$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa File: 802e4f3e-477d-3343-b4df-4044a49cb54d.roa (raw, json) Hash identifier: Oi42ch3rnNHiibRSutEep/xXWoL3NMnQ4qJGXuCA8lY= Subject key identifier: 27:38:E1:62:90:6D:EB:13:78:52:1F:05:9A:11:BF:5B:FF:A5:D6:16 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEE307CD8A18B05A01D80 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 68.70.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:30:7c:d8:a1:8b:05:a0:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6a199e1c-df47-4bbb-9601-1096bdef83dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:06:11:eb:f4:8c:9f:a3:d8:34:45:2b:36: 0c:b7:ea:c2:8d:94:df:21:66:b3:5f:86:b7:16:75: 32:8b:c1:10:64:9d:54:7a:74:1e:14:60:81:69:53: 69:80:a4:b2:60:35:1f:e1:3c:16:49:79:7d:ea:d6: a6:82:c7:7a:2a:54:0d:3a:9e:15:3f:9b:43:2a:25: ee:e3:51:bc:ee:19:eb:ca:ae:e1:66:a8:85:91:73: bb:22:be:98:ff:84:11:f7:be:f3:b5:ac:73:5e:5e: c0:1d:69:8c:48:5a:f4:28:a5:e1:2d:87:79:1b:94: 6c:90:74:9e:26:9c:4d:67:0c:c3:27:52:d1:4a:67: c4:54:f2:04:19:66:f4:a5:89:79:55:11:29:2e:af: 9c:ff:b0:a5:ba:75:98:6c:74:b7:f7:0f:f0:6a:4c: a4:0d:fc:5f:20:03:cb:da:59:30:f3:97:0c:6e:ba: b5:0b:4c:fe:1d:3a:e4:4d:ec:54:09:3a:98:67:b2: 9c:18:f5:48:56:f2:f4:db:32:98:d3:ae:13:b6:cc: 24:5a:88:e4:2a:d1:e9:e4:44:63:b7:f0:8e:6a:24: 5e:ef:52:30:9e:36:d0:94:b9:e8:26:c7:f4:37:01: 35:b6:95:48:58:cd:4d:6b:c1:ce:ab:67:55:39:d1: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:38:E1:62:90:6D:EB:13:78:52:1F:05:9A:11:BF:5B:FF:A5:D6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:af:6b:65:97:8e:b1:34:ef:45:79:9d:30:a1:64:f6:8d:48: 9b:2e:fe:29:57:c8:8a:eb:1b:a4:46:44:7e:24:4f:89:4f:ff: 45:6d:45:09:77:a4:eb:86:5b:4b:33:b5:5c:3f:94:aa:00:fd: 1e:0f:3f:30:d0:19:ce:50:4e:50:74:09:d9:61:37:3d:99:e6: 2c:e5:bc:b9:7e:c8:f8:0d:b9:f4:e4:f8:7d:10:6d:56:57:b6: d7:a8:0e:2e:5c:44:1a:2c:99:36:ca:4d:bc:19:b2:d6:51:bf: 0f:10:e6:c3:7b:19:78:80:95:2c:49:98:fc:e3:67:11:4c:d8: 6c:8c:e6:12:e9:04:81:d3:17:1d:f5:47:2d:23:c3:ae:74:bd: 34:8a:48:11:a3:76:36:11:53:b5:87:40:3d:58:64:e5:4d:9f: 64:6d:f9:04:3e:10:0e:7c:a9:c0:ad:b1:a7:c2:81:d8:ed:ea: 04:ba:be:d0:bd:de:80:6f:49:a6:7b:ca:ef:f6:c4:0f:0f:07: 3b:ee:88:13:c8:15:c1:80:8d:12:c9:bc:00:77:8d:c7:84:11: 4c:88:c1:0a:56:79:94:1e:22:3a:cb:74:aa:6e:06:a2:08:1b: f2:99:0e:57:82:3b:c7:aa:77:cc:e6:1a:aa:d1:15:e0:e6:72: 51:1d:17:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+4wfNihiwWgHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmExOTllMWMtZGY0Ny00YmJiLTk2MDEtMTA5NmJkZWY4M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl4GEev0jJ+j2DRFKzYMt+rCjZTfIWazX4a3 FnUyi8EQZJ1UenQeFGCBaVNpgKSyYDUf4TwWSXl96tamgsd6KlQNOp4VP5tDKiXu 41G87hnryq7hZqiFkXO7Ir6Y/4QR977ztaxzXl7AHWmMSFr0KKXhLYd5G5RskHSe JpxNZwzDJ1LRSmfEVPIEGWb0pYl5VREpLq+c/7ClunWYbHS39w/wakykDfxfIAPL 2lkw85cMbrq1C0z+HTrkTexUCTqYZ7KcGPVIVvL02zKY064TtswkWojkKtHp5ERj t/COaiRe71IwnjbQlLnoJsf0NwE1tpVIWM1Na8HOq2dVOdGDdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc44WKQbesTeFIfBZoRv1v/pdYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODAyZTRmM2UtNDc3ZC0z MzQzLWI0ZGYtNDA0NGE0OWNiNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeva2WXjrE070V5nTChZPaNSJsu/ilXyIrrG6RGRH4kT4lP/0VtRQl3 pOuGW0sztVw/lKoA/R4PPzDQGc5QTlB0CdlhNz2Z5izlvLl+yPgNufTk+H0QbVZX tteoDi5cRBosmTbKTbwZstZRvw8Q5sN7GXiAlSxJmPzjZxFM2GyM5hLpBIHTFx31 Ry0jw650vTSKSBGjdjYRU7WHQD1YZOVNn2Rt+QQ+EA58qcCtsafCgdjt6gS6vtC9 3oBvSaZ7yu/2xA8PBzvuiBPIFcGAjRLJvAB3jceEEUyIwQpWeZQeIjrLdKpuBqII G/KZDleCO8eqd8zmGqrRFeDmclEdF8Q= -----END CERTIFICATE-----Generated at Tue Sep 16 02:41:17 2025 by rpki-client