$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa File: df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa (raw, json) Hash identifier: XRuALKu7MJ+sASaaepaVFXnChwjU19aJ1tLqPgnO71A= Subject key identifier: 12:52:22:4B:58:D6:A3:61:20:99:7F:D5:A1:6B:B1:27:A8:A6:02:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC9F16DA9FFE4FCE405190 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.40.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:9f:16:da:9f:fe:4f:ce:40:51:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9d953b40-3383-43fe-a662-02058747baaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:28:a6:24:bc:7f:13:05:3c:21:a0:29:ad: 69:41:cd:ff:e6:61:bd:dd:e5:ea:12:eb:5f:4a:0a: 4a:eb:1a:bd:d5:33:ce:f4:d5:3d:1a:d9:a6:07:81: 39:e8:bd:f6:07:0a:2f:21:13:84:98:b2:4b:69:7c: e2:83:10:13:b8:68:c7:8a:bf:6d:e7:5b:8c:54:a3: f4:f0:f2:2a:0c:83:86:74:fe:a7:1d:55:ee:1c:a6: 17:5f:8f:3f:3e:18:6b:b1:3c:ed:ad:34:8b:1b:d2: a7:82:b5:00:fe:69:cb:a9:7e:0c:65:6d:5d:f8:b2: 9d:bd:44:c5:ba:31:4b:f5:d4:9f:aa:46:0c:54:0d: eb:dc:e6:ba:c4:03:1c:90:2b:f0:74:bf:89:f8:4f: 8f:e5:64:02:e1:41:d8:fc:e0:07:72:4e:df:45:0a: 47:63:e8:fd:01:3f:8a:73:0d:27:60:9b:07:01:e9: 1b:65:2e:72:4d:9a:e0:92:21:62:a2:b7:8f:52:12: f3:b5:51:d8:9a:35:30:42:e8:5b:19:d0:74:ff:01: 05:ff:d5:a9:22:2e:36:44:cd:f3:82:6f:dc:f9:b3: 74:ef:04:17:2c:fd:b9:bf:88:18:19:75:6c:07:4c: d6:29:8f:0b:89:2c:df:4b:57:27:27:c6:30:95:6a: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:22:4B:58:D6:A3:61:20:99:7F:D5:A1:6B:B1:27:A8:A6:02:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:75:d3:97:0a:f5:02:43:50:e8:ea:ac:e5:7f:a1:e5:17:81: 74:87:8f:7b:28:77:bd:ff:90:c4:2d:f5:48:29:e8:94:a4:86: 80:98:52:3b:f9:ae:71:b7:5b:ce:10:26:77:11:62:09:35:c5: f6:76:c2:2c:7c:4c:f6:c7:fd:03:b6:90:cc:6b:89:25:05:61: 44:ac:ac:73:5b:13:f4:31:fc:84:bb:65:e8:bf:c1:a3:f9:60: 23:36:08:44:d2:f0:52:28:4f:cd:07:02:dd:45:b9:95:e7:2e: 86:a9:3b:36:b8:74:cf:a7:96:54:8c:24:df:d1:8b:16:4e:c4: 9f:b4:a2:9f:7f:ff:fe:38:bd:27:16:36:0a:2c:91:1d:16:45: 17:da:79:f0:57:00:81:23:35:29:31:10:14:d3:84:74:0e:9d: 6e:ab:4c:ae:e6:99:4d:ee:61:2f:de:2d:d0:b3:f1:91:9f:82: bf:95:31:e1:a4:08:35:c8:2d:1b:8c:29:1f:a5:e2:d3:37:90: e1:11:ed:21:90:9d:71:e3:3d:06:a4:d1:4b:28:ef:41:4c:8b: 28:17:b9:fe:94:f7:97:65:62:06:1f:9a:86:96:8c:c9:3c:49: ce:f0:28:b0:f8:05:3d:48:6f:a3:aa:f4:95:3d:fc:0d:41:4b: c5:0b:1d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07J8W2p/+T85AUZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWQ5NTNiNDAtMzM4My00M2ZlLWE2NjItMDIwNTg3NDdiYWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjoopiS8fxMFPCGgKa1pQc3/5mG93eXqEutf SgpK6xq91TPO9NU9GtmmB4E56L32BwovIROEmLJLaXzigxATuGjHir9t51uMVKP0 8PIqDIOGdP6nHVXuHKYXX48/PhhrsTztrTSLG9KngrUA/mnLqX4MZW1d+LKdvUTF ujFL9dSfqkYMVA3r3Oa6xAMckCvwdL+J+E+P5WQC4UHY/OAHck7fRQpHY+j9AT+K cw0nYJsHAekbZS5yTZrgkiFiorePUhLztVHYmjUwQuhbGdB0/wEF/9WpIi42RM3z gm/c+bN07wQXLP25v4gYGXVsB0zWKY8LiSzfS1cnJ8YwlWovEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJSIktY1qNhIJl/1aFrsSeopgJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY1ZmViOGQtOWFmOC0z ZjMxLWIxZjktNDcyMGUyZThkZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1105cK9QJDUOjqrOV/oeUXgXSHj3sod73/kMQt9Ugp6JSkhoCYUjv5 rnG3W84QJncRYgk1xfZ2wix8TPbH/QO2kMxriSUFYUSsrHNbE/Qx/IS7Zei/waP5 YCM2CETS8FIoT80HAt1FuZXnLoapOza4dM+nllSMJN/RixZOxJ+0op9///44vScW NgoskR0WRRfaefBXAIEjNSkxEBTThHQOnW6rTK7mmU3uYS/eLdCz8ZGfgr+VMeGk CDXILRuMKR+l4tM3kOER7SGQnXHjPQak0Uso70FMiygXuf6U95dlYgYfmoaWjMk8 Sc7wKLD4BT1Ib6Oq9JU9/A1BS8ULHQY= -----END CERTIFICATE-----Generated at Wed Aug 6 07:48:48 2025 by rpki-client