$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0222cace-566b-37e6-9c01-e898b90b6e99.roa File: 0222cace-566b-37e6-9c01-e898b90b6e99.roa (raw, json) Hash identifier: ZWvy4bSGb1nbvyf12N+VlkwsUYgJ7N6iWj2aa5G+7cU= Subject key identifier: 91:CE:40:63:60:30:AD:3C:C6:BC:5D:5B:F6:7E:06:14:64:22:6D:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC229840BAB886FD8A22880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0222cace-566b-37e6-9c01-e898b90b6e99.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.38.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:29:84:0b:ab:88:6f:d8:a2:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5721a59c-40d6-450d-8b8e-4374e9063d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:c1:34:8c:5e:e0:f5:6b:89:48:b0:e2:05: ab:d3:31:ce:4a:de:32:a5:73:38:9f:79:f3:ec:79: fc:c3:b5:c5:6d:b3:fe:25:72:5b:aa:50:7b:33:31: 2b:47:a2:2a:af:e7:71:47:7e:cb:ac:e9:91:69:4e: e3:cc:78:01:61:d2:28:79:2b:61:b8:f1:40:ba:67: cd:05:98:6a:31:4b:64:26:a1:05:d8:a6:f1:1c:9c: 5d:21:15:38:b8:cb:86:0a:47:ed:c2:4c:c6:3d:59: 2a:88:1c:d3:ca:78:3d:cd:93:82:14:dc:c0:40:15: 84:74:f9:15:05:78:5f:0c:06:52:ec:5d:65:06:85: c5:68:18:36:39:ca:84:e4:35:1c:1c:88:2a:fb:ad: 3a:61:75:77:f3:06:d3:cf:90:fe:37:f3:22:ba:60: 46:eb:8b:a5:2f:3b:50:d8:b9:b4:37:7a:95:d7:2f: b2:39:cf:b2:37:ce:4d:34:e6:7b:c7:74:61:21:d8: 0f:9b:21:df:26:8f:75:d8:38:d9:18:ee:41:f2:bf: 47:05:34:7e:32:c5:77:94:88:3b:f2:61:75:43:7b: 0f:7a:27:eb:93:3f:6d:7e:0a:9c:dc:3a:dc:14:51: de:d6:f1:78:e4:7a:a0:ac:13:4c:bb:ec:e8:3f:1a: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:40:63:60:30:AD:3C:C6:BC:5D:5B:F6:7E:06:14:64:22:6D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0222cace-566b-37e6-9c01-e898b90b6e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:13:c0:68:58:69:9a:19:6e:05:31:3b:dc:7f:e3:19:f2:b2: 5a:90:52:0f:70:02:fd:e0:ed:47:dc:8f:d2:b9:f4:4c:61:f1: 87:dc:77:c3:10:bc:fc:1c:53:9d:0b:03:d3:af:be:98:38:2a: 58:af:c3:b4:20:ee:20:43:b0:5e:9b:85:41:56:05:8c:75:57: ca:5b:13:09:ad:63:ef:17:60:04:c7:12:27:11:21:c7:ba:20: 29:0c:af:c4:a0:f6:a3:4d:fc:7b:08:e3:11:d0:66:98:e1:1b: eb:99:ba:10:2b:e6:81:e5:53:2a:72:c4:1d:ca:1b:d8:d2:be: b4:7c:03:76:e0:dc:41:ef:ad:33:5c:34:23:47:a6:20:9e:64: cc:f1:42:87:64:8f:60:60:88:45:de:8f:74:0f:2c:78:c7:be: 5e:fc:32:10:f2:ae:1d:d8:9c:b7:4a:21:49:10:86:ac:af:1f: b3:2b:85:9e:86:a0:90:f8:85:d3:8f:32:c6:27:e4:29:96:3e: f7:67:7f:40:f2:30:76:ea:92:df:53:dd:e0:dd:76:77:36:b3: f8:5f:ed:77:b0:d2:68:70:74:68:bb:51:12:65:86:e8:7c:d6: 29:85:87:a0:e9:72:ee:ca:8f:6e:17:8b:48:2a:cc:7b:bf:6a: aa:23:62:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswimEC6uIb9iiKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTcyMWE1OWMtNDBkNi00NTBkLThiOGUtNDM3NGU5MDYzZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3/BNIxe4PVriUiw4gWr0zHOSt4ypXM4n3nz 7Hn8w7XFbbP+JXJbqlB7MzErR6Iqr+dxR37LrOmRaU7jzHgBYdIoeSthuPFAumfN BZhqMUtkJqEF2KbxHJxdIRU4uMuGCkftwkzGPVkqiBzTyng9zZOCFNzAQBWEdPkV BXhfDAZS7F1lBoXFaBg2OcqE5DUcHIgq+606YXV38wbTz5D+N/MiumBG64ulLztQ 2Lm0N3qV1y+yOc+yN85NNOZ7x3RhIdgPmyHfJo912DjZGO5B8r9HBTR+MsV3lIg7 8mF1Q3sPeifrkz9tfgqc3DrcFFHe1vF45HqgrBNMu+zoPxqAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHOQGNgMK08xrxdW/Z+BhRkIm3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIyMmNhY2UtNTY2Yi0z N2U2LTljMDEtZTg5OGI5MGI2ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFETwGhYaZoZbgUxO9x/4xnyslqQUg9wAv3g7Ufcj9K59Exh8Yfcd8MQ vPwcU50LA9Ovvpg4Klivw7Qg7iBDsF6bhUFWBYx1V8pbEwmtY+8XYATHEicRIce6 ICkMr8Sg9qNN/HsI4xHQZpjhG+uZuhAr5oHlUypyxB3KG9jSvrR8A3bg3EHvrTNc NCNHpiCeZMzxQodkj2BgiEXej3QPLHjHvl78MhDyrh3YnLdKIUkQhqyvH7MrhZ6G oJD4hdOPMsYn5CmWPvdnf0DyMHbqkt9T3eDddnc2s/hf7Xew0mhwdGi7URJlhuh8 1imFh6Dpcu7Kj24Xi0gqzHu/aqojYlA= -----END CERTIFICATE-----Generated at Sun Aug 24 06:08:37 2025 by rpki-client