$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/f5e91097-7f84-3630-81fb-8cff6cea5635.roa File: f5e91097-7f84-3630-81fb-8cff6cea5635.roa (raw, json) Hash identifier: rpykuL0zQQcclA9H54dUVvQF7wwgoOeLrnw0w1e9zo0= Subject key identifier: E2:60:9E:78:F6:F5:E1:0A:7E:97:07:52:60:7B:9E:DB:D3:0F:07:E9 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584AF521231C1EB01B9C3F4BF400 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/f5e91097-7f84-3630-81fb-8cff6cea5635.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 60602 IP address blocks: 68.67.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:23:1c:1e:b0:1b:9c:3f:4b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1759cfc0-cacf-40db-a165-e6d8cda99a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:e7:51:19:0f:76:d3:c1:84:ca:c6:3c:71: e7:20:5f:a7:68:5d:2a:ac:4a:4c:10:2e:8a:51:d4: c1:2c:42:52:26:74:65:d8:ae:34:29:b3:77:35:97: 66:77:06:be:ab:8d:41:8c:d6:37:9a:c9:d4:53:1a: 18:2e:76:9e:56:5c:86:13:3a:e1:17:73:42:b2:87: 98:b4:05:4e:f1:be:b5:77:75:3e:a2:f9:5d:27:42: 12:09:82:69:11:9f:d6:d8:07:32:03:31:a5:05:1a: a2:70:b7:37:d2:36:68:71:b3:e9:55:c4:44:56:7b: c5:9c:c7:3f:e2:15:96:47:78:d8:a9:cf:ee:85:3c: 90:a3:01:c2:a1:f9:fe:0e:32:80:0f:b9:6a:b7:71: 5e:9a:83:b7:07:21:aa:7e:bb:be:09:63:91:28:52: b9:33:66:5a:92:15:00:b7:3b:8e:ef:b6:35:56:db: ce:12:88:d8:f1:3a:40:c4:ac:47:a2:b0:c8:c3:4b: 95:f2:29:93:b3:ae:6b:a4:2f:e8:8f:70:4d:54:14: 95:75:ad:b9:cd:89:d2:4f:13:06:bb:9d:76:77:a0: 42:53:d1:fd:d3:7c:17:5b:45:19:b1:90:df:7f:59: 06:09:9c:d5:bf:78:f8:6a:cd:4a:e8:ab:44:cb:b0: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:60:9E:78:F6:F5:E1:0A:7E:97:07:52:60:7B:9E:DB:D3:0F:07:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/f5e91097-7f84-3630-81fb-8cff6cea5635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:81:1d:d4:8c:1e:46:46:5e:35:8c:29:61:5e:fb:88:88:0e: 61:84:cc:d5:52:6c:88:6b:40:f3:25:7e:38:b2:d7:95:1a:99: 5d:69:ae:e6:93:81:7e:55:25:cb:62:30:40:e5:d4:f4:68:a4: a8:3d:3e:b7:d4:6b:eb:21:11:f1:0d:6c:9b:6d:cd:9a:71:d8: 2d:db:79:96:df:c6:11:ee:90:2c:21:16:9f:8d:52:96:cf:26: f3:0f:c4:95:46:72:a2:b4:fa:e6:eb:26:3a:89:61:d7:0c:18: a4:0a:cd:64:99:02:59:e2:37:da:cc:6e:4b:a1:3f:b9:89:c5: 08:f1:98:92:9e:08:57:bc:7d:45:1e:0f:50:79:e9:3c:02:16: 02:76:4e:c4:00:89:6a:68:5d:47:41:82:ad:e3:87:67:76:f2: f3:fd:ca:a5:c9:5f:60:ee:d4:7c:56:e2:ae:6b:cb:ef:50:94: 39:31:55:dd:ba:68:d3:e7:6b:ad:4b:73:ba:80:a5:21:74:14: ef:81:f7:63:4d:a5:5f:9e:ea:b4:97:e6:7a:1c:1e:5b:1f:07: 5f:37:10:ed:11:02:91:24:32:85:19:ff:31:d6:c6:1d:b4:c7: a8:9d:fe:ca:3a:c7:a9:71:aa:7c:3c:1b:99:82:f6:a3:49:82: c5:c6:a3:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISMcHrAbnD9L9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTc1OWNmYzAtY2FjZi00MGRiLWExNjUtZTZkOGNkYTk5YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KXnURkPdtPBhMrGPHHnIF+naF0qrEpMEC6K UdTBLEJSJnRl2K40KbN3NZdmdwa+q41BjNY3msnUUxoYLnaeVlyGEzrhF3NCsoeY tAVO8b61d3U+ovldJ0ISCYJpEZ/W2AcyAzGlBRqicLc30jZocbPpVcREVnvFnMc/ 4hWWR3jYqc/uhTyQowHCofn+DjKAD7lqt3FemoO3ByGqfru+CWORKFK5M2ZakhUA tzuO77Y1VtvOEojY8TpAxKxHorDIw0uV8imTs65rpC/oj3BNVBSVda25zYnSTxMG u512d6BCU9H903wXW0UZsZDff1kGCZzVv3j4as1K6KtEy7BcLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJgnnj29eEKfpcHUmB7ntvTDwfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvZjVlOTEwOTctN2Y4NC0z NjMwLTgxZmItOGNmZjZjZWE1NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiBHdSMHkZGXjWMKWFe+4iIDmGEzNVSbIhrQPMlfjiy15UamV1pruaT gX5VJctiMEDl1PRopKg9PrfUa+shEfENbJttzZpx2C3beZbfxhHukCwhFp+NUpbP JvMPxJVGcqK0+ubrJjqJYdcMGKQKzWSZAlniN9rMbkuhP7mJxQjxmJKeCFe8fUUe D1B56TwCFgJ2TsQAiWpoXUdBgq3jh2d28vP9yqXJX2Du1HxW4q5ry+9QlDkxVd26 aNPna61Lc7qApSF0FO+B92NNpV+e6rSX5nocHlsfB183EO0RApEkMoUZ/zHWxh20 x6id/so6x6lxqnw8G5mC9qNJgsXGo60= -----END CERTIFICATE-----Generated at Mon Sep 8 14:44:06 2025 by rpki-client