$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa File: a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa (raw, json) Hash identifier: n+pFFuNz9j8AjdkGU+cHrB4Xpfphq4NG6En3ZSMHB8M= Subject key identifier: A6:61:02:66:10:BC:BC:F2:A9:24:AF:41:78:A2:A0:83:48:18:87:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC954BA3BAAB04D3533FD0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.34.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:95:4b:a3:ba:ab:04:d3:53:3f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=446d1a29-9830-4655-bf39-6c9c8a3e8cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:07:96:a7:ed:f8:c6:95:52:b8:84:b9:64: 88:6b:f9:48:9a:73:a6:7a:b9:4a:8d:61:c5:ac:f7: 4a:dd:49:c1:48:ea:e8:67:3a:3b:9e:aa:4d:9b:e3: fb:2e:b1:7c:9e:35:ed:73:d7:4a:31:7a:e3:df:a0: 1f:d3:23:2d:55:37:09:78:09:e8:3b:52:97:23:04: 12:46:b3:f4:d7:63:56:f7:18:91:cb:ef:2b:07:1d: 2f:86:53:d2:36:f8:86:fa:11:fa:34:5b:e5:e1:6c: 67:c5:08:38:59:7d:df:9a:08:ad:1d:b7:89:d1:22: 89:ea:d2:70:a8:ba:b2:59:54:d2:23:d1:15:f6:01: ee:ee:f6:f2:ec:c2:19:e8:41:c1:d5:ae:f1:52:90: f3:2b:a1:9a:38:ad:36:fc:06:5d:83:b8:16:87:c6: d2:4f:ad:5d:14:bd:cc:b8:cd:18:e5:00:71:3c:1e: e1:df:a9:35:66:ea:bb:a6:56:6a:ca:69:fe:15:ed: 09:c3:da:65:9f:d3:f1:b5:f9:34:4f:8f:5a:0d:4b: f0:30:ca:51:fa:e2:81:35:52:2a:b5:af:61:f9:4c: 5b:af:4f:69:3a:b4:3f:f9:09:c6:9a:1f:d0:dd:24: 6a:ec:d2:6f:ef:b9:07:b0:76:42:52:15:25:8f:f1: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:61:02:66:10:BC:BC:F2:A9:24:AF:41:78:A2:A0:83:48:18:87:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f3:55:ac:d2:97:20:ac:1b:2c:bd:70:cd:f1:79:36:d7:f0: 2e:36:18:a0:ee:7b:8d:0a:ac:53:91:48:99:f2:5c:d9:fe:4f: fe:ba:c1:07:c0:a2:d7:97:d6:ad:66:ab:0d:4a:1a:36:19:39: df:08:ae:2c:5b:8f:a7:b8:82:81:c4:90:7c:9c:48:ea:ac:4e: 52:b3:83:a1:fd:9d:cf:24:8b:40:6e:99:f5:4c:df:16:c5:74: 27:fe:f0:ae:b4:84:4e:bf:68:d1:21:ad:22:d7:b2:84:9c:b7: f3:9d:de:5c:d7:00:75:16:1f:31:3c:bb:e2:a3:4e:81:1b:6a: f6:51:f5:e4:12:06:c5:37:85:12:42:50:4a:37:87:22:66:9f: 1c:c3:24:5c:00:d6:74:37:ae:39:ba:42:ef:a6:46:59:84:70: 21:e6:8f:d6:42:e2:9c:63:ed:57:3c:7d:73:9b:8f:45:86:74: d9:40:6a:c0:d1:56:a1:39:42:b9:5b:d7:b4:80:33:58:64:21: b4:05:7b:f7:6c:e5:91:71:11:43:68:d7:a6:f2:aa:1c:90:7d: 3a:94:37:79:ea:d9:a9:76:d9:79:1d:c6:f0:37:32:69:99:96: 80:db:54:1f:1a:fc:66:4c:e8:a4:9d:b2:42:a2:ce:76:9a:01: 0d:81:ae:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JVLo7qrBNNTP9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDQ2ZDFhMjktOTgzMC00NjU1LWJmMzktNmM5YzhhM2U4Y2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWYHlqft+MaVUriEuWSIa/lImnOmerlKjWHF rPdK3UnBSOroZzo7nqpNm+P7LrF8njXtc9dKMXrj36Af0yMtVTcJeAnoO1KXIwQS RrP012NW9xiRy+8rBx0vhlPSNviG+hH6NFvl4WxnxQg4WX3fmgitHbeJ0SKJ6tJw qLqyWVTSI9EV9gHu7vby7MIZ6EHB1a7xUpDzK6GaOK02/AZdg7gWh8bST61dFL3M uM0Y5QBxPB7h36k1Zuq7plZqymn+Fe0Jw9pln9Pxtfk0T49aDUvwMMpR+uKBNVIq ta9h+Uxbr09pOrQ/+QnGmh/Q3SRq7NJv77kHsHZCUhUlj/G6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZhAmYQvLzyqSSvQXiioINIGIcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTUzNTQzYmUtYzhiYi0z YjZmLWJiM2YtMDk5NmI1OWQ2ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHzVazSlyCsGyy9cM3xeTbX8C42GKDue40KrFORSJnyXNn+T/66wQfA oteX1q1mqw1KGjYZOd8Irixbj6e4goHEkHycSOqsTlKzg6H9nc8ki0BumfVM3xbF dCf+8K60hE6/aNEhrSLXsoSct/Od3lzXAHUWHzE8u+KjToEbavZR9eQSBsU3hRJC UEo3hyJmnxzDJFwA1nQ3rjm6Qu+mRlmEcCHmj9ZC4pxj7Vc8fXObj0WGdNlAasDR VqE5Qrlb17SAM1hkIbQFe/ds5ZFxEUNo16byqhyQfTqUN3nq2al22XkdxvA3MmmZ loDbVB8a/GZM6KSdskKiznaaAQ2Brnk= -----END CERTIFICATE-----Generated at Wed Aug 6 05:53:37 2025 by rpki-client