$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b13f00-8f08-3b64-b7d3-3acad20d2c40.roa File: 10b13f00-8f08-3b64-b7d3-3acad20d2c40.roa (raw, json) Hash identifier: dl1yfHYLutPFejOEx9Jtv3gYbUd6Rza+PT6E0Dscb20= Subject key identifier: EF:83:CC:4A:21:C8:12:24:4A:2B:5B:40:37:2C:15:58:50:6B:67:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031C0CDFBDD3CB6E45B5B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b13f00-8f08-3b64-b7d3-3acad20d2c40.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 68.35.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:c0:cd:fb:dd:3c:b6:e4:5b:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=3b4df29c-fa1b-407c-a774-3e68d8f30cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:10:03:e6:c8:c2:53:22:18:88:73:f2:f6: d4:4f:4b:4f:02:af:12:a8:c7:3b:4b:55:70:a3:ce: 8a:0f:18:05:70:a7:7a:65:f1:14:ad:3c:47:f5:23: 98:3f:f4:fa:bc:49:cd:4e:96:45:4d:aa:ae:72:96: c6:33:2d:72:7e:90:52:09:89:f7:c2:c8:c4:a0:2a: fe:bb:b2:6b:88:38:79:80:4a:c3:cd:e0:e4:14:d2: ff:06:92:1e:da:7a:8f:9d:30:92:ef:fa:66:b6:83: 59:99:07:e1:d4:0b:58:76:be:3d:da:4f:b4:ae:2e: 4f:11:0b:e4:21:35:20:92:40:00:50:13:5d:a6:62: b5:24:0d:5e:12:8c:c2:3f:1d:bc:e1:76:fb:d1:df: 8c:d4:90:0d:f6:51:f1:62:b2:83:01:8f:12:98:f9: c8:70:7e:52:4d:e2:33:52:b2:43:c7:6d:43:b2:de: fa:4b:c3:2c:fe:b8:3f:b0:78:4a:9e:e0:60:d7:08: 56:98:de:7e:09:a7:fc:3c:ff:eb:16:d0:81:1a:86: 01:fe:58:c9:5e:3d:82:24:3f:c7:96:f6:e0:8b:90: c7:8a:1b:17:33:b7:6b:4c:eb:da:33:3a:3c:42:3c: 9a:bd:9c:59:f8:95:9f:8d:9d:59:71:48:a7:6e:91: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:83:CC:4A:21:C8:12:24:4A:2B:5B:40:37:2C:15:58:50:6B:67:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b13f00-8f08-3b64-b7d3-3acad20d2c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e9:2f:cb:46:75:e6:48:83:41:3a:49:94:7d:e9:88:0f:a1: e7:b9:be:cb:be:0b:02:9e:18:8c:13:f2:85:1b:66:c3:9a:95: 25:87:ca:ef:d4:41:79:92:0e:a2:11:fb:d7:ba:9b:61:74:10: 65:97:1b:0d:94:ae:92:90:ec:63:64:17:6d:cf:fd:01:5a:85: 1c:06:b9:e9:31:5f:7a:15:3b:97:ba:3e:39:ea:c8:f7:6d:04: e8:68:23:6e:bf:55:56:8c:77:b0:d2:8a:5e:8f:85:7c:ed:b2: 34:0d:4a:08:73:00:d4:44:fa:c1:87:90:8e:8d:c4:33:9c:f3: f5:57:d7:f3:4c:e4:ed:de:05:d3:cb:58:1d:0e:e2:d9:5f:32: 54:dd:d7:33:4c:50:a9:d3:55:3b:d6:53:92:67:8e:ab:a3:50: 63:26:81:6b:42:a7:85:bb:6f:a2:77:9f:98:0f:24:85:16:79: 34:9e:53:cf:aa:37:8a:fe:86:28:45:97:a1:25:d9:68:a1:3a: 02:6e:83:98:ea:bf:3b:74:4b:b1:2e:ca:63:8d:b9:7a:ea:1c: 62:8a:6e:ac:52:dd:a5:d0:27:7f:90:b9:28:5e:59:86:a8:29: cf:62:92:e2:46:1c:68:e9:a0:1f:74:90:f3:5e:06:97:9c:6e: 44:cd:ac:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMcDN+908tuRbW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk M2I0ZGYyOWMtZmExYi00MDdjLWE3NzQtM2U2OGQ4ZjMwY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01MQA+bIwlMiGIhz8vbUT0tPAq8SqMc7S1Vw o86KDxgFcKd6ZfEUrTxH9SOYP/T6vEnNTpZFTaqucpbGMy1yfpBSCYn3wsjEoCr+ u7JriDh5gErDzeDkFNL/BpIe2nqPnTCS7/pmtoNZmQfh1AtYdr492k+0ri5PEQvk ITUgkkAAUBNdpmK1JA1eEozCPx284Xb70d+M1JAN9lHxYrKDAY8SmPnIcH5STeIz UrJDx21Dst76S8Ms/rg/sHhKnuBg1whWmN5+Caf8PP/rFtCBGoYB/ljJXj2CJD/H lvbgi5DHihsXM7drTOvaMzo8QjyavZxZ+JWfjZ1ZcUinbpEg6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+DzEohyBIkSitbQDcsFVhQa2eeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTBiMTNmMDAtOGYwOC0z YjY0LWI3ZDMtM2FjYWQyMGQyYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPpL8tGdeZIg0E6SZR96YgPoee5vsu+CwKeGIwT8oUbZsOalSWHyu/U QXmSDqIR+9e6m2F0EGWXGw2UrpKQ7GNkF23P/QFahRwGuekxX3oVO5e6PjnqyPdt BOhoI26/VVaMd7DSil6PhXztsjQNSghzANRE+sGHkI6NxDOc8/VX1/NM5O3eBdPL WB0O4tlfMlTd1zNMUKnTVTvWU5JnjqujUGMmgWtCp4W7b6J3n5gPJIUWeTSeU8+q N4r+hihFl6El2WihOgJug5jqvzt0S7EuymONuXrqHGKKbqxS3aXQJ3+QuSheWYao Kc9ikuJGHGjpoB90kPNeBpecbkTNrG8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:41:04 2025 by rpki-client