$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7651b48-cd57-3ee6-b3c6-a17f7b99fe33.roa File: c7651b48-cd57-3ee6-b3c6-a17f7b99fe33.roa (raw, json) Hash identifier: lLHnyrR7UEZzM6KKVHbwlWvrGVvYgAVuWyWgnsM3XHo= Subject key identifier: D2:50:9A:FE:94:49:FA:37:AF:3C:0B:6F:FE:66:F9:3C:A5:AD:76:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1D16FE2264860FE060480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7651b48-cd57-3ee6-b3c6-a17f7b99fe33.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.84.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:d1:6f:e2:26:48:60:fe:06:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=02eb7f9c-a286-4c56-9007-25ccb7239e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:ec:9b:ae:23:d5:f2:e3:c2:ba:c9:32:c0: d9:6a:35:49:37:fc:1d:0a:00:e8:74:0c:56:36:da: d4:87:90:b1:ff:f3:38:8e:1b:a5:31:87:41:12:f0: f3:40:30:4a:f4:c7:3b:3f:a3:8f:c4:81:ba:eb:72: 1c:6d:7e:91:03:ea:6a:7c:e0:e7:59:8d:08:82:e9: 25:a9:18:4a:56:ef:2f:90:bc:02:41:70:4b:0e:7d: 56:8a:03:90:20:5c:2d:8d:a3:39:57:dc:a8:32:40: c0:80:3a:59:d8:50:96:48:6a:f9:69:89:22:4c:00: 52:b6:ed:f5:87:06:fe:d7:2d:5a:0d:36:d1:d7:3b: 75:39:c9:9b:b8:62:f7:61:22:ef:59:37:87:d8:7b: 71:03:02:25:e4:2a:43:99:28:8f:ab:58:da:eb:1e: 81:69:36:65:fc:05:47:e8:b6:82:b0:c9:fc:74:49: 48:4d:8d:ce:6f:89:f5:63:a0:09:b0:50:92:3c:dc: ca:42:fc:e7:cf:d6:7f:a7:82:97:9f:62:88:d5:14: 9f:72:66:4a:a1:74:d7:fc:80:c3:61:37:72:e2:18: 27:a4:95:d5:6f:c2:47:37:2b:35:dd:72:a5:da:89: 1c:cd:87:d0:32:44:b0:b1:ff:2d:dd:d7:04:b6:0d: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:50:9A:FE:94:49:FA:37:AF:3C:0B:6F:FE:66:F9:3C:A5:AD:76:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7651b48-cd57-3ee6-b3c6-a17f7b99fe33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f4:19:b1:39:0e:e3:b5:3f:ee:7b:8e:15:fa:61:12:fc:bd: c6:5d:5b:4d:6f:d2:82:fc:33:d5:4a:b6:b7:71:67:c6:52:7f: d4:13:63:af:fb:3c:97:e9:98:ae:3d:26:fc:c1:16:e5:87:02: 79:85:4c:31:86:06:9a:5e:76:36:4e:5d:e0:c0:52:59:16:eb: 4b:e5:1f:97:18:58:35:89:98:f6:8d:c5:fe:64:0b:52:94:64: 82:64:ee:e0:fe:15:5c:73:c1:6f:e2:3d:25:f8:98:f6:28:ee: 1f:8d:87:82:fc:c2:1e:4a:b1:14:01:cf:d7:67:51:2a:6c:7a: c2:8e:a3:71:49:30:cc:66:4f:33:fa:07:2a:cc:66:33:46:74: b9:44:7c:d8:b1:16:88:83:b3:30:c8:5d:57:5f:d9:80:f6:ef: 4e:fd:e0:9d:f1:31:c5:bb:3e:c9:d1:2c:f5:b0:c1:3b:c4:16: 78:2e:8f:90:c1:82:03:96:4b:64:47:08:bb:3e:b8:d7:e8:4b: ab:bd:ec:a6:3a:62:69:17:3d:ce:dd:a4:ec:ec:68:a3:67:d0: 32:09:bc:ca:64:04:77:10:83:ea:a4:79:64:58:29:3c:a7:54: 19:55:a7:2d:70:a3:fd:19:c2:8b:e7:e3:d7:4d:ec:14:d6:13: 7d:fd:09:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswdFv4iZIYP4GBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDJlYjdmOWMtYTI4Ni00YzU2LTkwMDctMjVjY2I3MjM5ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZHsm64j1fLjwrrJMsDZajVJN/wdCgDodAxW NtrUh5Cx//M4jhulMYdBEvDzQDBK9Mc7P6OPxIG663IcbX6RA+pqfODnWY0Igukl qRhKVu8vkLwCQXBLDn1WigOQIFwtjaM5V9yoMkDAgDpZ2FCWSGr5aYkiTABStu31 hwb+1y1aDTbR1zt1OcmbuGL3YSLvWTeH2HtxAwIl5CpDmSiPq1ja6x6BaTZl/AVH 6LaCsMn8dElITY3Ob4n1Y6AJsFCSPNzKQvznz9Z/p4KXn2KI1RSfcmZKoXTX/IDD YTdy4hgnpJXVb8JHNys13XKl2okczYfQMkSwsf8t3dcEtg3l8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJQmv6USfo3rzwLb/5m+TylrXa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzc2NTFiNDgtY2Q1Ny0z ZWU2LWIzYzYtYTE3ZjdiOTlmZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT0GbE5DuO1P+57jhX6YRL8vcZdW01v0oL8M9VKtrdxZ8ZSf9QTY6/7 PJfpmK49JvzBFuWHAnmFTDGGBppedjZOXeDAUlkW60vlH5cYWDWJmPaNxf5kC1KU ZIJk7uD+FVxzwW/iPSX4mPYo7h+Nh4L8wh5KsRQBz9dnUSpsesKOo3FJMMxmTzP6 ByrMZjNGdLlEfNixFoiDszDIXVdf2YD270794J3xMcW7PsnRLPWwwTvEFnguj5DB ggOWS2RHCLs+uNfoS6u97KY6YmkXPc7dpOzsaKNn0DIJvMpkBHcQg+qkeWRYKTyn VBlVpy1wo/0Zwovn49dN7BTWE339CSs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:41:27 2025 by rpki-client