$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa File: 2422d923-49e5-33e4-9aed-5bf5006dde0a.roa (raw, json) Hash identifier: CCSZ5cp18ERNTFjyz4XNLi7Ve5DBObW7atgFScfyPqg= Subject key identifier: 27:D6:0B:87:0D:7D:A7:8A:57:96:67:B6:84:76:C8:A4:D2:DC:F6:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE6C3CCBFC5F6A1B164700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.60.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:6c:3c:cb:fc:5f:6a:1b:16:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=5648c135-4c72-4ab1-95be-9b27908daa8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:97:8e:22:ce:4f:fd:02:47:5f:97:26:f2:5b: 31:b5:5a:b0:ac:fa:16:b1:33:c8:f5:76:1f:41:51: 6e:ce:26:8f:a0:a9:50:93:be:25:82:86:dc:d2:24: 5f:03:8d:b8:1c:8b:0f:26:7e:6c:23:59:02:82:12: c5:58:c1:03:2f:8c:70:8c:5f:2e:d9:e1:66:5a:26: 9c:9c:0f:f5:68:25:9c:c7:97:03:af:2d:73:ae:28: b0:32:9e:cb:14:b7:c9:f5:9b:0f:da:18:cb:02:5f: bb:0f:96:86:34:66:0c:f8:51:b0:9a:f8:f5:26:2c: 5e:98:49:ba:ac:2c:c9:6b:04:25:26:c5:21:30:0c: b4:cb:d9:d5:2c:c7:fb:a6:4a:0f:cf:cc:96:2c:60: f5:b8:49:c6:29:70:57:7e:5c:71:61:02:17:3e:1c: 88:66:1e:3e:3f:1f:22:61:39:2b:77:72:8c:61:77: e7:22:1a:98:6d:f0:ca:e5:eb:f9:d1:c5:d4:0f:26: d3:77:61:a1:a3:19:36:a0:b8:f4:a7:df:21:18:0f: c7:11:7f:c1:bf:e1:b4:f3:59:63:23:74:83:c9:57: 8b:11:13:5a:53:82:ef:9c:cd:d2:a9:42:f4:66:44: 06:15:ac:f2:7e:eb:2c:b2:8b:56:ab:d8:a4:40:c1: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D6:0B:87:0D:7D:A7:8A:57:96:67:B6:84:76:C8:A4:D2:DC:F6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:44:80:8d:67:bd:be:e3:69:87:c5:8f:50:5e:b1:f0:62:ff: 69:98:88:90:14:b0:12:c9:b6:4d:8e:51:96:61:ca:2d:60:06: 4f:5a:77:65:27:d3:f2:21:3c:a3:94:37:8c:59:a7:7d:95:1b: bd:44:42:65:a9:16:cc:cb:74:da:78:56:39:2d:24:ac:db:03: c0:7a:5e:bd:9d:49:de:5e:9b:77:67:06:ac:03:0e:3a:ab:a7: c9:79:3b:c6:c7:fa:f9:57:62:bb:2e:0a:9f:22:50:e1:e5:de: 6b:e3:64:27:d0:b4:b0:ed:dd:45:e3:f5:c0:2f:c2:e2:56:f6: 62:b7:10:ef:c5:34:51:e7:f9:23:e0:34:e8:9d:86:77:19:58: fe:d9:88:23:50:c6:4f:2c:1a:0d:4e:91:c5:81:d7:33:29:9d: 58:9d:8a:26:51:33:c0:8c:b7:09:3a:9e:3f:8a:97:9e:1e:48: e8:dd:2c:75:0e:65:fd:56:64:84:00:57:85:85:84:ff:20:0c: 0b:41:3b:03:e8:a1:3a:5f:bb:e6:dc:df:0d:cb:82:f2:18:ba: 2b:c3:bf:fb:fe:05:c0:67:27:4f:24:16:65:bc:33:5e:55:7a: ac:2c:1d:f4:d3:77:8a:3d:13:f2:51:17:88:92:33:4d:b6:b0: a8:ec:12:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07mw8y/xfahsWRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NTY0OGMxMzUtNGM3Mi00YWIxLTk1YmUtOWIyNzkwOGRhYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5eOIs5P/QJHX5cm8lsxtVqwrPoWsTPI9XYf QVFuziaPoKlQk74lgobc0iRfA424HIsPJn5sI1kCghLFWMEDL4xwjF8u2eFmWiac nA/1aCWcx5cDry1zriiwMp7LFLfJ9ZsP2hjLAl+7D5aGNGYM+FGwmvj1JixemEm6 rCzJawQlJsUhMAy0y9nVLMf7pkoPz8yWLGD1uEnGKXBXflxxYQIXPhyIZh4+Px8i YTkrd3KMYXfnIhqYbfDK5ev50cXUDybTd2Ghoxk2oLj0p98hGA/HEX/Bv+G081lj I3SDyVeLERNaU4LvnM3SqUL0ZkQGFazyfusssotWq9ikQMF+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfWC4cNfaeKV5ZntoR2yKTS3PbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQyMmQ5MjMtNDllNS0z M2U0LTlhZWQtNWJmNTAwNmRkZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpEgI1nvb7jaYfFj1BesfBi/2mYiJAUsBLJtk2OUZZhyi1gBk9ad2Un 0/IhPKOUN4xZp32VG71EQmWpFszLdNp4VjktJKzbA8B6Xr2dSd5em3dnBqwDDjqr p8l5O8bH+vlXYrsuCp8iUOHl3mvjZCfQtLDt3UXj9cAvwuJW9mK3EO/FNFHn+SPg NOidhncZWP7ZiCNQxk8sGg1OkcWB1zMpnVidiiZRM8CMtwk6nj+Kl54eSOjdLHUO Zf1WZIQAV4WFhP8gDAtBOwPooTpfu+bc3w3LgvIYuivDv/v+BcBnJ08kFmW8M15V eqwsHfTTd4o9E/JRF4iSM022sKjsElk= -----END CERTIFICATE-----Generated at Wed Aug 6 11:19:08 2025 by rpki-client