$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa File: 8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa (raw, json) Hash identifier: T377LPW66VeFrBp4MB81LKSbIUAxZlUF0P7UsjUhZO8= Subject key identifier: 5A:65:B9:EF:88:7F:33:4B:87:E7:28:DB:01:4E:4B:56:AD:E8:BB:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE4C8C3EBEEDD7E240B500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.36.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:4c:8c:3e:be:ed:d7:e2:40:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=b8c802c9-dca4-40b2-8872-ff3746b791c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:d5:e2:ab:b4:a8:91:2b:fa:0d:93:6f:83: 9e:b3:82:88:89:4e:45:7d:bb:a6:af:c3:d7:7a:84: c5:3e:f5:bf:37:84:21:2e:36:82:0c:71:89:ee:a9: d0:f2:03:93:11:f3:9e:0a:0c:c8:bf:e2:5a:17:8b: b5:b4:48:e5:76:f3:09:f9:3c:55:04:6c:e8:81:1b: ce:83:28:15:82:78:40:04:1b:a0:30:10:23:6d:88: 67:86:a4:e3:d1:01:a7:07:d3:6f:37:68:28:f7:72: e9:17:d6:27:ae:94:cd:f9:46:53:bb:73:b4:ec:a1: a5:27:7b:cf:4f:99:6e:08:02:98:e2:97:31:ab:3d: 63:46:73:e6:a3:0f:a0:03:bd:2a:ed:e9:6d:bd:91: 04:14:2c:4c:fd:a7:f5:43:9c:d6:88:e1:ad:0c:fa: b5:1e:9a:d3:da:6d:b8:4b:cf:4e:ba:46:68:b6:0f: cf:56:28:6f:eb:47:77:49:c8:66:69:f6:4e:ab:10: 27:57:46:42:e5:b0:29:5a:f1:77:32:fb:ee:96:ab: d7:ea:85:34:2d:fe:9b:37:fb:77:87:03:0d:a7:46: 4e:76:ff:f4:50:fd:04:e7:7f:26:8a:34:04:89:46: 11:6d:12:0c:47:a4:33:a9:25:ff:16:29:2f:44:01: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:65:B9:EF:88:7F:33:4B:87:E7:28:DB:01:4E:4B:56:AD:E8:BB:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:48:e5:2c:e6:b0:d8:5b:cb:87:f5:52:aa:54:c9:b7:47:63: ad:89:a2:04:99:ff:0e:f1:1b:b0:70:74:2b:a2:4b:5e:4c:e9: d7:96:fa:22:19:2c:37:55:74:a2:ca:5b:6c:ec:80:43:84:c6: f3:c7:46:cb:76:99:f2:cf:84:a7:96:da:40:49:cb:ae:ec:16: 13:44:f3:52:fe:b4:78:6b:b0:2a:9e:fb:71:9e:23:4f:27:f5: b2:57:3f:5c:07:97:22:03:9d:36:7b:57:cc:d3:12:b4:d1:7c: ac:60:ce:71:3c:6e:b1:81:8e:a7:e2:39:28:44:49:8d:f7:da: 73:42:58:61:fd:d2:dc:0d:c1:2c:3f:30:9b:c2:a9:f0:ad:c5: 75:c9:4a:de:ae:93:0a:5e:c7:57:0e:43:27:df:51:55:ae:95: 33:c8:3e:07:8d:fd:f0:54:ed:d0:e9:62:a5:39:4e:62:ee:2e: 6c:3f:18:ee:6a:df:a4:fb:04:cf:3d:de:17:c1:53:71:fe:87: 53:16:ad:20:f6:be:a3:82:db:03:36:da:71:9a:5c:29:2d:67: 83:a5:ba:13:50:ad:47:70:ca:45:27:9e:e7:72:63:bf:8b:fc: 15:42:87:46:ed:02:32:a3:97:ec:20:bc:4a:39:17:6f:e8:f4: cd:fc:39:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07kyMPr7t1+JAtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjhjODAyYzktZGNhNC00MGIyLTg4NzItZmYzNzQ2Yjc5MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCHV4qu0qJEr+g2Tb4Oes4KIiU5Ffbumr8PX eoTFPvW/N4QhLjaCDHGJ7qnQ8gOTEfOeCgzIv+JaF4u1tEjldvMJ+TxVBGzogRvO gygVgnhABBugMBAjbYhnhqTj0QGnB9NvN2go93LpF9YnrpTN+UZTu3O07KGlJ3vP T5luCAKY4pcxqz1jRnPmow+gA70q7eltvZEEFCxM/af1Q5zWiOGtDPq1HprT2m24 S89OukZotg/PVihv60d3SchmafZOqxAnV0ZC5bApWvF3MvvulqvX6oU0Lf6bN/t3 hwMNp0ZOdv/0UP0E538mijQEiUYRbRIMR6QzqSX/FikvRAHz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFplue+IfzNLh+co2wFOS1at6LsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRkOTA1ZWMtMTBhNS0z MzBiLWFhOTktN2FlOWVkMGNjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1I5SzmsNhby4f1UqpUybdHY62JogSZ/w7xG7BwdCuiS15M6deW+iIZ LDdVdKLKW2zsgEOExvPHRst2mfLPhKeW2kBJy67sFhNE81L+tHhrsCqe+3GeI08n 9bJXP1wHlyIDnTZ7V8zTErTRfKxgznE8brGBjqfiOShESY332nNCWGH90twNwSw/ MJvCqfCtxXXJSt6ukwpex1cOQyffUVWulTPIPgeN/fBU7dDpYqU5TmLuLmw/GO5q 36T7BM893hfBU3H+h1MWrSD2vqOC2wM22nGaXCktZ4OluhNQrUdwykUnnudyY7+L /BVCh0btAjKjl+wgvEo5F2/o9M38ORo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:58 2025 by rpki-client