$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa File: 5d1f7826-3d31-3968-88e1-911730883791.roa (raw, json) Hash identifier: FrTMCjP8VJmYk9uanXl0gEZwXTPIpFJBsHOGr7iWiB0= Subject key identifier: 66:90:8E:21:47:F3:80:DF:8A:7D:B2:BD:0C:BA:6A:57:01:F8:FF:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECA50C5CFE25C6C789E880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.42.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:a5:0c:5c:fe:25:c6:c7:89:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9a0c74de-a186-42cc-90e7-f270681698d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:6e:b2:36:33:44:e2:03:dd:4a:05:3c:44: 4a:23:6e:1a:ca:74:2c:4a:21:5a:f6:7b:0f:6b:ce: de:79:00:3e:1e:2f:fb:13:8d:c1:d6:56:cb:fc:9d: c3:73:f1:1a:ac:f2:b5:80:7e:cf:34:d6:10:f3:df: a1:ac:ee:7f:6b:db:8a:d5:ea:ba:57:f2:43:1f:7b: 0d:05:3f:6c:2a:26:de:44:98:34:4f:0a:53:9f:0a: 2b:8c:c5:1b:45:82:0e:e4:8a:22:11:68:ab:d4:24: f9:e8:9f:f8:78:72:a9:1e:17:92:61:dd:8a:f5:96: b6:4a:51:68:c3:d0:4c:4a:17:d5:97:e8:cb:83:cf: 4b:49:46:84:09:94:49:de:07:11:5d:a9:c5:e8:1b: a8:a7:4d:9f:fa:30:f1:65:ce:d5:3b:80:bd:3b:e3: e4:4a:3b:33:58:ec:f7:c9:64:a3:c3:3e:dc:06:ca: 50:e4:de:6a:7e:88:4d:83:08:9f:54:6c:b9:5b:27: 34:6e:39:62:33:2d:4e:b1:ba:b2:8a:1f:57:7c:96: 3f:4f:9f:5f:16:25:e0:ee:0e:93:e2:f0:87:55:88: 46:2d:c1:a9:ea:e0:1c:69:2b:5e:50:04:94:d3:41: a4:e7:3b:b5:06:5a:91:d1:33:ef:0e:bd:5a:5d:c7: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:90:8E:21:47:F3:80:DF:8A:7D:B2:BD:0C:BA:6A:57:01:F8:FF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c8:bd:0c:d1:81:0a:a5:31:97:4b:21:a5:71:dd:53:dd:89: 0e:89:b0:6a:2b:37:81:ec:b5:15:51:12:38:7c:ad:8d:a6:bd: b3:01:d8:97:c7:c8:95:06:bd:8e:6e:4d:76:0f:31:b9:7c:2f: 41:fe:62:06:fd:27:78:a0:1d:7f:de:03:2a:c0:6b:89:aa:e5: 3b:56:02:b1:46:20:9a:e0:f7:6c:3d:d2:c7:5b:ed:64:e4:71: 79:ec:c3:be:dc:c3:3e:3f:35:ac:25:b5:4f:6c:9a:7e:19:83: f8:57:ec:aa:6c:f3:13:a4:59:1d:a4:4f:4d:8f:ef:9f:be:7d: 26:c8:b5:0c:75:ff:ab:c2:3f:0c:24:14:c7:08:70:e0:bb:97: 76:97:e9:d8:cb:57:64:02:b3:ca:8b:7c:3c:75:82:b5:d6:2a: a1:70:50:58:7d:27:43:76:83:5b:0b:dd:39:26:a6:35:ac:26: c4:3e:f9:0f:1f:48:e6:7e:b8:10:18:96:bb:78:74:45:7c:87: 91:b9:2a:cf:90:92:28:45:05:3a:f0:4d:8c:51:69:0f:60:5f: 80:ac:5f:2c:b2:15:72:dd:38:b3:64:e5:7b:d5:2d:63:6c:cc: 42:5e:f3:f4:64:a8:1f:1b:34:07:e3:3d:eb:34:3b:50:5e:61: 41:bb:ec:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07KUMXP4lxseJ6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWEwYzc0ZGUtYTE4Ni00MmNjLTkwZTctZjI3MDY4MTY5OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBFusjYzROID3UoFPERKI24aynQsSiFa9nsP a87eeQA+Hi/7E43B1lbL/J3Dc/EarPK1gH7PNNYQ89+hrO5/a9uK1eq6V/JDH3sN BT9sKibeRJg0TwpTnworjMUbRYIO5IoiEWir1CT56J/4eHKpHheSYd2K9Za2SlFo w9BMShfVl+jLg89LSUaECZRJ3gcRXanF6Buop02f+jDxZc7VO4C9O+PkSjszWOz3 yWSjwz7cBspQ5N5qfohNgwifVGy5Wyc0bjliMy1Osbqyih9XfJY/T59fFiXg7g6T 4vCHVYhGLcGp6uAcaSteUASU00Gk5zu1BlqR0TPvDr1aXccy0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaQjiFH84Dfin2yvQy6alcB+P9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQxZjc4MjYtM2QzMS0z OTY4LTg4ZTEtOTExNzMwODgzNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7IvQzRgQqlMZdLIaVx3VPdiQ6JsGorN4HstRVREjh8rY2mvbMB2JfH yJUGvY5uTXYPMbl8L0H+Ygb9J3igHX/eAyrAa4mq5TtWArFGIJrg92w90sdb7WTk cXnsw77cwz4/NawltU9smn4Zg/hX7Kps8xOkWR2kT02P75++fSbItQx1/6vCPwwk FMcIcOC7l3aX6djLV2QCs8qLfDx1grXWKqFwUFh9J0N2g1sL3TkmpjWsJsQ++Q8f SOZ+uBAYlrt4dEV8h5G5Ks+QkihFBTrwTYxRaQ9gX4CsXyyyFXLdOLNk5XvVLWNs zEJe8/RkqB8bNAfjPes0O1BeYUG77PU= -----END CERTIFICATE-----Generated at Fri Aug 8 20:42:13 2025 by rpki-client