$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa File: 81cffdf8-b98e-3c19-815b-5041ea92309b.roa (raw, json) Hash identifier: SjJ4ZN3o8bUzy2GrhQaZ5+LTPG32CATx9FUZNwxXUJo= Subject key identifier: 87:12:61:5D:D3:00:54:82:BD:3C:EA:E0:92:9A:5C:7B:69:61:6A:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE4DCA709E64EFB2F9A800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.36.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:4d:ca:70:9e:64:ef:b2:f9:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=4416d653-e2eb-4061-b7d4-ebf93c44fa88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:ed:a0:2e:93:39:55:bb:d7:ce:51:ff:17: 2a:89:43:84:7f:c8:41:53:2f:bc:41:5e:02:c6:e8: c4:01:07:d3:5f:ed:18:b8:5f:bb:4c:eb:4f:84:25: ad:63:34:a6:cc:9f:14:15:db:d8:bd:c5:e6:e3:55: f2:76:df:89:7c:61:a2:54:a3:71:7a:9a:d4:62:af: 86:76:e1:be:fe:28:a1:3d:d1:b8:bf:8a:f2:bd:7c: db:f7:96:5a:d0:70:e1:2d:77:6b:fc:be:31:2a:db: d8:b5:3e:df:31:d7:06:c8:2c:96:5a:00:d7:d5:88: f5:e6:ea:94:a8:99:7d:be:b8:42:d9:3f:a0:bc:f8: e8:54:33:c8:ee:bc:00:4d:d8:98:71:ac:8f:2b:31: ee:7e:45:c6:a9:f9:05:fb:f4:bc:0e:f9:ec:c4:e0: b3:85:5e:28:fe:99:50:c6:a0:11:02:f2:06:05:0e: a5:fa:8f:21:40:a0:8a:25:a6:ce:fe:35:c4:64:06: bb:67:74:a4:d6:49:64:e6:7a:c8:07:f5:68:3f:03: fa:04:ea:4e:77:14:9d:91:20:a8:6c:57:ce:be:8c: 61:53:da:71:58:00:e3:3f:5e:bd:53:a2:e0:95:c9: c9:e1:55:79:4e:9a:f3:74:24:64:9a:56:cf:b7:5d: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:12:61:5D:D3:00:54:82:BD:3C:EA:E0:92:9A:5C:7B:69:61:6A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d2:01:fc:b9:33:de:d0:a4:d1:42:34:56:55:05:65:6e:f6: c4:c7:ef:77:12:ee:97:af:10:88:64:81:1e:54:75:90:c5:9f: 2f:e9:9c:57:c7:87:f5:de:93:92:73:0a:df:fe:bb:bd:1a:29: 16:6c:65:ee:35:44:b8:3b:a7:9b:19:60:13:92:de:b1:56:63: c6:b0:76:db:e2:10:6c:ec:d5:da:3d:e4:18:91:18:65:2c:cb: 29:d0:2b:04:cc:ec:66:a6:ae:60:df:8b:2c:5e:da:b7:9b:c9: 2e:85:be:fe:9a:1a:e5:99:30:52:51:0f:77:df:97:82:3f:96: ee:10:8e:3b:db:63:44:32:e4:31:3d:8e:79:6f:30:18:ec:a7: 95:19:a8:64:0a:70:b9:dc:2b:77:b6:06:d7:bc:dd:76:6a:d4: 44:7f:22:66:fd:3a:34:22:70:b8:78:23:62:b1:5f:23:39:20: d7:be:5d:6e:9e:7c:fc:8d:d3:43:9a:ee:c4:2d:cd:96:96:94: 6e:c4:7f:0c:fa:2b:58:e4:f5:58:45:e3:1b:da:d6:40:66:54: d5:67:f3:8a:c6:d4:b5:50:b3:bc:5d:4e:18:45:98:09:d8:81: 85:f2:c6:d4:f2:a8:d7:4c:78:51:25:d7:1f:ca:b2:4e:f5:cb: a9:b9:cc:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07k3KcJ5k77L5qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDQxNmQ2NTMtZTJlYi00MDYxLWI3ZDQtZWJmOTNjNDRmYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdPtoC6TOVW7185R/xcqiUOEf8hBUy+8QV4C xujEAQfTX+0YuF+7TOtPhCWtYzSmzJ8UFdvYvcXm41Xydt+JfGGiVKNxeprUYq+G duG+/iihPdG4v4ryvXzb95Za0HDhLXdr/L4xKtvYtT7fMdcGyCyWWgDX1Yj15uqU qJl9vrhC2T+gvPjoVDPI7rwATdiYcayPKzHufkXGqfkF+/S8DvnsxOCzhV4o/plQ xqARAvIGBQ6l+o8hQKCKJabO/jXEZAa7Z3Sk1klk5nrIB/VoPwP6BOpOdxSdkSCo bFfOvoxhU9pxWADjP169U6LglcnJ4VV5TprzdCRkmlbPt12XpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcSYV3TAFSCvTzq4JKaXHtpYWrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODFjZmZkZjgtYjk4ZS0z YzE5LTgxNWItNTA0MWVhOTIzMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCQsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrSAfy5M97QpNFCNFZVBWVu9sTH73cS7pevEIhkgR5UdZDFny/pnFfH h/Xek5JzCt/+u70aKRZsZe41RLg7p5sZYBOS3rFWY8awdtviEGzs1do95BiRGGUs yynQKwTM7GamrmDfiyxe2rebyS6Fvv6aGuWZMFJRD3ffl4I/lu4QjjvbY0Qy5DE9 jnlvMBjsp5UZqGQKcLncK3e2Bte83XZq1ER/Imb9OjQicLh4I2KxXyM5INe+XW6e fPyN00Oa7sQtzZaWlG7Efwz6K1jk9VhF4xva1kBmVNVn84rG1LVQs7xdThhFmAnY gYXyxtTyqNdMeFEl1x/Ksk71y6m5zAI= -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:53 2025 by rpki-client