$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa File: bd860549-3f89-30bd-a86a-e6550ed97700.roa (raw, json) Hash identifier: sDf25LNlI6YxvAIhBF6NPpULi1j8LIj1gsTiYXe50Pc= Subject key identifier: 48:85:5E:B3:DC:39:48:6E:59:3B:C1:53:D3:B4:24:3C:FD:22:B0:2F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE4A6FC39F18504C987E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.34.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:4a:6f:c3:9f:18:50:4c:98:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a30d367f-fba3-4619-a124-848bcd49714f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:01:91:8f:54:fc:56:39:77:c3:10:78:dd: 63:a0:cd:5d:a6:e5:ac:26:20:e1:16:78:a4:d2:26: bc:59:08:0d:3c:0d:39:b3:67:72:47:1c:e8:7d:b8: 45:d7:a3:65:a0:33:50:97:87:d1:ea:e9:37:19:77: 97:c0:b6:9b:20:f4:70:58:12:cf:b0:dd:ed:02:c3: c0:0a:e3:72:23:ac:cf:85:ee:6a:1b:79:a0:de:5f: 68:ec:9e:7c:76:d8:f9:5c:79:78:a5:3e:05:69:6e: fc:c8:79:75:ec:70:69:be:59:af:65:71:29:7b:5c: 2e:58:73:01:7d:c3:ca:29:82:6c:cc:e5:cd:41:70: f4:e0:c5:f7:13:70:6a:0f:d3:d3:6d:d5:c8:7c:16: 10:f1:05:df:c0:cc:c8:c0:e3:2e:f2:13:18:23:5c: 74:c2:c7:6f:a2:ed:54:3d:44:81:2e:7f:8e:14:fd: ea:78:35:72:3b:87:7c:9f:af:ae:a5:b0:e0:88:a1: db:7a:c9:5a:92:78:1d:9d:b0:51:ab:b2:29:ba:ba: 45:0d:15:2b:b8:bb:20:fe:c0:bd:c7:52:0a:c1:fc: ec:ad:ec:d9:ca:11:73:43:52:c9:a2:9d:4d:33:01: 8f:a0:d4:30:7e:c9:6f:82:de:61:36:c5:0d:c3:cb: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:85:5E:B3:DC:39:48:6E:59:3B:C1:53:D3:B4:24:3C:FD:22:B0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d3:e1:dc:8e:2e:8d:d4:2b:f4:52:16:23:c5:67:4d:a8:81: 99:1c:6c:42:3e:7d:9e:96:f0:fe:46:cb:a1:43:68:9e:5b:c2: f2:40:d3:dc:cf:d9:13:ec:a7:45:e3:6f:24:d5:94:06:db:14: 60:2a:5b:a3:f2:67:00:db:85:c7:68:cc:ef:51:6c:ef:4d:55: ff:20:e6:f4:7e:8a:fb:2a:b3:62:42:ff:69:b0:07:5c:67:28: 16:0c:b6:68:0b:69:dd:12:26:7a:13:15:2f:dc:b8:dc:b2:87: 30:11:8e:29:6d:37:a5:52:5f:9e:29:0b:f8:9e:44:fb:95:5c: 2b:e1:4e:f0:4e:f8:d2:7c:b5:b1:54:20:0c:9f:21:04:44:f5: ee:d9:c6:00:85:93:e1:43:52:71:9d:68:1c:ad:1e:f8:62:7d: 53:7b:9e:ee:0c:6e:7f:2f:ad:a0:da:bf:9d:36:69:e5:73:c9: f9:6a:cc:15:2e:d6:d9:7d:ae:fc:7d:99:3d:8d:7a:87:9d:66: 4f:e6:88:cc:70:4b:7a:86:3b:a2:0f:e0:88:f9:a5:10:83:6c: e9:54:e2:c1:0e:2f:4d:c3:bd:db:3e:ba:a9:06:0c:a3:c4:74: 55:60:83:81:d5:81:e0:bd:c5:9f:aa:d2:a1:0a:39:06:2b:8c: d8:a4:cd:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07kpvw58YUEyYfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTMwZDM2N2YtZmJhMy00NjE5LWExMjQtODQ4YmNkNDk3MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDQBkY9U/FY5d8MQeN1joM1dpuWsJiDhFnik 0ia8WQgNPA05s2dyRxzofbhF16NloDNQl4fR6uk3GXeXwLabIPRwWBLPsN3tAsPA CuNyI6zPhe5qG3mg3l9o7J58dtj5XHl4pT4FaW78yHl17HBpvlmvZXEpe1wuWHMB fcPKKYJszOXNQXD04MX3E3BqD9PTbdXIfBYQ8QXfwMzIwOMu8hMYI1x0wsdvou1U PUSBLn+OFP3qeDVyO4d8n6+upbDgiKHbeslakngdnbBRq7IpurpFDRUruLsg/sC9 x1IKwfzsrezZyhFzQ1LJop1NMwGPoNQwfslvgt5hNsUNw8se2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiFXrPcOUhuWTvBU9O0JDz9IrAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ4NjA1NDktM2Y4OS0z MGJkLWE4NmEtZTY1NTBlZDk3NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTT4dyOLo3UK/RSFiPFZ02ogZkcbEI+fZ6W8P5Gy6FDaJ5bwvJA09zP 2RPsp0XjbyTVlAbbFGAqW6PyZwDbhcdozO9RbO9NVf8g5vR+ivsqs2JC/2mwB1xn KBYMtmgLad0SJnoTFS/cuNyyhzARjiltN6VSX54pC/ieRPuVXCvhTvBO+NJ8tbFU IAyfIQRE9e7ZxgCFk+FDUnGdaBytHvhifVN7nu4Mbn8vraDav502aeVzyflqzBUu 1tl9rvx9mT2NeoedZk/miMxwS3qGO6IP4Ij5pRCDbOlU4sEOL03Dvds+uqkGDKPE dFVgg4HVgeC9xZ+q0qEKOQYrjNikzWU= -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:38 2025 by rpki-client