$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa File: 3b366366-9247-34f6-b683-bc009512f354.roa (raw, json) Hash identifier: kmCBkxXdUJu5gNSm7gI1dYXdhgTo9lEUS5Gwis7WkSg= Subject key identifier: 77:EC:3C:DE:33:AD:79:26:45:DF:AD:F2:5F:99:AC:A8:EA:7A:86:C4 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEE5C68080A519C30B100 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 68.70.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:5c:68:08:0a:51:9c:30:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=056104ba-3109-4169-ad79-dfc3dc16db05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:fe:40:91:b0:b7:06:7a:c0:be:a3:8b:ca: 7d:f6:43:f2:bf:d3:93:be:ec:b2:d8:79:3b:fa:d1: 1f:18:e7:46:1e:81:92:81:62:90:47:b6:4c:a2:b8: 18:b3:0c:f3:2b:09:4e:a6:07:7c:52:ef:92:95:25: 48:01:bd:cd:63:a0:41:1f:4d:94:02:3c:bc:c8:4f: 9f:f6:26:1d:73:c5:ab:9a:07:e0:cc:01:49:86:00: 0a:24:9a:52:35:90:da:72:5e:39:6e:32:f1:56:b3: 40:f3:33:7b:50:28:fc:55:96:03:4f:f5:16:bd:02: dd:f3:34:6a:68:29:d2:ff:45:c4:68:c4:09:74:fa: d0:ac:6c:72:b2:e3:c4:6b:c3:b2:65:3b:ab:bf:61: 0d:80:b8:5f:89:d4:fd:8e:1e:48:cd:54:b4:40:ff: 90:71:a8:79:fb:c8:75:28:25:c6:b2:74:bd:b0:56: 02:93:00:eb:3c:6a:4d:15:d3:56:8a:e9:54:99:23: e0:70:fc:a5:79:3d:0a:3f:c4:8c:73:f0:ad:a7:ae: 57:46:ef:49:f0:3a:a4:93:6b:69:80:26:f6:fe:50: ee:1f:4d:7c:80:8d:47:9a:ea:19:64:01:0a:d7:a8: 46:cf:c6:51:0d:68:bb:b4:21:b8:7b:cf:16:58:59: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EC:3C:DE:33:AD:79:26:45:DF:AD:F2:5F:99:AC:A8:EA:7A:86:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f6:51:06:ca:f5:0c:07:b9:66:af:b2:cc:7e:27:50:d1:ef: cd:a9:25:05:55:16:e5:49:0b:2d:41:c5:52:d3:1c:6f:cd:b7: e2:df:bb:a7:4c:d5:67:47:61:7f:63:f1:6d:c3:7e:f5:a7:62: 2a:7b:1f:ad:e5:f1:a6:1b:89:0d:1d:47:71:5a:04:bc:4e:e1: 53:cc:88:56:6e:8c:b8:e5:37:67:d2:6d:49:8c:48:01:8b:26: 03:0a:cf:ac:c6:dd:61:b5:1a:ce:c9:9f:20:f6:92:ac:48:6c: 9c:55:f7:ba:f2:00:42:22:c2:e9:2a:bb:7f:e7:57:74:6f:ae: f7:20:d1:28:57:9e:8a:4d:ca:d2:c0:8c:47:ad:b8:05:30:d5: 53:c0:d3:8d:7c:ab:12:bb:6a:b2:b4:90:77:87:27:26:6f:5b: 4b:cb:f7:9f:5e:fc:57:79:6e:ff:56:93:7a:05:7c:cb:52:56: a7:eb:5e:dc:6c:97:04:a0:63:bb:c7:01:71:55:ab:fd:a4:1a: 6a:a6:e9:b6:44:8d:6a:3c:3b:b8:bf:96:d0:60:ff:9c:64:f2: 24:9a:99:73:13:c6:d0:49:c0:b7:ab:1b:94:74:56:33:bf:26: c5:88:ba:c1:46:b0:2f:0d:84:bc:f7:0a:29:c1:4e:c3:76:b5: ba:62:db:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+5caAgKUZwwsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MDU2MTA0YmEtMzEwOS00MTY5LWFkNzktZGZjM2RjMTZkYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJT+QJGwtwZ6wL6ji8p99kPyv9OTvuyy2Hk7 +tEfGOdGHoGSgWKQR7ZMorgYswzzKwlOpgd8Uu+SlSVIAb3NY6BBH02UAjy8yE+f 9iYdc8WrmgfgzAFJhgAKJJpSNZDacl45bjLxVrNA8zN7UCj8VZYDT/UWvQLd8zRq aCnS/0XEaMQJdPrQrGxysuPEa8OyZTurv2ENgLhfidT9jh5IzVS0QP+Qcah5+8h1 KCXGsnS9sFYCkwDrPGpNFdNWiulUmSPgcPyleT0KP8SMc/Ctp65XRu9J8Dqkk2tp gCb2/lDuH018gI1HmuoZZAEK16hGz8ZRDWi7tCG4e88WWFmO2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfsPN4zrXkmRd+t8l+ZrKjqeobEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvM2IzNjYzNjYtOTI0Ny0z NGY2LWI2ODMtYmMwMDk1MTJmMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn2UQbK9QwHuWavssx+J1DR782pJQVVFuVJCy1BxVLTHG/Nt+Lfu6dM 1WdHYX9j8W3DfvWnYip7H63l8aYbiQ0dR3FaBLxO4VPMiFZujLjlN2fSbUmMSAGL JgMKz6zG3WG1Gs7JnyD2kqxIbJxV97ryAEIiwukqu3/nV3Rvrvcg0ShXnopNytLA jEetuAUw1VPA0418qxK7arK0kHeHJyZvW0vL959e/Fd5bv9Wk3oFfMtSVqfrXtxs lwSgY7vHAXFVq/2kGmqm6bZEjWo8O7i/ltBg/5xk8iSamXMTxtBJwLerG5R0VjO/ JsWIusFGsC8NhLz3CinBTsN2tbpi29w= -----END CERTIFICATE-----Generated at Tue Sep 16 02:36:23 2025 by rpki-client