$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54ae039-ec09-36b1-a6b9-175779faa5f7.roa File: d54ae039-ec09-36b1-a6b9-175779faa5f7.roa (raw, json) Hash identifier: q1YLk3p4I69Ia1s1Er9p74YIOA1vvSu8peA54tcgPyA= Subject key identifier: D6:54:AD:B1:80:10:20:3E:40:F7:37:95:6C:05:82:09:9A:AB:0A:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECA34FCED46CEDB02FD820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54ae039-ec09-36b1-a6b9-175779faa5f7.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.42.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:a3:4f:ce:d4:6c:ed:b0:2f:d8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=c12652c3-706b-412f-8474-35fb76c4aef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:14:b2:32:6a:d7:49:f0:fc:0f:ac:a4:11:80: b5:6e:00:c7:77:67:34:6d:c4:1d:fc:3d:c6:af:23: e6:a1:32:f8:56:ab:3d:a8:bd:7a:7b:98:2f:8c:c1: c5:41:8d:27:24:44:67:ce:6a:54:e4:ab:8f:b2:5c: cf:ae:94:c0:3d:b9:c4:50:41:f2:df:34:ac:90:a7: 5b:9c:86:1b:42:4a:4b:1a:0e:cd:7e:5c:02:68:47: e5:d2:8b:b3:4a:d1:0e:58:69:1e:58:fe:4e:fa:f0: bf:b0:8b:66:fd:a6:3b:7e:d3:54:13:20:ae:60:f6: 01:7f:dd:b8:65:04:e2:d9:34:2a:46:bd:34:b6:ea: f6:81:cb:cf:43:2f:af:8e:11:9d:0b:9e:77:df:a6: 07:e6:d9:71:01:44:e6:7d:ce:d5:a8:f0:f9:60:ff: 20:1f:4b:b8:4d:db:1c:a8:b9:f5:8b:f7:52:53:74: bf:0e:c0:e9:34:72:da:34:3a:d3:72:d8:eb:40:dd: 85:91:06:12:07:61:15:92:63:10:56:87:86:d1:53: 09:cb:97:f5:d8:3f:41:b9:64:57:c7:48:55:2b:3d: d7:ff:bc:f1:ab:8c:bc:bd:f1:9c:9e:00:09:a4:12: e0:72:47:ec:ca:56:6e:00:93:c8:11:ae:c4:33:02: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:54:AD:B1:80:10:20:3E:40:F7:37:95:6C:05:82:09:9A:AB:0A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d54ae039-ec09-36b1-a6b9-175779faa5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4a:88:e6:b4:e6:0b:87:59:aa:d4:6b:0d:0c:88:03:b1:65: 7f:4c:3d:fa:9d:1c:2a:4a:25:02:c4:36:bb:09:ed:2e:5a:57: 32:43:ac:c5:c5:9f:20:cb:a6:af:f8:17:6b:c0:dd:0c:fc:dc: 25:ba:e0:47:31:16:d2:1b:de:a4:28:98:68:05:31:b0:ee:56: 34:ae:1f:f9:7c:f4:64:9d:eb:f8:2d:32:49:3b:a6:cc:b2:61: 5f:98:ee:a9:95:a0:73:6a:f6:9c:3f:6e:11:28:76:2a:37:cd: 37:17:3a:a5:b6:37:ff:e1:fb:d6:0f:25:ea:df:85:bc:5c:2d: 28:92:ed:2c:70:83:a3:ad:6f:ba:43:d7:14:35:bb:2a:5f:82: 53:ef:28:b5:5e:b7:b5:05:89:3e:5c:3e:86:11:79:70:90:11: 19:77:9d:2c:84:e6:a2:65:8d:70:a1:84:b3:89:cf:73:33:ab: 66:54:c8:72:ae:d9:b1:16:29:ba:3a:7c:a6:9a:12:3f:bb:ff: 48:69:58:7d:b5:4f:3b:c6:06:15:30:36:6d:d9:f8:c6:2a:9c: f0:7c:f1:eb:f2:a8:5d:7b:93:cd:01:a7:ad:f4:e0:b6:8a:bb: 19:66:5b:a2:33:4e:46:d3:68:e0:3c:d0:62:47:7c:f1:7a:bd: 62:f2:9d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07KNPztRs7bAv2CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzEyNjUyYzMtNzA2Yi00MTJmLTg0NzQtMzVmYjc2YzRhZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBSyMmrXSfD8D6ykEYC1bgDHd2c0bcQd/D3G ryPmoTL4Vqs9qL16e5gvjMHFQY0nJERnzmpU5KuPslzPrpTAPbnEUEHy3zSskKdb nIYbQkpLGg7NflwCaEfl0ouzStEOWGkeWP5O+vC/sItm/aY7ftNUEyCuYPYBf924 ZQTi2TQqRr00tur2gcvPQy+vjhGdC55336YH5tlxAUTmfc7VqPD5YP8gH0u4Tdsc qLn1i/dSU3S/DsDpNHLaNDrTctjrQN2FkQYSB2EVkmMQVoeG0VMJy5f12D9BuWRX x0hVKz3X/7zxq4y8vfGcngAJpBLgckfsylZuAJPIEa7EMwL4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZUrbGAECA+QPc3lWwFggmaqwrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU0YWUwMzktZWMwOS0z NmIxLWE2YjktMTc1Nzc5ZmFhNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBKiOa05guHWarUaw0MiAOxZX9MPfqdHCpKJQLENrsJ7S5aVzJDrMXF nyDLpq/4F2vA3Qz83CW64EcxFtIb3qQomGgFMbDuVjSuH/l89GSd6/gtMkk7psyy YV+Y7qmVoHNq9pw/bhEodio3zTcXOqW2N//h+9YPJerfhbxcLSiS7Sxwg6Otb7pD 1xQ1uypfglPvKLVet7UFiT5cPoYReXCQERl3nSyE5qJljXChhLOJz3Mzq2ZUyHKu 2bEWKbo6fKaaEj+7/0hpWH21TzvGBhUwNm3Z+MYqnPB88evyqF17k80Bp6304LaK uxlmW6IzTkbTaOA80GJHfPF6vWLynZU= -----END CERTIFICATE-----Generated at Wed Aug 6 06:03:14 2025 by rpki-client