$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2c9b2ce-5117-38b6-9f24-415708a9854a.roa File: a2c9b2ce-5117-38b6-9f24-415708a9854a.roa (raw, json) Hash identifier: Y/BD6+mnuBdkoS0nTUGq1gix5g6OeEcYrewefoa5r4s= Subject key identifier: E1:32:07:A6:F0:B8:D4:01:31:1C:FB:27:25:CB:12:6B:AA:F9:9C:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE51237BD4D28A42A93480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2c9b2ce-5117-38b6-9f24-415708a9854a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.37.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:51:23:7b:d4:d2:8a:42:a9:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6f125e97-2210-450e-8c15-6856a0551291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:d4:da:f2:65:c9:a7:58:1a:56:6b:5c:ee: 8e:25:19:fd:ae:c6:71:20:84:ed:c1:2e:a1:01:96: fa:4f:ab:f0:5e:57:46:e7:15:63:0d:90:5c:18:6c: d0:91:5e:f2:dd:78:24:03:00:b9:b6:eb:5a:7e:5b: 7f:44:7a:1e:3a:da:2b:a9:ad:bb:2c:68:57:eb:f3: cf:30:30:ff:20:a7:bd:35:2b:32:3e:e6:8f:7b:33: 9e:7d:0a:89:07:e8:c0:0d:3e:02:73:72:68:bd:b0: 03:ef:b3:28:ee:22:4d:a3:88:a1:b4:b1:28:18:a2: ef:af:17:a9:10:3b:32:23:60:ba:07:9d:37:39:ba: f7:cf:6e:6f:ca:9b:2a:0e:ad:18:e3:d3:ee:be:5e: 93:dc:2b:20:04:61:11:d9:79:7a:59:fe:05:28:66: a2:19:2b:27:21:a9:78:4a:dc:ed:ba:3d:c0:49:36: fe:69:ab:0e:86:24:f1:39:17:be:c8:45:c7:d8:08: 49:55:f5:50:a9:c8:0a:f6:ed:29:ba:3b:a3:24:8a: 9c:6a:7b:88:3a:b6:4f:fb:42:f9:e8:4f:76:3b:b8: 87:85:e0:e8:52:b3:8a:ad:da:7e:e7:7a:5f:a2:b1: bb:fd:44:d8:aa:cd:b9:c3:b7:7d:c1:7f:4d:60:35: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:32:07:A6:F0:B8:D4:01:31:1C:FB:27:25:CB:12:6B:AA:F9:9C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2c9b2ce-5117-38b6-9f24-415708a9854a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:12:b7:e7:1b:6b:f2:e8:d8:de:dc:09:b3:50:88:1d:52:17: 01:88:19:5d:9a:4b:ed:b7:20:ce:be:cf:a1:79:71:3d:73:cb: c7:c8:54:fa:8a:89:73:ab:8e:db:e1:cb:0d:30:be:6c:b6:67: 25:4e:c2:b3:b9:5b:99:15:33:5b:dd:56:d1:2d:48:f4:ca:14: 9b:f0:e9:f8:98:84:fd:75:2c:15:89:c6:65:26:5c:3d:27:46: 08:77:42:88:07:5e:05:51:74:dd:9b:c8:71:c3:9a:3b:81:63: 15:97:d7:6f:b1:b2:a0:69:93:89:22:2d:2a:81:f3:d7:52:d9: 3e:f6:52:08:9c:20:f1:e1:79:48:4d:16:65:85:19:e0:c4:bf: a5:8b:8a:35:c4:13:79:7a:0c:4c:4e:03:5a:9b:9a:d4:0f:7f: ff:94:a5:bd:b1:f8:ef:86:e9:f6:60:02:01:46:d0:09:cb:31: ea:ae:f6:cf:75:7f:33:10:d7:a4:bd:5d:d4:3d:29:9e:a6:8e: b2:d9:39:62:90:87:26:ca:d4:f9:28:49:95:b8:6c:41:5a:d5: 14:42:62:ec:d5:bc:e6:07:00:b5:92:66:51:82:ba:c5:8e:e3: 0b:2f:b3:16:b4:8d:1c:c8:56:50:07:16:3b:02:84:e6:42:cd: 9b:e9:3d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07lEje9TSikKpNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NmYxMjVlOTctMjIxMC00NTBlLThjMTUtNjg1NmEwNTUxMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAvU2vJlyadYGlZrXO6OJRn9rsZxIITtwS6h AZb6T6vwXldG5xVjDZBcGGzQkV7y3XgkAwC5tutaflt/RHoeOtorqa27LGhX6/PP MDD/IKe9NSsyPuaPezOefQqJB+jADT4Cc3JovbAD77Mo7iJNo4ihtLEoGKLvrxep EDsyI2C6B503Obr3z25vypsqDq0Y49Puvl6T3CsgBGER2Xl6Wf4FKGaiGSsnIal4 Stztuj3ASTb+aasOhiTxORe+yEXH2AhJVfVQqcgK9u0pujujJIqcanuIOrZP+0L5 6E92O7iHheDoUrOKrdp+53pforG7/UTYqs25w7d9wX9NYDUwQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEyB6bwuNQBMRz7JyXLEmuq+ZzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJjOWIyY2UtNTExNy0z OGI2LTlmMjQtNDE1NzA4YTk4NTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACASt+cba/Lo2N7cCbNQiB1SFwGIGV2aS+23IM6+z6F5cT1zy8fIVPqK iXOrjtvhyw0wvmy2ZyVOwrO5W5kVM1vdVtEtSPTKFJvw6fiYhP11LBWJxmUmXD0n Rgh3QogHXgVRdN2byHHDmjuBYxWX12+xsqBpk4kiLSqB89dS2T72UgicIPHheUhN FmWFGeDEv6WLijXEE3l6DExOA1qbmtQPf/+Upb2x+O+G6fZgAgFG0AnLMequ9s91 fzMQ16S9XdQ9KZ6mjrLZOWKQhybK1PkoSZW4bEFa1RRCYuzVvOYHALWSZlGCusWO 4wsvsxa0jRzIVlAHFjsChOZCzZvpPXk= -----END CERTIFICATE-----Generated at Wed Aug 6 13:18:09 2025 by rpki-client