$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa File: cb800a05-9a01-30d9-9210-55ad0745af5b.roa (raw, json) Hash identifier: tiooC/aw2ANowlFc4fth3WZxweBs0ynL9ABI+WrYvl0= Subject key identifier: FC:88:76:1C:28:3F:85:21:1A:E7:14:81:69:05:CA:C1:0C:0A:82:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC90C86BF86993AFD3FE90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.32.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:90:c8:6b:f8:69:93:af:d3:fe:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=f219e0a9-f734-4a12-bb0d-768a30171836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:65:3e:d3:1b:02:c2:20:c4:b3:a4:f9:d8: 4e:75:1f:1b:ea:00:9d:b5:53:e9:81:85:69:9e:1f: 8d:99:3f:d4:d6:90:63:52:d6:3c:b4:a4:1d:ce:01: 3f:3b:a7:32:b4:0e:b0:03:55:b3:3e:f6:2d:e9:62: 20:03:b4:39:c1:90:ba:e0:6c:bb:aa:30:10:f2:2a: ad:1f:ed:d3:ea:dc:00:9e:91:29:94:c8:98:5e:72: 50:18:f5:97:fa:66:e0:e9:ba:79:ad:54:6a:a4:db: 90:2d:1c:43:71:a1:2d:fc:34:3d:c7:8b:ce:27:df: 5d:f2:ed:66:6d:bb:d0:33:3d:75:51:e4:7d:80:c6: ac:11:7d:38:73:20:2f:f3:ef:f7:a0:88:8a:80:75: 87:fc:89:6a:58:7a:8d:63:c5:74:28:96:26:2a:4e: cc:a7:fd:e7:fe:a8:a2:33:87:86:0c:4f:cc:a7:93: e4:8b:75:b3:cf:69:42:27:10:34:e7:9f:fc:9c:4d: be:6a:a9:fb:dc:a3:dc:89:a4:ce:4e:df:c8:55:6b: 58:ac:00:d0:ef:22:b9:fb:00:c0:2d:a5:0c:c8:93: 60:dc:6d:76:cf:ce:d5:aa:82:cd:d0:14:95:3d:6c: 0a:b7:84:9d:b6:86:89:35:b2:71:07:16:e0:35:66: 89:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:88:76:1C:28:3F:85:21:1A:E7:14:81:69:05:CA:C1:0C:0A:82:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:45:62:be:7b:f5:e3:e7:a9:9e:92:bf:48:a1:83:86:46:10: 18:ed:4d:26:8d:25:31:ef:77:7d:df:76:d5:0f:ba:d7:db:e0: dc:22:22:7e:a0:69:1c:ee:52:1b:ec:fd:d7:36:70:b1:ee:73: 8b:84:f5:0b:ed:6b:37:4c:e3:74:be:d5:a7:fd:d6:78:36:5b: 75:86:3a:42:82:91:ce:37:27:1c:be:f9:50:f4:ac:b5:2d:3c: cb:9c:b9:b6:f7:35:08:1d:97:45:53:81:6b:a0:b7:98:a9:69: dc:00:52:25:e0:88:a9:6d:6c:74:c9:a8:3e:4d:6e:f9:0f:fe: 59:a5:62:cd:6f:f3:74:a6:5d:94:67:f3:12:7e:a9:87:78:35: c2:87:11:19:d1:c4:43:61:55:38:db:d1:1f:af:f4:51:0a:a1: c5:d8:33:b6:66:0f:ea:9f:af:d6:08:0d:24:d3:58:d5:5e:72: d1:c8:83:71:8c:59:2c:65:ed:a3:0a:84:53:5c:03:fb:0e:9a: a7:63:e5:fa:1d:f2:f9:df:be:94:5d:03:09:f9:9c:9a:d7:3b: a0:0f:0e:eb:75:67:52:e0:5d:5a:df:d5:cb:8c:42:88:8c:39: 67:8a:f5:f6:0a:b1:84:d4:9a:fb:1d:38:4c:a3:fe:48:8a:cd: db:5c:5b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JDIa/hpk6/T/pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjIxOWUwYTktZjczNC00YTEyLWJiMGQtNzY4YTMwMTcxODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWJlPtMbAsIgxLOk+dhOdR8b6gCdtVPpgYVp nh+NmT/U1pBjUtY8tKQdzgE/O6cytA6wA1WzPvYt6WIgA7Q5wZC64Gy7qjAQ8iqt H+3T6twAnpEplMiYXnJQGPWX+mbg6bp5rVRqpNuQLRxDcaEt/DQ9x4vOJ99d8u1m bbvQMz11UeR9gMasEX04cyAv8+/3oIiKgHWH/IlqWHqNY8V0KJYmKk7Mp/3n/qii M4eGDE/Mp5Pki3Wzz2lCJxA055/8nE2+aqn73KPciaTOTt/IVWtYrADQ7yK5+wDA LaUMyJNg3G12z87VqoLN0BSVPWwKt4SdtoaJNbJxBxbgNWaJiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyIdhwoP4UhGucUgWkFysEMCoK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I4MDBhMDUtOWEwMS0z MGQ5LTkyMTAtNTVhZDA3NDVhZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdFYr579ePnqZ6Sv0ihg4ZGEBjtTSaNJTHvd33fdtUPutfb4NwiIn6g aRzuUhvs/dc2cLHuc4uE9QvtazdM43S+1af91ng2W3WGOkKCkc43Jxy++VD0rLUt PMucubb3NQgdl0VTgWugt5ipadwAUiXgiKltbHTJqD5NbvkP/lmlYs1v83SmXZRn 8xJ+qYd4NcKHERnRxENhVTjb0R+v9FEKocXYM7ZmD+qfr9YIDSTTWNVectHIg3GM WSxl7aMKhFNcA/sOmqdj5fod8vnfvpRdAwn5nJrXO6APDut1Z1LgXVrf1cuMQoiM OWeK9fYKsYTUmvsdOEyj/kiKzdtcW9U= -----END CERTIFICATE-----Generated at Wed Aug 6 05:53:01 2025 by rpki-client