$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa File: 3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa (raw, json) Hash identifier: G00YZjZ3MpHWJDZvtRQ7N8Dvl73NCouHgQcVm5KFyCg= Subject key identifier: 43:20:7C:5A:AE:56:D5:30:40:F2:F5:CA:7E:A6:A6:F8:5F:07:9A:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC94712FC009899FDEEC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.34.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:94:71:2f:c0:09:89:9f:de:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=66ab1bf4-df62-4647-9352-b2f40c9060f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:b5:c2:db:32:3f:09:5f:f4:85:db:58:51: 1e:6f:8b:84:67:ae:a4:8b:82:c7:a3:5d:9b:d3:39: ff:61:8d:63:32:38:70:ad:bf:3c:fa:5c:cf:d6:ac: 85:18:0b:c7:04:08:67:d1:7b:d9:9d:9b:ae:52:07: db:13:77:14:99:80:ca:ba:f2:14:c0:dd:87:52:3b: 95:f8:e2:d9:2d:d3:c9:67:63:6f:65:ba:f2:ea:18: e0:8b:9f:ce:a7:33:43:68:c2:6a:f7:dc:1b:6e:7a: 97:5f:81:47:e2:99:f6:be:fd:37:df:ba:fa:0c:90: ed:43:9f:1a:63:aa:ce:bd:71:19:57:bd:cb:b8:73: 03:00:74:25:b7:63:46:f3:be:db:9e:15:d8:41:2e: 39:b7:c6:9b:14:08:a3:69:00:a6:5c:af:3b:65:39: eb:56:0e:71:10:b4:75:0d:89:10:7a:fa:76:79:aa: 28:6d:f4:e1:c3:89:c5:d0:92:e4:15:95:71:08:a8: 70:e4:d7:3e:dd:cb:5d:bf:02:93:f0:36:1e:9d:9e: 72:e0:65:36:c9:b6:e1:d5:41:a1:2d:8e:b9:e7:d3: 5d:4b:d7:6a:0e:e2:e5:c4:bb:5c:df:1a:81:a7:44: c1:34:23:cd:e5:a6:c5:9f:b3:46:68:0d:fc:7c:23: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:7C:5A:AE:56:D5:30:40:F2:F5:CA:7E:A6:A6:F8:5F:07:9A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982866b-c6fd-3314-b36b-54ad29a0c4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ad:c0:28:e9:c6:3f:70:81:ef:fe:96:25:7e:67:36:ba:05: bb:4b:06:92:f9:27:0b:ca:80:30:59:10:be:c5:d7:c3:11:12: 61:fe:ac:7e:a5:4d:f5:f0:0d:f7:34:76:29:73:57:0a:dd:ed: 80:62:ca:fe:04:73:80:02:84:9c:b1:bc:52:ba:00:a1:f0:60: 2e:ed:95:98:1e:cc:de:d4:f8:c0:74:41:5b:3f:49:dd:8e:74: f7:60:a7:13:c8:45:3b:81:62:9c:f3:af:54:97:fb:97:2a:44: 93:1a:6d:c7:c3:90:43:4d:91:a1:d2:22:75:c4:28:88:22:0e: d0:72:3e:f6:f0:78:fc:b8:0f:1f:df:9a:ab:3c:f9:c0:71:ae: 0d:0c:cc:4a:c6:3f:53:cb:23:41:51:43:58:21:51:54:97:5d: fd:c6:29:b1:e6:d9:19:b4:e0:68:c1:72:c8:c3:e7:9a:3b:39: d8:43:30:bf:81:69:89:03:18:91:fb:40:40:fd:09:d7:3d:5b: 0f:b7:eb:ef:ff:fd:a0:80:01:f4:8a:b7:03:27:70:c0:ae:d8: 61:3e:e3:68:bd:0d:b2:00:03:1e:70:f8:88:70:9e:91:f3:31: 6d:80:c5:d9:dc:25:96:55:bf:7b:ba:9c:07:99:24:66:25:dd: 34:11:24:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JRxL8AJiZ/e7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjZhYjFiZjQtZGY2Mi00NjQ3LTkzNTItYjJmNDBjOTA2MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweO1wtsyPwlf9IXbWFEeb4uEZ66ki4LHo12b 0zn/YY1jMjhwrb88+lzP1qyFGAvHBAhn0XvZnZuuUgfbE3cUmYDKuvIUwN2HUjuV +OLZLdPJZ2NvZbry6hjgi5/OpzNDaMJq99wbbnqXX4FH4pn2vv0337r6DJDtQ58a Y6rOvXEZV73LuHMDAHQlt2NG877bnhXYQS45t8abFAijaQCmXK87ZTnrVg5xELR1 DYkQevp2eaoobfThw4nF0JLkFZVxCKhw5Nc+3ctdvwKT8DYenZ5y4GU2ybbh1UGh LY6559NdS9dqDuLlxLtc3xqBp0TBNCPN5abFn7NGaA38fCPH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMgfFquVtUwQPL1yn6mpvhfB5puMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk4Mjg2NmItYzZmZC0z MzE0LWIzNmItNTRhZDI5YTBjNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCIRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6twCjpxj9wge/+liV+Zza6BbtLBpL5JwvKgDBZEL7F18MREmH+rH6l TfXwDfc0dilzVwrd7YBiyv4Ec4AChJyxvFK6AKHwYC7tlZgezN7U+MB0QVs/Sd2O dPdgpxPIRTuBYpzzr1SX+5cqRJMabcfDkENNkaHSInXEKIgiDtByPvbwePy4Dx/f mqs8+cBxrg0MzErGP1PLI0FRQ1ghUVSXXf3GKbHm2Rm04GjBcsjD55o7OdhDML+B aYkDGJH7QED9Cdc9Ww+36+///aCAAfSKtwMncMCu2GE+42i9DbIAAx5w+IhwnpHz MW2AxdncJZZVv3u6nAeZJGYl3TQRJLg= -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:33 2025 by rpki-client