$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/234c17f9-c198-3cde-a86d-ca9b3fcf2075.roa File: 234c17f9-c198-3cde-a86d-ca9b3fcf2075.roa (raw, json) Hash identifier: rGD0pkpOUQH0Z1yyHbSlb8J50EIzK1ICYRptQa2ZFoo= Subject key identifier: 2B:A2:00:79:A8:DE:33:AD:87:36:EA:A7:A5:C9:87:E6:0C:AF:2B:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC23D77B0852011DF21A518 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/234c17f9-c198-3cde-a86d-ca9b3fcf2075.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.51.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:3d:77:b0:85:20:11:df:21:a5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=003115d6-747f-4d82-a2ae-be9f6491c872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:08:e9:95:69:99:90:3b:2c:83:6a:ce:35: ec:a5:dc:1f:31:88:71:be:7b:19:c1:68:54:bf:19: c5:fa:2c:47:2f:6e:f2:22:66:f1:85:b3:44:73:c3: 7c:1a:60:96:bb:fc:91:4d:4b:e3:79:6e:83:28:c6: af:10:8c:ab:dc:88:1e:55:13:35:7f:a0:7c:1f:77: 65:59:e1:43:58:09:58:2e:9d:42:ab:1a:2f:fb:37: 2e:e2:2f:d0:73:ef:b6:62:2f:19:4c:88:2e:b0:a8: 28:a7:a1:e5:3d:9b:54:35:06:7f:0d:ac:35:e0:45: df:cc:0a:5c:cd:a8:0a:d2:15:41:9f:b9:80:d5:b5: f2:00:e4:ae:c5:19:da:6e:03:16:83:e8:5d:97:ee: 58:ba:d8:fd:80:db:43:2b:2e:e4:25:b3:66:65:53: 1a:2d:50:9c:e5:c4:9f:93:26:d9:ad:16:98:0b:36: fd:26:1a:4b:97:dd:63:d6:0b:99:2f:2f:ac:4b:03: c3:1a:3e:d1:92:7b:4b:72:ff:cf:eb:80:79:a6:e6: 43:69:2c:e3:11:1e:ec:eb:9c:99:96:40:bb:b9:a4: 60:9e:02:4b:3b:17:99:a8:99:fa:1c:53:9e:85:dd: 75:ac:26:59:93:1c:89:7b:38:e7:54:7f:41:18:2c: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:00:79:A8:DE:33:AD:87:36:EA:A7:A5:C9:87:E6:0C:AF:2B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/234c17f9-c198-3cde-a86d-ca9b3fcf2075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:00:34:ec:92:f5:a6:d0:be:10:48:32:fe:eb:7b:31:24:05: cf:1e:fe:c1:65:dc:e7:41:33:97:cd:f9:35:b7:f1:e6:54:79: d8:6f:1b:50:60:ca:60:2f:aa:15:33:dc:b0:f7:e5:f6:36:8d: e8:94:e0:73:c9:4d:c7:88:97:8e:26:37:4c:a0:e6:15:f0:a6: f9:2c:09:3c:e6:de:43:27:c0:0c:60:0b:d0:58:ed:04:a1:5f: a5:aa:c9:0f:e3:7c:80:74:45:8c:fc:83:34:e4:33:dc:b0:71: a6:aa:0a:36:a8:66:03:fa:91:db:67:47:40:20:c4:be:b3:06: 64:3b:a9:60:0e:f5:2d:b3:10:b3:c3:63:4f:a2:9a:b0:28:f3: ed:2d:82:85:09:fc:d0:a4:57:e1:33:fe:08:1f:26:3d:c5:45: 2a:df:e3:cf:b7:f1:8d:1b:87:d4:90:35:8b:48:6d:d7:31:e3: f9:aa:ed:25:22:54:37:c5:d2:fd:85:58:01:e0:c3:47:d3:99: f4:80:52:76:93:f9:fb:ce:57:e7:3c:e7:1e:45:76:ec:52:f4: ac:75:aa:d7:c6:cf:79:b7:bc:02:b2:5b:10:e4:de:24:07:78: 9e:3c:d4:97:ac:b1:3d:6e:a8:20:e5:aa:45:e0:77:00:1e:cd: 05:4e:57:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswj13sIUgEd8hpRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDAzMTE1ZDYtNzQ3Zi00ZDgyLWEyYWUtYmU5ZjY0OTFjODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNAI6ZVpmZA7LINqzjXspdwfMYhxvnsZwWhU vxnF+ixHL27yImbxhbNEc8N8GmCWu/yRTUvjeW6DKMavEIyr3IgeVRM1f6B8H3dl WeFDWAlYLp1Cqxov+zcu4i/Qc++2Yi8ZTIgusKgop6HlPZtUNQZ/Daw14EXfzApc zagK0hVBn7mA1bXyAOSuxRnabgMWg+hdl+5Yutj9gNtDKy7kJbNmZVMaLVCc5cSf kybZrRaYCzb9JhpLl91j1guZLy+sSwPDGj7RkntLcv/P64B5puZDaSzjER7s65yZ lkC7uaRgngJLOxeZqJn6HFOehd11rCZZkxyJezjnVH9BGCwPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuiAHmo3jOthzbqp6XJh+YMrys8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM0YzE3ZjktYzE5OC0z Y2RlLWE4NmQtY2E5YjNmY2YyMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoANOyS9abQvhBIMv7rezEkBc8e/sFl3OdBM5fN+TW38eZUedhvG1Bg ymAvqhUz3LD35fY2jeiU4HPJTceIl44mN0yg5hXwpvksCTzm3kMnwAxgC9BY7QSh X6WqyQ/jfIB0RYz8gzTkM9ywcaaqCjaoZgP6kdtnR0AgxL6zBmQ7qWAO9S2zELPD Y0+imrAo8+0tgoUJ/NCkV+Ez/ggfJj3FRSrf48+38Y0bh9SQNYtIbdcx4/mq7SUi VDfF0v2FWAHgw0fTmfSAUnaT+fvOV+c85x5FduxS9Kx1qtfGz3m3vAKyWxDk3iQH eJ481JessT1uqCDlqkXgdwAezQVOV6A= -----END CERTIFICATE-----Generated at Sun Aug 24 01:24:37 2025 by rpki-client