$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b73f87b1-8621-3a6a-8340-b3c2eac8529a.roa File: b73f87b1-8621-3a6a-8340-b3c2eac8529a.roa (raw, json) Hash identifier: 5OHuT/S9CKQ0KQOgTTXBHzh0ucH62VTJCuSPjlstG3I= Subject key identifier: 4E:FE:B3:75:C5:50:8F:1C:36:25:1A:0C:78:84:68:A6:F1:60:C8:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECAC7984C08E3B76AAD800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b73f87b1-8621-3a6a-8340-b3c2eac8529a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.49.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:ac:79:84:c0:8e:3b:76:aa:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=8fc93d32-a6c0-4c74-bccf-6e74be4435ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:4f:cd:4d:34:37:e3:e0:34:bb:9a:cc:74: 94:4f:f8:02:69:ce:1e:43:9f:5a:c3:5d:e8:2f:2a: 7d:ba:69:35:3c:80:f7:37:cb:74:cc:c8:d4:2c:7c: e4:19:8b:af:b1:16:8b:af:21:8c:bb:47:e3:bb:c8: bc:1b:cf:b0:8f:8a:2c:15:d8:d5:6d:79:69:ee:d3: 23:f2:4d:1d:1e:32:30:ae:9d:1d:32:99:67:24:cd: b7:d6:d4:fd:fd:23:b8:96:80:a4:48:5f:c4:8d:d5: 18:af:3c:18:6d:57:6c:5c:32:59:5f:36:dc:fa:b8: b4:67:e0:06:61:56:50:c3:bf:e6:01:fd:e0:63:70: 93:26:81:bc:e4:f0:d8:7b:30:57:09:d2:68:c9:2a: a6:69:27:d4:aa:39:fd:61:83:ad:69:fc:70:45:4d: 90:6a:6b:a5:02:81:60:c8:6d:3f:7e:9e:43:38:7f: 0b:cb:98:12:1c:80:9b:4d:cd:83:6f:b4:8f:37:76: c1:c5:e9:5e:77:38:a6:7d:40:4d:4e:4c:60:d0:46: 8a:b1:3b:c0:75:d0:ba:3a:44:5c:3a:b2:82:40:4d: 58:81:4a:7d:61:b5:5b:4b:0a:5f:c1:bf:23:b6:f6: dd:27:7c:8a:15:ae:99:78:1c:a6:86:37:30:42:f3: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FE:B3:75:C5:50:8F:1C:36:25:1A:0C:78:84:68:A6:F1:60:C8:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b73f87b1-8621-3a6a-8340-b3c2eac8529a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:40:19:38:16:ab:bc:52:b8:6a:16:1e:50:dc:53:12:1e:c0: 30:a1:4d:da:ce:77:69:32:1f:9a:b6:ae:c1:10:7a:94:d2:ea: df:a5:73:e6:d7:41:70:f7:12:2e:f0:6a:ee:d3:63:3c:da:5f: be:74:9a:34:3e:bf:8a:51:4e:75:8e:81:29:60:d5:6d:ac:be: 56:90:62:8d:dd:f2:1f:66:7b:6b:ea:eb:7a:f2:18:63:22:46: 72:77:5e:56:c6:de:29:a6:64:7f:55:e4:bc:f2:33:cb:eb:60: c7:5f:21:54:10:6a:b7:a1:96:fd:e0:3b:53:ea:6d:39:6c:71: 06:2e:81:dc:08:70:48:a9:99:f8:fc:95:62:0f:95:97:8f:47: 31:d8:1f:c5:40:4b:84:ba:17:f8:3a:47:6a:72:8c:b0:7f:9b: 24:2c:10:28:83:a9:3e:d2:66:40:6f:be:9c:69:13:de:eb:98: 0b:5c:22:ed:95:e7:5c:86:9e:aa:47:00:4f:73:60:42:96:06: 4d:55:71:f3:ed:55:a3:20:a8:27:72:dd:e8:76:2e:56:71:d0: f8:5e:cb:bd:74:95:4a:83:68:6b:75:e3:50:01:df:a6:61:2c: 93:4c:bb:6e:bc:94:47:f5:bf:54:51:e8:1c:6d:4b:ef:8c:49: e8:cf:bf:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07Kx5hMCOO3aq2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OGZjOTNkMzItYTZjMC00Yzc0LWJjY2YtNmU3NGJlNDQzNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRFPzU00N+PgNLuazHSUT/gCac4eQ59aw13o Lyp9umk1PID3N8t0zMjULHzkGYuvsRaLryGMu0fju8i8G8+wj4osFdjVbXlp7tMj 8k0dHjIwrp0dMplnJM231tT9/SO4loCkSF/EjdUYrzwYbVdsXDJZXzbc+ri0Z+AG YVZQw7/mAf3gY3CTJoG85PDYezBXCdJoySqmaSfUqjn9YYOtafxwRU2QamulAoFg yG0/fp5DOH8Ly5gSHICbTc2Db7SPN3bBxeledzimfUBNTkxg0EaKsTvAddC6OkRc OrKCQE1YgUp9YbVbSwpfwb8jtvbdJ3yKFa6ZeBymhjcwQvOqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7+s3XFUI8cNiUaDHiEaKbxYMhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjczZjg3YjEtODYyMS0z YTZhLTgzNDAtYjNjMmVhYzg1MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhAGTgWq7xSuGoWHlDcUxIewDChTdrOd2kyH5q2rsEQepTS6t+lc+bX QXD3Ei7wau7TYzzaX750mjQ+v4pRTnWOgSlg1W2svlaQYo3d8h9me2vq63ryGGMi RnJ3XlbG3immZH9V5LzyM8vrYMdfIVQQarehlv3gO1PqbTlscQYugdwIcEipmfj8 lWIPlZePRzHYH8VAS4S6F/g6R2pyjLB/myQsECiDqT7SZkBvvpxpE97rmAtcIu2V 51yGnqpHAE9zYEKWBk1VcfPtVaMgqCdy3eh2LlZx0Phey710lUqDaGt141AB36Zh LJNMu268lEf1v1RR6BxtS++MSejPv18= -----END CERTIFICATE-----Generated at Wed Aug 6 06:07:28 2025 by rpki-client