$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645da53b-af71-30be-978f-fe97beb2e421.roa File: 645da53b-af71-30be-978f-fe97beb2e421.roa (raw, json) Hash identifier: bp/0tjUpENjOuHMuLt8VnTowo+I0Gqkyp66ncerD1Kg= Subject key identifier: 8C:00:57:17:0F:D0:07:11:D0:C6:B3:47:62:58:EE:64:80:AB:A6:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC9B0E2F38277048E38980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645da53b-af71-30be-978f-fe97beb2e421.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.37.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:9b:0e:2f:38:27:70:48:e3:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=871b2558-420b-4aaf-9294-aa501d310fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:56:29:18:68:46:2e:96:25:56:0a:4d:9c: cb:53:4d:0c:02:19:b5:54:6c:8f:86:fe:cd:33:63: 92:f5:2c:15:9c:5c:02:f8:96:e0:a1:e6:94:7a:6b: 31:2c:11:ae:ef:9c:2d:1a:76:7e:5d:d7:af:1a:8e: a2:e3:26:55:dc:e5:c8:a8:a3:41:e3:60:41:ad:67: bf:4e:31:3d:f5:25:15:12:8b:fd:42:1f:44:66:82: 1d:da:c7:31:21:3e:d9:19:66:1f:49:65:b7:2b:8a: 44:7c:b1:8a:ce:4b:7b:d0:79:34:f6:8d:f9:98:84: 15:81:c2:47:6c:64:71:08:78:30:ae:81:98:01:24: 07:19:62:15:75:b3:d3:73:d9:1a:30:f9:73:c5:41: f8:1e:8a:51:27:fa:8d:81:1d:de:6e:73:9e:4a:ae: 17:e6:8f:e7:98:67:fd:6e:58:61:7b:8b:f0:a6:62: a0:f6:ae:69:2a:91:ab:f0:cc:4b:38:71:c6:fb:d4: 5d:f2:b6:b4:7a:a1:ee:93:ab:51:a8:08:cd:fe:53: 51:b8:21:5a:44:50:d7:61:ec:82:40:03:eb:7a:16: 25:18:d1:c1:13:cb:0f:a8:16:90:07:d2:f8:96:88: 3d:7b:7e:c4:7e:0e:35:b2:0d:47:74:46:a3:de:c2: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:00:57:17:0F:D0:07:11:D0:C6:B3:47:62:58:EE:64:80:AB:A6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645da53b-af71-30be-978f-fe97beb2e421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ab:ad:31:c3:83:a9:3d:b9:58:fb:bb:aa:9a:db:3e:65:13: 8b:d5:9a:09:b1:d1:27:53:09:ce:6e:6f:e4:43:8c:72:d1:49: 09:8b:e6:de:e2:f1:fd:af:03:6e:7f:6e:63:d3:b9:03:62:06: ce:67:d5:db:76:d1:ec:07:0d:bb:75:62:cd:e8:05:ee:15:8a: 75:99:d0:be:c5:9c:f2:56:f1:b2:cb:69:2a:5f:eb:28:74:b4: f7:ba:5b:80:ea:f2:52:a4:f1:0e:2f:94:f3:87:a6:ef:a5:2d: 94:2c:12:f9:a5:ab:9c:f4:b9:16:e9:79:f8:89:8a:99:53:f1: 30:d1:b2:ae:7d:dd:d2:36:1f:86:43:73:68:c4:a5:1f:b4:7a: bd:8f:b5:c3:2f:cf:bb:b6:d7:62:12:84:2c:df:a7:3a:1e:74: f2:ab:e9:54:ef:2d:b1:fd:77:90:bc:95:97:00:20:88:de:8d: e9:37:d9:31:e7:35:d6:76:7b:f4:3c:8e:33:13:49:28:e9:e2: d5:8e:f0:a0:5a:79:50:be:45:31:40:c1:25:36:7b:c0:2d:4c: 02:77:b6:e1:69:8b:38:f0:0f:7c:f9:c7:36:87:35:e5:13:80: 14:6d:4e:59:89:7b:07:ce:3e:1d:c0:fd:d0:fb:e8:da:68:5b: 1a:e5:59:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JsOLzgncEjjiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ODcxYjI1NTgtNDIwYi00YWFmLTkyOTQtYWE1MDFkMzEwZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8BWKRhoRi6WJVYKTZzLU00MAhm1VGyPhv7N M2OS9SwVnFwC+JbgoeaUemsxLBGu75wtGnZ+XdevGo6i4yZV3OXIqKNB42BBrWe/ TjE99SUVEov9Qh9EZoId2scxIT7ZGWYfSWW3K4pEfLGKzkt70Hk09o35mIQVgcJH bGRxCHgwroGYASQHGWIVdbPTc9kaMPlzxUH4HopRJ/qNgR3ebnOeSq4X5o/nmGf9 blhhe4vwpmKg9q5pKpGr8MxLOHHG+9Rd8ra0eqHuk6tRqAjN/lNRuCFaRFDXYeyC QAPrehYlGNHBE8sPqBaQB9L4log9e37Efg41sg1HdEaj3sKWpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwAVxcP0AcR0MazR2JY7mSAq6Y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ1ZGE1M2ItYWY3MS0z MGJlLTk3OGYtZmU5N2JlYjJlNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2rrTHDg6k9uVj7u6qa2z5lE4vVmgmx0SdTCc5ub+RDjHLRSQmL5t7i 8f2vA25/bmPTuQNiBs5n1dt20ewHDbt1Ys3oBe4VinWZ0L7FnPJW8bLLaSpf6yh0 tPe6W4Dq8lKk8Q4vlPOHpu+lLZQsEvmlq5z0uRbpefiJiplT8TDRsq593dI2H4ZD c2jEpR+0er2PtcMvz7u212IShCzfpzoedPKr6VTvLbH9d5C8lZcAIIjejek32THn NdZ2e/Q8jjMTSSjp4tWO8KBaeVC+RTFAwSU2e8AtTAJ3tuFpizjwD3z5xzaHNeUT gBRtTlmJewfOPh3A/dD76NpoWxrlWXU= -----END CERTIFICATE-----Generated at Wed Aug 6 07:48:33 2025 by rpki-client