$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa File: 43b85172-eff1-37e5-82d9-808fec87e10c.roa (raw, json) Hash identifier: 3vayXXGWjvU+6rDpvTvv79TrQ3K2wxMXIOzSRo2/j+w= Subject key identifier: 5F:7F:E4:0F:8B:DC:F2:1E:3C:FD:95:6F:D7:AD:B0:8D:9D:D2:CC:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE5BF1DE4423DCF10CEF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.43.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:5b:f1:de:44:23:dc:f1:0c:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=48e0cf46-ec84-4950-aae2-715774e8d614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fe:0a:1e:9b:74:67:d7:86:eb:00:43:f1:68: dd:c0:ee:f5:b4:e0:1d:e2:bc:b8:08:7b:19:c6:69: 04:0e:a3:35:f6:b8:78:fa:9a:09:e5:95:c0:33:a2: 92:f6:f5:ce:6a:b1:58:06:7e:4d:0c:4c:f5:da:7e: d2:86:a1:b1:fa:1e:2c:be:33:da:71:89:79:26:35: 06:7f:1b:4a:f0:a7:c5:a0:46:d8:84:81:53:e7:e3: ee:3d:f1:37:eb:9f:c1:de:86:ce:4f:95:8a:f9:83: b1:51:e6:4d:32:ba:c7:5c:73:2a:dd:e3:fb:62:82: 9b:6c:9c:dd:2d:5b:09:19:85:73:6b:6b:75:04:ff: 15:66:e8:c4:48:f3:25:e9:f1:2b:81:e6:01:7e:a2: 49:33:6c:db:e6:45:98:69:0a:8f:62:a0:f0:8f:17: bd:63:4e:3a:d4:f4:ca:61:97:de:54:1a:5b:7b:1e: d3:75:cb:b6:3d:75:c7:1d:c7:b7:65:34:16:0b:3d: 7e:5c:04:b2:e9:53:95:2b:43:4d:4d:68:12:4c:f0: 41:6c:e2:c6:77:cd:2d:43:ef:0e:b2:e9:34:39:e7: 85:a1:29:13:75:1b:39:95:98:09:c7:3d:6f:b7:90: 02:f8:0f:b1:75:da:65:74:ee:06:c7:1d:31:b3:70: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7F:E4:0F:8B:DC:F2:1E:3C:FD:95:6F:D7:AD:B0:8D:9D:D2:CC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9e:5f:4d:5d:7c:c5:31:cd:b5:b6:c7:af:9e:21:be:b7:60: e9:7e:5e:1d:c0:d6:2e:26:a2:4e:1d:4d:bf:cc:c2:43:0b:31: aa:c1:10:da:7e:b8:32:f6:69:f7:83:eb:53:38:56:e2:be:80: d7:7b:21:1b:e5:ba:e5:d0:a6:7d:6c:67:4e:4e:2f:38:71:f1: d2:01:fa:16:c1:4d:80:76:c5:d3:06:f7:4c:e8:dd:00:03:df: 36:fd:df:22:fa:bb:7b:eb:7e:0c:e1:72:30:b9:bf:eb:23:7c: 11:1a:db:e4:e6:87:19:16:de:e8:5a:d8:00:63:1a:05:30:8b: 4c:2a:49:5f:0b:f1:71:c9:96:a1:96:55:0b:d8:c8:a9:b6:48: 41:b6:c0:70:51:cd:33:1d:c3:58:27:75:17:bf:db:d1:38:5a: bf:b0:78:41:f2:47:c2:34:62:2a:0a:23:2b:43:5d:8a:22:63: b1:cb:17:ea:0f:8b:92:1a:7d:c1:3e:0c:83:8b:6e:3e:0e:02: 45:22:5a:e8:3c:2e:83:5e:0f:84:b1:f6:2d:23:b5:b3:86:d6: d4:27:42:b6:e8:3c:42:d2:7b:bc:30:4d:33:a0:f8:1e:c6:f2: 87:a6:2a:e1:34:4c:ce:7b:6b:de:7c:e3:86:52:c6:37:a5:1d: 1f:00:f4:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07lvx3kQj3PEM74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDhlMGNmNDYtZWM4NC00OTUwLWFhZTItNzE1Nzc0ZThkNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/4KHpt0Z9eG6wBD8WjdwO71tOAd4ry4CHsZ xmkEDqM19rh4+poJ5ZXAM6KS9vXOarFYBn5NDEz12n7ShqGx+h4svjPacYl5JjUG fxtK8KfFoEbYhIFT5+PuPfE365/B3obOT5WK+YOxUeZNMrrHXHMq3eP7YoKbbJzd LVsJGYVza2t1BP8VZujESPMl6fErgeYBfqJJM2zb5kWYaQqPYqDwjxe9Y0461PTK YZfeVBpbex7Tdcu2PXXHHce3ZTQWCz1+XASy6VOVK0NNTWgSTPBBbOLGd80tQ+8O suk0OeeFoSkTdRs5lZgJxz1vt5AC+A+xddpldO4Gxx0xs3AALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9/5A+L3PIePP2Vb9etsI2d0syXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNiODUxNzItZWZmMS0z N2U1LTgyZDktODA4ZmVjODdlMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImeX01dfMUxzbW2x6+eIb63YOl+Xh3A1i4mok4dTb/MwkMLMarBENp+ uDL2afeD61M4VuK+gNd7IRvluuXQpn1sZ05OLzhx8dIB+hbBTYB2xdMG90zo3QAD 3zb93yL6u3vrfgzhcjC5v+sjfBEa2+TmhxkW3uha2ABjGgUwi0wqSV8L8XHJlqGW VQvYyKm2SEG2wHBRzTMdw1gndRe/29E4Wr+weEHyR8I0YioKIytDXYoiY7HLF+oP i5IafcE+DIOLbj4OAkUiWug8LoNeD4Sx9i0jtbOG1tQnQrboPELSe7wwTTOg+B7G 8oemKuE0TM57a95844ZSxjelHR8A9BI= -----END CERTIFICATE-----Generated at Wed Aug 6 05:49:52 2025 by rpki-client