5c:02:21:2e: 2e:37:6d:69:a8:fc:b1:83:c9:9c:b6:35:a2:0a:84: 0f:10:d5:2a:84:8c:f3:c8:d7:f9:59:5f:87:8a:a9: 83:08:89:e5:c3:35:75:e6:be:56:c5:7f:4b:33:68: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E4:01:A7:88:7F:84:48:E6:32:98:A3:6D:0F:68:3F:DB:1B:97:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3d:82:38:2b:06:78:02:dd:10:a4:cf:91:9f:12:81:bc:ae: 59:bc:b9:10:50:15:ba:8b:22:8a:d6:21:5d:d9:75:68:d3:c8: d5:fe:40:54:4d:60:58:33:6c:46:44:6a:33:da:49:3b:b4:47: 99:c7:33:24:d6:10:57:7b:98:a2:32:f6:ce:ae:4f:4d:ae:c5: 77:37:3b:26:95:49:52:06:fb:01:d9:3a:5e:f5:7b:fc:9c:74: b2:ff:e8:61:dc:3d:d2:5c:92:9f:6b:31:e2:59:7a:93:fa:4b: cc:86:00:df:34:83:e5:e0:ca:cd:a8:38:86:b8:59:1f:e1:4e: a6:85:29:cf:a3:80:8c:61:cc:9e:9c:76:f9:33:5b:17:13:60: c9:0f:45:b3:21:72:9a:a8:e4:02:2a:8b:ae:e4:bd:c9:77:bf: 2f:6f:f6:bc:98:c5:06:0e:a6:06:d3:a8:bf:a6:4a:d6:05:55: 6e:2d:73:0b:a1:b9:d3:ce:ee:4e:7c:73:e8:b3:3b:23:98:ba: b3:26:cb:de:99:aa:01:a3:a4:7b:e9:c4:9c:af:68:b5:95:1f: 0e:34:9c:71:47:d5:98:09:e6:f6:83:bf:84:8a:a4:00:ed:6e: f5:60:5b:e4:bd:43:0e:ee:e4:8c:45:06:f9:33:83:05:82:fc: 8b:79:1e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0M9ftuskkvioVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk NDc5ZmRhOTItYmVmMS00YWU2LTgwMjctYTc5ZGNiY2MwOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiok2KIAvw8dnzs5ifAtZAwseDkfUIbFZuNBH scSRx7FX7rWJTjwWuqEhBO4+k4U0WxqvIov+0tP2KKqX/LU8IBolCD2s/NJ7hvsb HTwIQwK1lApHEL1dy3wprP0tOcxjlUmypVw5Xc5SZZTn/fLrYavz1eelUy3eDTBu 8vU/g07ZiDgAQRuGw5dfTOkA3RH+nnjI4E9iQr+azVI4k1pM+INn2Y7i6QZ/zOR6 haOE1FLvbS8MX2nckBjklOd0lYzzEDLJX+z6GovVy3ZR+lwCIS4uN21pqPyxg8mc tjWiCoQPENUqhIzzyNf5WV+HiqmDCInlwzV15r5WxX9LM2itMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvkAaeIf4RI5jKYo20PaD/bG5fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNTJjZmU3MmUtM2QyNy0z MjU4LWJlZmYtZTgwZGIzYTJlNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU9gjgrBngC3RCkz5GfEoG8rlm8uRBQFbqLIorWIV3ZdWjTyNX+QFRN YFgzbEZEajPaSTu0R5nHMyTWEFd7mKIy9s6uT02uxXc3OyaVSVIG+wHZOl71e/yc dLL/6GHcPdJckp9rMeJZepP6S8yGAN80g+Xgys2oOIa4WR/hTqaFKc+jgIxhzJ6c dvkzWxcTYMkPRbMhcpqo5AIqi67kvcl3vy9v9ryYxQYOpgbTqL+mStYFVW4tcwuh udPO7k58c+izOyOYurMmy96ZqgGjpHvpxJyvaLWVHw40nHFH1ZgJ5vaDv4SKpADt bvVgW+S9Qw7u5IxFBvkzgwWC/It5Hlc= -----END CERTIFICATE-----Generated at Thu Jul 31 23:30:45 2025 by rpki-client