$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e10118-f167-39a5-be49-c421a97335b3.roa File: c6e10118-f167-39a5-be49-c421a97335b3.roa (raw, json) Hash identifier: v7VAMVJ/ObNYMFcOtJkRfrzkD9ya6Hzfpsev3OssXSU= Subject key identifier: 64:AB:A5:42:42:53:45:58:E6:CB:85:D7:44:39:6E:66:9E:BA:88:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECA56F9019D16E1A8BED00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e10118-f167-39a5-be49-c421a97335b3.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.42.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:a5:6f:90:19:d1:6e:1a:8b:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=29473ddf-c8d5-4bfc-889d-5ac5be82b40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:84:17:76:1f:fc:c2:a7:cc:b2:2a:1b:92:08: 38:66:94:ca:7b:72:d0:45:e0:40:0d:13:d1:d6:83: 5c:d0:d0:f5:c5:90:79:51:e4:81:4e:50:72:8a:ca: d7:88:a0:8f:35:3d:09:e3:d6:2b:5f:4a:4c:23:85: f2:4a:4c:af:af:a1:5e:a4:29:84:a2:f8:2e:d0:a3: 23:88:47:7e:25:01:59:2f:f6:ed:c8:10:be:c9:29: f5:24:c3:f1:b9:63:64:79:b2:0b:d4:bd:d8:16:04: eb:db:2c:21:87:4c:19:fd:96:b1:f0:b4:2b:04:5a: 53:2d:24:d2:4b:02:ac:b9:fe:1c:fa:53:d3:00:bc: b1:c7:a0:99:c0:5e:ba:13:4f:0c:c6:b7:9c:f0:39: 87:7a:f7:86:88:d5:4f:83:4e:4e:1b:4b:fb:33:89: 23:bf:52:1e:07:74:87:47:9d:d7:37:23:b2:55:c1: ce:fb:7f:1e:5d:c8:ba:0b:45:ee:78:4b:be:42:50: 2a:18:71:04:15:03:bc:24:39:08:54:e5:a0:02:cc: 97:94:f5:d2:ee:1a:e3:71:c7:2e:01:6a:5a:fe:a2: 06:bc:c2:e2:28:cc:80:c5:67:57:df:02:45:c0:08: 60:89:ee:85:00:95:0e:11:f5:ff:6a:83:95:65:05: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AB:A5:42:42:53:45:58:E6:CB:85:D7:44:39:6E:66:9E:BA:88:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e10118-f167-39a5-be49-c421a97335b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:28:b6:b1:6a:db:16:89:96:c1:31:84:fa:d4:11:ef:53:6b: 3e:2c:2f:23:5b:69:70:ba:60:03:2d:b2:84:a2:33:dc:f2:aa: c5:b3:af:ed:0f:51:02:cc:12:27:55:07:e7:47:ef:a6:4f:2f: ec:eb:dd:0a:1a:3d:7a:39:6e:dd:af:9c:28:e0:0f:15:f4:8e: a7:c7:31:db:6f:d6:4e:92:fd:88:14:7d:1c:82:76:03:c8:d1: 25:b3:a7:4c:47:7a:e2:0e:04:be:a7:a9:0b:8f:c4:22:5b:8f: 76:10:4b:c9:0a:ee:45:25:14:9c:1c:69:70:75:26:c4:ef:94: a9:c0:44:12:70:03:94:fd:be:b5:c3:40:95:e5:3a:f1:3f:0b: 0a:f5:9e:98:cc:55:70:b9:3f:42:83:b5:08:68:6e:34:f0:80: 69:21:fe:5f:f4:08:d4:e0:63:0d:42:b9:aa:44:30:0e:22:80: db:f7:ea:c3:e2:0b:2c:ec:07:38:97:a5:e7:d7:9d:b7:9a:c6: 69:6a:33:ba:15:5f:24:61:ca:5b:18:c9:1a:06:f1:79:a1:0d: 21:50:d8:3f:71:01:f8:62:1a:5c:8a:d3:40:d5:f6:98:6d:49: 5a:c2:cb:00:fc:ad:2c:f3:d7:59:2c:04:f0:c0:05:a2:3e:52: bc:4a:d4:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07KVvkBnRbhqL7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk Mjk0NzNkZGYtYzhkNS00YmZjLTg4OWQtNWFjNWJlODJiNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIQXdh/8wqfMsiobkgg4ZpTKe3LQReBADRPR 1oNc0ND1xZB5UeSBTlByisrXiKCPNT0J49YrX0pMI4XySkyvr6FepCmEovgu0KMj iEd+JQFZL/btyBC+ySn1JMPxuWNkebIL1L3YFgTr2ywhh0wZ/Zax8LQrBFpTLSTS SwKsuf4c+lPTALyxx6CZwF66E08Mxrec8DmHeveGiNVPg05OG0v7M4kjv1IeB3SH R53XNyOyVcHO+38eXci6C0XueEu+QlAqGHEEFQO8JDkIVOWgAsyXlPXS7hrjcccu AWpa/qIGvMLiKMyAxWdX3wJFwAhgie6FAJUOEfX/aoOVZQW3jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSrpUJCU0VY5suF10Q5bmaeuohsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzZlMTAxMTgtZjE2Ny0z OWE1LWJlNDktYzQyMWE5NzMzNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwotrFq2xaJlsExhPrUEe9Taz4sLyNbaXC6YAMtsoSiM9zyqsWzr+0P UQLMEidVB+dH76ZPL+zr3QoaPXo5bt2vnCjgDxX0jqfHMdtv1k6S/YgUfRyCdgPI 0SWzp0xHeuIOBL6nqQuPxCJbj3YQS8kK7kUlFJwcaXB1JsTvlKnARBJwA5T9vrXD QJXlOvE/Cwr1npjMVXC5P0KDtQhobjTwgGkh/l/0CNTgYw1CuapEMA4igNv36sPi CyzsBziXpefXnbeaxmlqM7oVXyRhylsYyRoG8XmhDSFQ2D9xAfhiGlyK00DV9pht SVrCywD8rSzz11ksBPDABaI+UrxK1LI= -----END CERTIFICATE-----Generated at Wed Aug 6 06:01:54 2025 by rpki-client