$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a749fece-3cf6-3e72-905f-6169e60efd2c.roa File: a749fece-3cf6-3e72-905f-6169e60efd2c.roa (raw, json) Hash identifier: 5H3kYmrqqbUZsSH0dQ4p82Lk6q8u5Vo6Qj8d/Ecf6Z8= Subject key identifier: 6D:C3:BB:71:E3:02:0B:D9:30:8D:3B:E7:26:7E:4B:38:3A:EF:FD:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC998525FD09ECD3828780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a749fece-3cf6-3e72-905f-6169e60efd2c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.36.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:99:85:25:fd:09:ec:d3:82:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=2fe5394e-cc05-4535-9d9d-327a631236b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:e0:bc:a5:f8:e5:07:f4:a4:f3:45:b6:88: b9:4b:56:83:cd:51:8c:96:9b:90:1b:d6:f1:20:22: 16:a9:e3:c9:d1:73:f7:7c:28:1b:2e:11:fc:75:bb: 5c:92:ac:bc:0c:4c:0b:91:71:10:27:db:95:f6:74: 79:4f:eb:ed:c1:a1:19:9c:7e:19:74:06:67:50:c5: 24:ee:02:50:53:ec:f3:a3:69:05:6c:b0:90:5b:51: b2:16:5b:4f:15:f6:cc:6a:06:b4:84:10:84:73:3c: 3b:65:69:5b:cb:25:d9:a7:27:07:5b:3f:e6:e8:8d: 81:58:4b:a0:93:67:7d:f0:42:4e:1e:d0:bf:1c:dd: 4f:4b:e7:b3:e6:b3:e9:c0:0b:f5:7e:44:93:5b:79: 46:8c:68:f0:08:6e:76:6d:0d:a7:90:e7:c8:b0:8c: 11:81:6d:57:69:83:67:86:a9:3a:e2:6e:0d:fc:1a: 7d:0d:d6:09:bc:a3:eb:4d:79:36:6c:3c:3b:0a:ce: 3f:3d:97:0a:d9:57:02:bf:6a:4e:29:8d:e2:2f:33: 57:cb:64:c4:a4:62:1e:ec:ff:75:5f:a8:65:bb:e5: 08:2c:c7:db:8d:ea:74:c4:68:74:00:4e:e2:27:1c: 11:0e:79:0c:6c:f2:ba:67:ef:b7:d8:88:30:54:83: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C3:BB:71:E3:02:0B:D9:30:8D:3B:E7:26:7E:4B:38:3A:EF:FD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a749fece-3cf6-3e72-905f-6169e60efd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a4:0b:2b:90:a8:25:cd:51:8b:3d:16:c3:76:81:f2:da:27: 28:50:4a:4f:07:99:89:75:2d:ef:96:58:1b:53:ff:9c:8a:34: cf:c1:9a:bb:dc:9f:cb:25:35:56:ac:f8:89:08:02:a3:4b:86: c6:64:c0:7b:70:8e:e3:06:5a:f9:a7:a5:a7:2f:12:73:82:8c: 19:23:d1:75:98:1f:28:1d:df:c8:8c:3e:d4:2a:b2:d9:3a:5f: 17:e6:fc:a3:2d:b9:bb:f9:b8:61:0a:e8:4c:86:c3:ab:4f:f7: 43:10:a7:06:fa:87:96:7d:4b:de:d9:5a:95:1b:ea:3f:04:56: f2:7e:f3:e2:df:44:9c:9f:61:78:fe:64:c2:84:7b:74:d1:ba: 8c:88:82:ca:91:94:5e:22:46:62:64:e8:78:5b:74:14:a6:42: 6a:35:80:92:b2:53:a8:d6:5a:2d:fe:82:c5:eb:62:38:b1:6b: 14:b1:eb:00:3f:87:72:d2:08:9e:9b:e4:8d:4e:88:69:f6:d4: 39:8a:06:9d:a1:e0:5b:94:d2:25:f1:5e:f3:d5:cf:73:ad:1e: 8c:7f:4b:43:d8:db:48:17:f8:98:97:82:8a:6c:42:3d:82:9c: a7:02:3c:74:b7:e9:9e:da:1f:76:90:cf:eb:93:f3:2c:7a:4d: e9:1c:6c:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JmFJf0J7NOCh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MmZlNTM5NGUtY2MwNS00NTM1LTlkOWQtMzI3YTYzMTIzNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vXgvKX45Qf0pPNFtoi5S1aDzVGMlpuQG9bx ICIWqePJ0XP3fCgbLhH8dbtckqy8DEwLkXEQJ9uV9nR5T+vtwaEZnH4ZdAZnUMUk 7gJQU+zzo2kFbLCQW1GyFltPFfbMaga0hBCEczw7ZWlbyyXZpycHWz/m6I2BWEug k2d98EJOHtC/HN1PS+ez5rPpwAv1fkSTW3lGjGjwCG52bQ2nkOfIsIwRgW1XaYNn hqk64m4N/Bp9DdYJvKPrTXk2bDw7Cs4/PZcK2VcCv2pOKY3iLzNXy2TEpGIe7P91 X6hlu+UILMfbjep0xGh0AE7iJxwRDnkMbPK6Z++32IgwVIPUVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3Du3HjAgvZMI075yZ+Szg67/2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc0OWZlY2UtM2NmNi0z ZTcyLTkwNWYtNjE2OWU2MGVmZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOkCyuQqCXNUYs9FsN2gfLaJyhQSk8HmYl1Le+WWBtT/5yKNM/Bmrvc n8slNVas+IkIAqNLhsZkwHtwjuMGWvmnpacvEnOCjBkj0XWYHygd38iMPtQqstk6 Xxfm/KMtubv5uGEK6EyGw6tP90MQpwb6h5Z9S97ZWpUb6j8EVvJ+8+LfRJyfYXj+ ZMKEe3TRuoyIgsqRlF4iRmJk6HhbdBSmQmo1gJKyU6jWWi3+gsXrYjixaxSx6wA/ h3LSCJ6b5I1OiGn21DmKBp2h4FuU0iXxXvPVz3OtHox/S0PY20gX+JiXgopsQj2C nKcCPHS36Z7aH3aQz+uT8yx6TekcbF4= -----END CERTIFICATE-----Generated at Wed Aug 6 05:57:38 2025 by rpki-client