$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cc4eb4-8abd-325e-9c42-212804e83e83.roa File: d1cc4eb4-8abd-325e-9c42-212804e83e83.roa (raw, json) Hash identifier: cwBXz2FKysiJ59s7lQhfGplHwfUzRD4QzgZR5usa8oA= Subject key identifier: A4:03:3A:3A:C8:6E:93:8E:4D:57:10:CB:B6:3D:83:DE:78:EE:3D:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC943F513D9D1FEE9D81C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cc4eb4-8abd-325e-9c42-212804e83e83.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.34.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:94:3f:51:3d:9d:1f:ee:9d:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3022c6f0-86f7-4d73-8362-57f615c1a443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:64:03:0a:00:a8:b5:2a:53:83:9f:04:ea: 0f:80:3e:d5:22:d5:d6:3b:53:06:98:4d:1c:56:d5: cb:19:a3:87:d9:c1:d0:31:eb:fb:15:7a:17:89:03: 86:a6:a8:27:d2:ca:c9:c6:be:4c:d7:05:c3:5d:b0: 6d:2a:2a:63:e0:8e:b5:19:3f:28:c6:2d:e4:28:15: 72:e2:75:ac:1d:b5:59:df:45:ba:78:1e:12:0f:1f: af:10:ff:f3:5a:52:61:26:98:15:b2:34:11:43:fd: f7:a4:cb:ca:d9:d1:94:dd:cf:ff:01:b7:63:f8:29: 21:e3:17:82:26:de:cf:3a:e4:65:bd:10:61:42:a4: ad:a2:b1:2b:e3:61:75:df:57:92:c2:7d:43:1b:c6: aa:58:7e:18:41:6c:2e:b5:65:cb:ac:18:e6:8a:51: cd:ac:95:e6:ab:ef:4a:ba:66:39:51:d8:69:e1:e2: 8d:19:76:0c:fa:cb:f1:29:2d:f5:fd:0f:4e:44:02: 28:43:c8:7a:ba:d6:cb:d9:2b:22:62:3f:73:7e:99: ea:83:97:16:12:55:9f:75:82:c6:dc:63:17:12:90: fb:33:af:77:35:49:02:e2:b3:05:94:5e:e3:fb:7a: a7:8d:ea:9e:d7:52:c5:22:fd:d7:47:05:d7:f6:1e: 78:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:3A:3A:C8:6E:93:8E:4D:57:10:CB:B6:3D:83:DE:78:EE:3D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cc4eb4-8abd-325e-9c42-212804e83e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c1:18:d3:23:57:fa:04:13:77:cd:fd:d3:52:76:6e:ab:e5: 6c:ce:4a:1d:8f:6c:54:6d:a5:4b:7d:4b:bd:86:37:d3:dd:65: 32:bb:cb:56:03:37:64:26:26:60:bb:9f:36:03:6e:22:3d:d3: 58:f2:fe:c1:29:d3:2a:c7:7d:0e:96:e2:d4:77:11:b5:da:f5: 0e:17:f4:af:64:f2:a6:1b:53:39:76:2a:91:92:9b:e3:ad:62: 6d:7b:24:90:47:5c:be:bc:04:bd:a0:87:75:03:24:43:b9:29: 62:81:ba:ff:29:d6:b4:5f:05:ed:7b:77:e5:cb:31:bd:f7:3a: ef:f1:9e:12:81:46:50:04:a3:90:1d:b0:22:3f:1b:c4:75:8b: 5c:b4:98:31:6e:be:26:58:bf:a5:88:8f:01:12:37:3f:ad:a5: 0d:33:07:25:86:f8:0b:b4:a8:2d:9c:c1:3d:64:ed:61:7b:52: c4:2a:94:d6:a5:86:57:00:60:14:cc:66:02:85:cd:48:10:ab: 41:00:05:0e:b0:99:2b:70:68:89:da:96:a1:7b:23:55:00:f5: 3f:cf:63:ca:da:ee:a1:5d:c6:84:b3:64:82:fd:08:f5:70:2f: 63:68:17:f2:26:64:9b:46:d5:1e:fa:e3:ed:1f:b0:1e:87:32: 2f:3d:a3:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JQ/UT2dH+6dgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzAyMmM2ZjAtODZmNy00ZDczLTgzNjItNTdmNjE1YzFhNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1FkAwoAqLUqU4OfBOoPgD7VItXWO1MGmE0c VtXLGaOH2cHQMev7FXoXiQOGpqgn0srJxr5M1wXDXbBtKipj4I61GT8oxi3kKBVy 4nWsHbVZ30W6eB4SDx+vEP/zWlJhJpgVsjQRQ/33pMvK2dGU3c//Abdj+Ckh4xeC Jt7POuRlvRBhQqStorEr42F131eSwn1DG8aqWH4YQWwutWXLrBjmilHNrJXmq+9K umY5Udhp4eKNGXYM+svxKS31/Q9ORAIoQ8h6utbL2SsiYj9zfpnqg5cWElWfdYLG 3GMXEpD7M693NUkC4rMFlF7j+3qnjeqe11LFIv3XRwXX9h54fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQDOjrIbpOOTVcQy7Y9g9547j03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFjYzRlYjQtOGFiZC0z MjVlLTljNDItMjEyODA0ZTgzZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/BGNMjV/oEE3fN/dNSdm6r5WzOSh2PbFRtpUt9S72GN9PdZTK7y1YD N2QmJmC7nzYDbiI901jy/sEp0yrHfQ6W4tR3EbXa9Q4X9K9k8qYbUzl2KpGSm+Ot Ym17JJBHXL68BL2gh3UDJEO5KWKBuv8p1rRfBe17d+XLMb33Ou/xnhKBRlAEo5Ad sCI/G8R1i1y0mDFuviZYv6WIjwESNz+tpQ0zByWG+Au0qC2cwT1k7WF7UsQqlNal hlcAYBTMZgKFzUgQq0EABQ6wmStwaInalqF7I1UA9T/PY8ra7qFdxoSzZIL9CPVw L2NoF/ImZJtG1R764+0fsB6HMi89o4M= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:44 2025 by rpki-client