$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa File: b33f9824-1d22-3c11-b98f-82918021c09b.roa (raw, json) Hash identifier: RT5RuN4JCmF+eaS/d0MOBy2hwssSQHKub0iNy+6IgNU= Subject key identifier: 67:D2:2F:91:2E:2B:07:0A:31:78:C7:97:DA:D9:1F:4B:7C:CA:78:CF Certificate issuer: /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Certificate serial: 010D0C9F4328584A9D30E4267162FA8611459200 Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 53429 IP address blocks: 199.68.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e4:26:71:62:fa:86:11:45:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=6fca2806-b5b5-4c5e-b3cf-806c1d9724e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e6:ee:ad:1e:f0:2b:71:66:9b:3e:61:a0:81: 03:10:ec:bd:40:9c:32:91:3c:d7:2b:c1:c7:ab:46: 1a:1c:35:34:df:b9:fb:66:09:1d:d5:9c:53:d0:9b: 15:1b:9f:f7:9a:18:94:8a:e0:e7:f2:6e:42:bd:e7: c7:37:11:76:1c:e2:65:c8:f3:ab:2f:f2:25:7e:c8: f6:d3:67:fc:08:f7:ca:29:b1:0b:87:7e:6b:e4:bd: a7:41:46:e9:ab:b7:b1:e5:47:48:13:01:02:4a:7b: 21:f4:ce:4a:af:5c:3a:a6:af:c4:b2:b3:fb:07:d8: bd:00:fd:dc:6c:b7:0e:ab:ec:8c:61:2d:fb:cd:a9: 01:6f:c1:9f:80:de:78:62:19:11:58:6f:5b:17:2a: ba:f5:37:a4:b3:2b:8c:59:da:de:fb:05:31:e5:ef: ed:c8:86:9e:bb:f6:49:e5:2c:61:c1:a9:80:cc:a8: 43:8f:bc:99:31:37:d9:3f:89:1b:bc:de:aa:5a:68: 9a:f1:a8:95:33:7f:9c:8b:23:d8:38:fd:11:3f:c2: 50:17:26:60:f7:7d:93:4e:11:37:05:e2:ff:83:f6: f4:86:14:ca:69:60:ea:41:b7:a0:82:f4:29:39:84: fd:2e:85:89:d3:80:ff:c3:1b:dd:67:79:92:0e:ca: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:2F:91:2E:2B:07:0A:31:78:C7:97:DA:D9:1F:4B:7C:CA:78:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl X509v3 Authority Key Identifier: keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer sbgp-ipAddrBlock: critical IPv4: 199.68.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b0:40:95:ec:40:e7:c7:ca:9d:cf:55:f0:4c:c4:24:fb:59: e7:32:6f:59:e9:68:b5:9f:89:e1:dd:df:c6:06:9d:c2:57:41: f2:d8:85:4f:e0:c3:b9:ed:22:5a:dd:73:94:25:6c:4b:de:b6: ad:4a:41:bd:d5:ea:35:5c:17:b9:f5:e5:fc:cb:0c:81:41:cf: eb:96:67:47:1e:af:58:3c:13:2a:be:c9:ce:5f:b3:b9:18:c2: eb:85:0c:7b:ac:ea:7c:75:9a:99:42:a2:35:2b:cb:16:e4:9e: bd:b7:b1:6e:6d:ed:43:6f:70:96:5b:f5:7a:30:08:e2:af:2a: 53:86:50:37:b1:1f:1d:1c:3a:99:e1:d1:9b:70:94:c2:94:61: bf:ab:e5:cd:ce:23:60:e0:81:54:00:c3:9d:25:79:37:eb:b5: 46:c5:3c:86:26:7b:5d:32:61:05:31:c2:6f:f5:cc:72:ca:16: a1:3f:bb:21:72:82:f2:07:77:87:ae:2f:0b:f0:2e:96:ce:58: c5:3b:fd:b1:a0:e2:2c:8f:82:e5:bc:6c:9d:96:cb:49:a0:be: b5:74:ea:a8:90:f5:2f:bf:64:10:5a:b4:3b:be:b4:c9:be:f6: 6f:c2:d5:71:87:8d:26:b4:55:ea:d0:cc:86:a0:0c:de:c8:26: c3:20:c9:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOQmcWL6hhFFkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2MzVkNmEtODYyMy00OTE4LTgyM2EtZGMxYWQ1NmVj MWJkMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NmZjYTI4MDYtYjViNS00YzVlLWIzY2YtODA2YzFkOTcyNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeburR7wK3Fmmz5hoIEDEOy9QJwykTzXK8HH q0YaHDU037n7Zgkd1ZxT0JsVG5/3mhiUiuDn8m5CvefHNxF2HOJlyPOrL/Ilfsj2 02f8CPfKKbELh35r5L2nQUbpq7ex5UdIEwECSnsh9M5Kr1w6pq/EsrP7B9i9AP3c bLcOq+yMYS37zakBb8GfgN54YhkRWG9bFyq69TeksyuMWdre+wUx5e/tyIaeu/ZJ 5SxhwamAzKhDj7yZMTfZP4kbvN6qWmia8aiVM3+ciyPYOP0RP8JQFyZg932TThE3 BeL/g/b0hhTKaWDqQbeggvQpOYT9LoWJ04D/wxvdZ3mSDsrqRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfSL5EuKwcKMXjHl9rZH0t8ynjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYz NWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFhZDU2ZWMxYmQvYjMzZjk4MjQtMWQyMi0z YzExLWI5OGYtODI5MTgwMjFjMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjg2MzVkNmEtODYyMy00OTE4LTgy M2EtZGMxYWQ1NmVjMWJkLzI4NjM1ZDZhLTg2MjMtNDkxOC04MjNhLWRjMWFkNTZl YzFiZC5jcmwwHwYDVR0jBBgwFoAU7Y/GRiPu+pXqPCwpLQzC0G0eZtIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYzNWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFh ZDU2ZWMxYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGwQJXsQOfHyp3PVfBMxCT7Wecyb1npaLWfieHd38YGncJXQfLYhU/g w7ntIlrdc5QlbEvetq1KQb3V6jVcF7n15fzLDIFBz+uWZ0cer1g8Eyq+yc5fs7kY wuuFDHus6nx1mplCojUryxbknr23sW5t7UNvcJZb9XowCOKvKlOGUDexHx0cOpnh 0ZtwlMKUYb+r5c3OI2DggVQAw50leTfrtUbFPIYme10yYQUxwm/1zHLKFqE/uyFy gvIHd4euLwvwLpbOWMU7/bGg4iyPguW8bJ2Wy0mgvrV06qiQ9S+/ZBBatDu+tMm+ 9m/C1XGHjSa0VerQzIagDN7IJsMgyUg= -----END CERTIFICATE-----Generated at Sun Aug 10 18:14:08 2025 by rpki-client