$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576bda66-6d5a-3877-b3b1-4e0164cd3cb5.roa File: 576bda66-6d5a-3877-b3b1-4e0164cd3cb5.roa (raw, json) Hash identifier: ntL/D/DRlYEbsqH7kIKjOdfeX2XIZPb9jreeDYzZM6w= Subject key identifier: 55:75:91:68:45:41:90:7D:8A:56:08:3F:41:F9:27:2C:E6:B0:23:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECAABE9FF47282CC43DC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576bda66-6d5a-3877-b3b1-4e0164cd3cb5.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.48.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:aa:be:9f:f4:72:82:cc:43:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=899bb079-c02e-4d8a-9329-b0f9dfa8149b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7f:96:78:c4:56:e1:0f:b4:25:74:8a:39:55: ce:bf:28:93:dc:b8:ce:e0:82:68:cb:d8:37:d8:cc: 35:f0:03:46:95:4e:c9:62:26:a1:9d:c1:d4:ec:46: 4e:14:cb:10:30:6c:37:bb:5d:a1:0f:2b:bb:b6:6b: 5d:d4:aa:a8:2f:92:61:45:cd:de:21:03:16:5c:e1: aa:15:26:d0:2f:60:44:ca:a7:89:d7:cf:98:db:76: 91:30:a2:8b:d0:aa:05:cf:86:4b:fc:66:dc:56:c5: a6:ca:8a:2e:4d:5f:73:97:23:c3:ac:9b:a8:a9:c2: d5:5a:fb:37:0f:fa:d3:42:05:1b:c4:f9:44:04:2d: 0f:b9:fa:68:90:51:5a:6d:d0:1b:71:24:2b:98:5a: e5:80:2e:68:a2:05:c0:70:de:3b:00:28:61:12:e1: 30:2c:0f:8d:6d:53:dd:cb:63:68:fb:94:6c:18:ab: 5a:de:00:e7:ab:3b:1a:6a:e0:a2:a3:fb:6c:84:5a: 65:4f:00:70:15:b2:f1:f1:fa:4a:38:b2:e1:d2:83: f8:ea:ee:5e:d7:27:0a:bf:74:a4:82:fa:dc:c7:0a: f4:d6:1f:bc:fa:a6:17:ce:af:9c:9f:1e:3b:0a:d9: a3:fe:22:b3:ea:10:81:c1:9d:f3:15:42:83:b6:30: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:75:91:68:45:41:90:7D:8A:56:08:3F:41:F9:27:2C:E6:B0:23:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576bda66-6d5a-3877-b3b1-4e0164cd3cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8c:34:0e:80:f8:64:17:9e:18:11:13:26:22:80:f2:66:2a: 5b:88:40:72:9e:62:3e:5d:28:a2:2c:3c:0d:46:c6:7f:a3:af: 84:c7:2f:5d:97:3d:91:12:c5:90:22:40:95:e0:98:cf:30:0e: 26:c2:f9:fd:a0:3c:d7:4c:78:04:1f:73:64:7c:0a:4f:86:e0: de:05:08:61:d7:c6:e0:fb:e2:dd:52:42:9a:c0:06:09:f2:ba: ba:dc:3e:64:a6:02:70:c3:5a:6e:3a:69:0b:11:94:6b:26:4f: af:54:61:5a:4a:f7:d6:3f:c6:2a:6b:3b:9b:de:a7:24:73:30: c8:d6:a0:aa:5f:87:4e:fa:bb:52:f4:06:1c:b1:6f:b7:5a:f4: bd:3a:09:c4:4f:ae:a9:8a:2e:e7:f1:6a:5e:58:03:7e:3e:78: 2e:30:87:a1:6c:e1:d9:e2:41:34:d2:1f:43:89:4b:15:8f:6b: f4:28:2e:da:39:44:98:37:1e:b8:ca:e6:51:7c:4a:b4:66:55: d6:69:5a:35:a6:d1:9e:ec:ee:8b:d5:b9:da:8a:8f:fd:df:6d: 94:f6:b4:b3:ff:3b:d0:4f:d2:c8:21:82:18:f0:0e:13:0f:30: ba:79:7d:b3:f1:56:b7:d5:1a:78:fd:fa:57:9c:3c:e4:ad:af: 9a:c9:64:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07Kq+n/RygsxD3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ODk5YmIwNzktYzAyZS00ZDhhLTkzMjktYjBmOWRmYTgxNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3+WeMRW4Q+0JXSKOVXOvyiT3LjO4IJoy9g3 2Mw18ANGlU7JYiahncHU7EZOFMsQMGw3u12hDyu7tmtd1KqoL5JhRc3eIQMWXOGq FSbQL2BEyqeJ18+Y23aRMKKL0KoFz4ZL/GbcVsWmyoouTV9zlyPDrJuoqcLVWvs3 D/rTQgUbxPlEBC0PufpokFFabdAbcSQrmFrlgC5oogXAcN47AChhEuEwLA+NbVPd y2No+5RsGKta3gDnqzsaauCio/tshFplTwBwFbLx8fpKOLLh0oP46u5e1ycKv3Sk gvrcxwr01h+8+qYXzq+cnx47Ctmj/iKz6hCBwZ3zFUKDtjCxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV1kWhFQZB9ilYIP0H5JyzmsCN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTc2YmRhNjYtNmQ1YS0z ODc3LWIzYjEtNGUwMTY0Y2QzY2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaMNA6A+GQXnhgREyYigPJmKluIQHKeYj5dKKIsPA1Gxn+jr4THL12X PZESxZAiQJXgmM8wDibC+f2gPNdMeAQfc2R8Ck+G4N4FCGHXxuD74t1SQprABgny urrcPmSmAnDDWm46aQsRlGsmT69UYVpK99Y/xiprO5vepyRzMMjWoKpfh076u1L0 Bhyxb7da9L06CcRPrqmKLufxal5YA34+eC4wh6Fs4dniQTTSH0OJSxWPa/QoLto5 RJg3HrjK5lF8SrRmVdZpWjWm0Z7s7ovVudqKj/3fbZT2tLP/O9BP0sghghjwDhMP MLp5fbPxVrfVGnj9+lecPOStr5rJZIQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:41:11 2025 by rpki-client