$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d22a97e8-471c-3f7a-8673-1a1bfd4b97d0.roa File: d22a97e8-471c-3f7a-8673-1a1bfd4b97d0.roa (raw, json) Hash identifier: JkHXPyZunp2IxuZHxtHpBXyMdW3hWjdSZ7jUjucT1+k= Subject key identifier: 4A:F7:36:C0:9D:04:2D:6B:0E:CD:55:E7:B0:83:EE:32:BD:C7:B2:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE5849A5E0D8B0EB1BA680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d22a97e8-471c-3f7a-8673-1a1bfd4b97d0.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.42.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:58:49:a5:e0:d8:b0:eb:1b:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=4512de22-231c-476f-bf0c-c29da05408dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:cb:65:79:5c:70:39:71:fd:71:df:a3:5e: 47:6c:4a:7b:78:d7:b3:cf:c8:1c:13:40:37:2c:fd: 7c:60:0a:23:44:54:31:85:38:03:14:69:38:2f:ce: 54:f5:65:e6:be:68:8d:d0:e2:8c:18:85:9f:8f:77: 77:58:5e:34:aa:c1:1d:78:44:0f:1d:f2:3b:f6:c3: 40:9e:19:4c:c5:fa:be:f0:fd:05:75:2e:1b:a4:ca: 5b:59:17:78:ee:d1:89:bf:5c:09:60:49:ea:20:f9: 83:fb:8a:25:c1:28:d8:fb:d1:bd:44:8e:31:96:5e: e9:cb:40:9b:88:89:22:ab:da:02:e5:4c:d9:3b:bb: 47:f0:5d:d4:2d:86:40:5b:1b:38:bf:4e:53:4c:ce: 21:4b:e1:e9:70:50:7e:cf:03:de:cd:e6:a3:4d:20: 84:63:cc:fe:33:93:0c:98:50:0a:2e:a5:16:73:26: 11:d9:bf:ca:cb:2a:99:7e:5d:ae:d4:14:2f:b9:e1: 59:b1:b5:0b:4c:c0:66:91:10:d7:e9:84:62:90:42: 7a:7c:8d:05:ca:20:c5:23:84:c2:4f:6c:8a:58:97: 1a:ee:03:10:7a:d1:c4:9b:87:e8:0b:a3:2b:d3:d0: c2:d5:b7:6f:d0:8d:0d:f2:af:4e:76:9a:3c:fe:41: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F7:36:C0:9D:04:2D:6B:0E:CD:55:E7:B0:83:EE:32:BD:C7:B2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d22a97e8-471c-3f7a-8673-1a1bfd4b97d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ec:e4:8a:b9:eb:8f:39:e8:84:f1:5f:ad:0f:af:cd:f9:7f: 5b:ff:c4:70:39:e2:81:ba:d3:bc:a3:70:21:08:d2:68:15:6b: 78:79:db:be:ee:bd:66:42:48:3a:34:76:b1:3a:1c:71:94:fb: af:21:74:e8:6f:ce:43:b5:27:4e:74:7b:71:e8:43:45:a8:f3: ca:3f:74:b7:f9:a5:1b:16:e2:11:2a:41:fe:46:4d:2b:4b:91: 5d:07:79:18:78:1b:45:60:22:d6:31:23:d8:7f:51:5b:3f:61: 57:b1:d1:55:f1:91:c8:81:8a:98:5a:fa:d7:67:af:27:3a:da: fc:84:71:7d:89:0b:a3:ca:26:bc:25:ab:b7:59:42:7d:08:a4: e4:bb:42:f4:a5:c5:96:26:88:15:07:24:75:ba:71:17:c0:8d: b3:0c:de:af:07:d9:db:f1:2f:32:45:5a:49:25:df:70:e1:a4: 85:66:f2:bd:29:2b:9f:09:ca:ed:c2:cf:2c:9e:1a:cb:e8:88: 52:49:05:ca:9c:55:ba:9e:80:05:69:04:30:5a:6f:f1:d8:03: 6b:e8:60:d2:c1:8e:6d:17:29:bd:6b:4a:1d:26:80:98:0e:5b: ca:ff:ea:6d:00:9e:5f:98:56:09:e3:eb:d7:b3:66:c7:72:49: 2d:c5:8c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07lhJpeDYsOsbpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDUxMmRlMjItMjMxYy00NzZmLWJmMGMtYzI5ZGEwNTQwOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8zLZXlccDlx/XHfo15HbEp7eNezz8gcE0A3 LP18YAojRFQxhTgDFGk4L85U9WXmvmiN0OKMGIWfj3d3WF40qsEdeEQPHfI79sNA nhlMxfq+8P0FdS4bpMpbWRd47tGJv1wJYEnqIPmD+4olwSjY+9G9RI4xll7py0Cb iIkiq9oC5UzZO7tH8F3ULYZAWxs4v05TTM4hS+HpcFB+zwPezeajTSCEY8z+M5MM mFAKLqUWcyYR2b/KyyqZfl2u1BQvueFZsbULTMBmkRDX6YRikEJ6fI0FyiDFI4TC T2yKWJca7gMQetHEm4foC6Mr09DC1bdv0I0N8q9Odpo8/kEawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr3NsCdBC1rDs1V57CD7jK9x7KQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDIyYTk3ZTgtNDcxYy0z ZjdhLTg2NzMtMWExYmZkNGI5N2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/s5Iq564856ITxX60Pr835f1v/xHA54oG607yjcCEI0mgVa3h5277u vWZCSDo0drE6HHGU+68hdOhvzkO1J050e3HoQ0Wo88o/dLf5pRsW4hEqQf5GTStL kV0HeRh4G0VgItYxI9h/UVs/YVex0VXxkciBipha+tdnryc62vyEcX2JC6PKJrwl q7dZQn0IpOS7QvSlxZYmiBUHJHW6cRfAjbMM3q8H2dvxLzJFWkkl33DhpIVm8r0p K58Jyu3CzyyeGsvoiFJJBcqcVbqegAVpBDBab/HYA2voYNLBjm0XKb1rSh0mgJgO W8r/6m0Anl+YVgnj69ezZsdySS3FjCk= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:41 2025 by rpki-client