$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db2a0ba-4d0f-3de0-9945-f43f2cdd0e4e.roa File: 8db2a0ba-4d0f-3de0-9945-f43f2cdd0e4e.roa (raw, json) Hash identifier: ZOwTzkxX2RW8KltnV1PZI2APrdc4Ash8/b9dPVDBzHE= Subject key identifier: 6D:8D:6C:38:B5:1E:F8:C7:43:FE:B5:09:EE:AD:FB:F2:8E:70:A3:D2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC99A74AF0CAE588A34900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db2a0ba-4d0f-3de0-9945-f43f2cdd0e4e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.36.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:99:a7:4a:f0:ca:e5:88:a3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a00e15e7-5bbc-4c24-a191-0d97ca8887a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:4c:2a:f7:28:2b:3c:fb:65:41:32:d1:1a: 19:f9:11:53:9a:0a:b9:4b:68:11:93:6f:08:d0:8d: ae:d8:e7:2c:54:2e:65:40:f8:f1:34:bd:6b:f0:cf: 4c:9c:04:17:2d:07:51:ba:2c:bc:5c:28:85:27:f9: 72:9e:70:20:62:ee:18:b8:a5:78:e2:43:75:1e:de: 35:b7:48:30:8e:bb:90:35:92:6c:ae:04:c7:ea:99: 97:f6:b3:a7:35:c8:d9:bd:83:7f:40:73:c3:09:19: 19:db:8a:a0:7c:3f:7c:de:42:d1:06:61:c1:0c:da: 57:7e:27:cd:36:be:69:9e:cf:f7:63:13:8a:f5:09: 90:84:c8:7b:29:07:7f:ea:84:a1:ee:ad:b7:a5:0c: 1f:95:48:78:ce:d8:f1:8f:59:91:9d:3b:4f:ce:dd: ca:d1:fc:f2:05:98:44:04:c6:f8:d4:fe:c1:43:39: 76:31:02:a3:e6:91:68:c0:13:f0:a8:22:49:d1:33: 7e:fb:3d:32:df:fd:f8:79:74:16:aa:d8:70:f7:80: 73:02:20:27:ed:9c:be:96:e1:cd:ec:bd:6a:c7:d1: 73:83:8f:86:69:7b:a0:5a:5d:18:0d:e9:ff:cf:b4: 85:80:8a:05:15:85:28:77:ed:a0:a1:81:47:99:a8: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8D:6C:38:B5:1E:F8:C7:43:FE:B5:09:EE:AD:FB:F2:8E:70:A3:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db2a0ba-4d0f-3de0-9945-f43f2cdd0e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:36:bb:bf:ca:94:03:2e:bc:a7:2b:d0:fc:c0:c7:cd:52:8b: 5b:86:02:8e:e5:5d:f5:4f:50:a1:db:7e:a9:0c:33:1c:71:b3: 03:2c:eb:e0:50:7a:f4:62:5b:8b:f5:52:e5:17:e2:bf:c2:51: fe:f7:2c:3f:07:f4:1a:a9:e1:e6:51:e7:95:70:07:94:1a:c2: f9:7b:6f:90:f2:0f:ac:94:f4:cc:b2:63:bc:d8:8b:87:22:b8: 26:fb:ee:b8:a7:38:28:2f:68:ba:ea:2a:4a:53:ec:1e:aa:32: 0d:39:fd:ee:e4:c3:28:61:a2:58:54:9c:fc:91:86:8e:08:93: d9:2d:66:e6:42:b8:6c:fe:e3:66:df:22:86:9a:af:17:18:83: 87:3d:7a:99:1c:b3:e8:58:e5:8f:01:2a:37:ce:52:59:1c:62: 82:44:72:42:93:25:32:f9:a5:5d:fc:33:02:b1:ff:b3:0c:3f: f0:67:fe:9c:3c:86:b6:ed:e6:9b:1e:5e:24:06:ae:56:8c:d3: 7e:fa:28:09:d5:19:c4:3a:09:6b:7c:85:f8:2c:36:2f:b7:47: fa:86:31:f0:65:a8:ab:19:13:da:7a:62:02:71:eb:a6:20:df: a8:16:4b:96:8c:62:fd:ea:dd:14:79:89:c8:7a:f1:9e:c1:89: d9:d3:66:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JmnSvDK5YijSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTAwZTE1ZTctNWJiYy00YzI0LWExOTEtMGQ5N2NhODg4N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkolMKvcoKzz7ZUEy0RoZ+RFTmgq5S2gRk28I 0I2u2OcsVC5lQPjxNL1r8M9MnAQXLQdRuiy8XCiFJ/lynnAgYu4YuKV44kN1Ht41 t0gwjruQNZJsrgTH6pmX9rOnNcjZvYN/QHPDCRkZ24qgfD983kLRBmHBDNpXfifN Nr5pns/3YxOK9QmQhMh7KQd/6oSh7q23pQwflUh4ztjxj1mRnTtPzt3K0fzyBZhE BMb41P7BQzl2MQKj5pFowBPwqCJJ0TN++z0y3/34eXQWqthw94BzAiAn7Zy+luHN 7L1qx9Fzg4+GaXugWl0YDen/z7SFgIoFFYUod+2goYFHmaiW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2NbDi1HvjHQ/61Ce6t+/KOcKPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRiMmEwYmEtNGQwZi0z ZGUwLTk5NDUtZjQzZjJjZGQwZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANU2u7/KlAMuvKcr0PzAx81Si1uGAo7lXfVPUKHbfqkMMxxxswMs6+BQ evRiW4v1UuUX4r/CUf73LD8H9Bqp4eZR55VwB5Qawvl7b5DyD6yU9MyyY7zYi4ci uCb77rinOCgvaLrqKkpT7B6qMg05/e7kwyhholhUnPyRho4Ik9ktZuZCuGz+42bf IoaarxcYg4c9epkcs+hY5Y8BKjfOUlkcYoJEckKTJTL5pV38MwKx/7MMP/Bn/pw8 hrbt5pseXiQGrlaM0376KAnVGcQ6CWt8hfgsNi+3R/qGMfBlqKsZE9p6YgJx66Yg 36gWS5aMYv3q3RR5ich68Z7BidnTZlE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:21 2025 by rpki-client