$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65a6b105-da3b-3dba-9aeb-2cc3792e1dd7.roa File: 65a6b105-da3b-3dba-9aeb-2cc3792e1dd7.roa (raw, json) Hash identifier: CQ/n6hPBQM/fz1rL7ix9dgr0efNj0pP12M/rh61dBog= Subject key identifier: AE:8E:27:D0:11:3B:DC:D2:EE:76:47:70:A2:66:E2:4E:5E:2C:FC:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECA8279D0ED24E4B8E25C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65a6b105-da3b-3dba-9aeb-2cc3792e1dd7.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.43.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:a8:27:9d:0e:d2:4e:4b:8e:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a5639c17-b561-445d-83ca-7096c52a051a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:65:f8:61:51:0e:10:bb:98:9c:41:65:8b: d4:5a:c5:bc:62:b8:a7:b7:38:00:0e:5b:99:52:a7: 83:84:69:bb:ba:5b:c4:45:76:06:84:eb:94:d3:84: c0:49:99:ad:47:f3:4f:da:9f:47:b9:fb:3c:f4:dd: 6c:2e:d6:e2:3c:46:1c:4b:bc:39:09:03:ff:bf:97: 6d:80:1e:71:5e:47:a6:ab:86:71:ac:ba:03:9a:01: 14:20:91:c1:bd:f9:dc:33:b8:3a:b4:7d:a5:df:46: c9:5d:66:43:e7:54:a9:b6:9b:50:c5:ea:08:8d:4c: c7:bc:40:91:1c:3a:27:7b:78:ef:96:a9:2e:3e:af: 66:b9:d7:e3:ba:42:f7:a9:e8:8c:45:76:28:51:8d: 73:a8:b3:e7:63:a5:df:3a:99:e7:c9:46:1c:58:59: 17:41:9d:60:66:ad:dc:22:6e:9a:79:59:73:f0:4d: bc:43:5c:15:00:f1:0a:58:bd:f4:b6:de:05:cd:d2: 59:21:4f:6a:66:5c:f7:2f:2c:f8:d5:7f:05:70:50: 9e:bd:83:50:28:03:2f:5a:c6:1f:59:75:69:c7:a1: 8e:10:5c:4b:17:30:ff:51:a3:55:35:d8:ca:99:0d: 45:b0:17:8b:0e:98:46:3f:63:95:2a:25:64:7b:0a: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8E:27:D0:11:3B:DC:D2:EE:76:47:70:A2:66:E2:4E:5E:2C:FC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65a6b105-da3b-3dba-9aeb-2cc3792e1dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:72:04:b8:d1:61:cb:64:c5:22:ee:6a:88:d9:0e:31:6f:cd: 04:48:3f:21:95:20:aa:c6:80:24:69:08:bc:b5:3d:15:1c:7b: 85:d1:da:9f:58:de:85:c7:c4:be:31:47:6e:ca:c8:02:5b:7e: 52:db:85:04:28:f5:9d:d9:64:fa:67:c1:9c:8f:dc:3c:c5:e7: 93:51:35:1d:20:92:47:54:c9:f3:f7:58:52:cf:f7:4f:eb:0c: 05:33:52:0f:9a:21:89:ce:75:9b:4f:6b:62:e4:6c:7b:ec:6d: 60:28:72:b0:dc:c7:6c:21:78:42:1f:97:86:51:7f:3c:5d:29: 0e:71:66:47:30:e1:8a:fe:99:38:45:22:a7:3f:51:5a:ec:bc: 9e:31:f8:a1:a6:39:bd:33:82:cd:29:0a:28:45:c7:10:e2:f6: a8:90:7b:b4:a3:29:81:0c:83:35:28:44:a3:e1:d9:8e:10:5f: 67:9d:c4:32:50:1c:2d:5b:1d:bf:ba:0c:10:74:e0:42:64:e0: a4:0b:89:8a:58:47:4c:76:86:50:f4:b5:13:5a:de:fb:02:50: ec:d2:48:e5:36:ec:e1:f3:72:96:6e:6e:b7:ba:85:03:c5:63: d8:c1:fb:68:61:9e:50:5e:59:30:98:42:32:3c:84:ad:8c:7d: de:28:e5:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07KgnnQ7STkuOJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTU2MzljMTctYjU2MS00NDVkLTgzY2EtNzA5NmM1MmEwNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhntl+GFRDhC7mJxBZYvUWsW8YrintzgADluZ UqeDhGm7ulvERXYGhOuU04TASZmtR/NP2p9Hufs89N1sLtbiPEYcS7w5CQP/v5dt gB5xXkemq4ZxrLoDmgEUIJHBvfncM7g6tH2l30bJXWZD51SptptQxeoIjUzHvECR HDone3jvlqkuPq9mudfjukL3qeiMRXYoUY1zqLPnY6XfOpnnyUYcWFkXQZ1gZq3c Im6aeVlz8E28Q1wVAPEKWL30tt4FzdJZIU9qZlz3Lyz41X8FcFCevYNQKAMvWsYf WXVpx6GOEFxLFzD/UaNVNdjKmQ1FsBeLDphGP2OVKiVkewp9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6OJ9ARO9zS7nZHcKJm4k5eLPwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjVhNmIxMDUtZGEzYi0z ZGJhLTlhZWItMmNjMzc5MmUxZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVyBLjRYctkxSLuaojZDjFvzQRIPyGVIKrGgCRpCLy1PRUce4XR2p9Y 3oXHxL4xR27KyAJbflLbhQQo9Z3ZZPpnwZyP3DzF55NRNR0gkkdUyfP3WFLP90/r DAUzUg+aIYnOdZtPa2LkbHvsbWAocrDcx2wheEIfl4ZRfzxdKQ5xZkcw4Yr+mThF Iqc/UVrsvJ4x+KGmOb0zgs0pCihFxxDi9qiQe7SjKYEMgzUoRKPh2Y4QX2edxDJQ HC1bHb+6DBB04EJk4KQLiYpYR0x2hlD0tRNa3vsCUOzSSOU27OHzcpZubre6hQPF Y9jB+2hhnlBeWTCYQjI8hK2Mfd4o5QM= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:58 2025 by rpki-client