$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: vAV6ePvL8n9ay/wbUJcwUbLTFdGp9jcsVmDYsJIsfd4= Subject key identifier: E5:1A:F0:EC:84:CF:5E:C8:13:14:B3:36:8F:CC:07:8F:5E:14:70:3B Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEE49EDB5326C8ABD5EA8 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:49:ed:b5:32:6c:8a:bd:5e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ab11bce1-5c40-457f-b695-f69f301f066a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:61:25:89:a8:fe:9a:b1:14:92:5b:e1:b8: fb:d4:64:c9:81:c0:1c:02:43:81:81:ca:50:29:8a: 29:b1:a5:13:12:e5:af:95:4f:69:09:6c:49:21:f4: 0d:91:9a:87:db:b5:f2:60:eb:4d:47:1b:46:e8:e6: d6:4c:0d:39:14:2c:36:aa:3a:e7:9d:4c:47:34:69: 93:42:26:63:2a:34:e9:bb:de:32:e8:dc:e0:a2:31: 45:c6:94:01:c8:48:a1:8d:a1:0a:33:4a:88:0c:81: e3:8a:e4:12:2c:f4:6c:45:0c:f1:b8:16:d6:1a:79: 9b:21:88:b8:6a:f4:cd:64:d9:e3:99:01:af:7f:22: 17:3d:7e:85:b7:d8:b5:44:5f:5f:ec:96:65:1b:4b: 6d:8f:88:21:1d:2d:ca:ba:1b:d5:96:4b:5b:ae:3f: f9:3d:2b:71:9e:0e:d5:31:9b:ca:76:a2:2b:7b:a5: d9:15:b4:4d:da:a9:b2:da:17:a5:2e:dd:77:f3:21: 59:c5:b7:3b:94:1f:ef:70:41:35:e9:81:f2:37:27: cb:e8:59:ef:fb:49:c5:38:f9:6a:2c:63:55:2a:70: 6c:28:a2:ad:5a:54:e8:ae:9d:98:7d:08:7a:95:ff: 97:19:93:4f:08:19:63:ea:e3:d0:b9:cc:a4:a0:de: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1A:F0:EC:84:CF:5E:C8:13:14:B3:36:8F:CC:07:8F:5E:14:70:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:69:66:50:ca:f3:a4:82:f9:42:e2:51:da:62:17:b3:85:9e: d4:25:66:73:cf:ab:c1:c3:fb:a8:d6:1c:74:f1:c9:93:b4:48: 45:6c:e7:14:d8:fe:66:13:92:3e:90:7f:b0:df:8d:c6:fd:1b: 76:22:b8:37:17:a1:26:e4:3f:18:5e:4a:c7:b5:c1:fd:fd:d5: 75:b4:3c:c7:ec:7b:55:e4:68:c6:ee:5b:6e:7c:ac:86:ad:23: 7b:bc:76:08:14:31:ed:c3:7c:46:ef:50:c4:50:f1:ee:fd:c8: ca:36:c9:c2:63:21:96:ca:01:fa:51:f4:db:1d:ae:0e:04:50: d7:03:6d:4d:e3:fe:77:9a:6c:cb:8a:15:bc:d0:d5:73:50:2d: 4a:47:88:8b:e6:af:f1:49:4d:a6:b1:de:69:6d:9f:18:04:1a: 39:27:63:7f:8a:e9:80:67:d1:f3:96:d4:20:0e:72:b0:d0:b5: b2:8b:9c:54:aa:d5:60:d9:47:77:5e:4d:8d:87:a3:fa:75:d5: 3a:78:34:43:da:5c:52:88:97:5e:19:f0:c8:1f:48:ed:c0:e6: c6:fa:8f:24:ec:05:61:fb:42:24:a9:73:28:5a:28:ca:74:cd: 95:fe:8a:96:f6:e3:7d:00:be:32:c0:02:e8:6b:d0:16:f2:24: f0:3f:49:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+5J7bUybIq9XqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWIxMWJjZTEtNWM0MC00NTdmLWI2OTUtZjY5ZjMwMWYwNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBphJYmo/pqxFJJb4bj71GTJgcAcAkOBgcpQ KYopsaUTEuWvlU9pCWxJIfQNkZqH27XyYOtNRxtG6ObWTA05FCw2qjrnnUxHNGmT QiZjKjTpu94y6NzgojFFxpQByEihjaEKM0qIDIHjiuQSLPRsRQzxuBbWGnmbIYi4 avTNZNnjmQGvfyIXPX6Ft9i1RF9f7JZlG0ttj4ghHS3KuhvVlktbrj/5PStxng7V MZvKdqIre6XZFbRN2qmy2helLt138yFZxbc7lB/vcEE16YHyNyfL6Fnv+0nFOPlq LGNVKnBsKKKtWlTorp2YfQh6lf+XGZNPCBlj6uPQucykoN4QcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUa8OyEz17IExSzNo/MB49eFHA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1pZlDK86SC+ULiUdpiF7OFntQlZnPPq8HD+6jWHHTxyZO0SEVs5xTY /mYTkj6Qf7Dfjcb9G3YiuDcXoSbkPxheSse1wf391XW0PMfse1XkaMbuW258rIat I3u8dggUMe3DfEbvUMRQ8e79yMo2ycJjIZbKAfpR9Nsdrg4EUNcDbU3j/neabMuK FbzQ1XNQLUpHiIvmr/FJTaax3mltnxgEGjknY3+K6YBn0fOW1CAOcrDQtbKLnFSq 1WDZR3deTY2Ho/p11Tp4NEPaXFKIl14Z8MgfSO3A5sb6jyTsBWH7QiSpcyhaKMp0 zZX+ipb2430AvjLAAuhr0BbyJPA/SQM= -----END CERTIFICATE-----Generated at Tue Sep 16 02:36:29 2025 by rpki-client