$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa File: 2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa (raw, json) Hash identifier: cy4nPWYh7KnRqx6kRB0aQFYw2jd1ZnM350MRMxsL/CU= Subject key identifier: 89:84:12:C4:02:85:15:E5:32:79:C3:FE:6E:50:2A:4A:18:20:43:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC439594434012A70ADCB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.38.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:39:59:44:34:01:2a:70:ad:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e9d09d86-b81b-4648-867e-4ec01f31dbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:35:94:ed:b9:1b:6e:e1:63:d1:6f:70:3e: 0d:c2:f6:18:a9:82:fd:18:bf:73:1c:15:4e:a9:34: c1:85:e3:59:4a:a3:fe:65:7f:71:91:15:57:aa:6c: ba:32:ad:62:72:c8:08:10:36:82:0a:81:7d:53:8d: 37:5e:b6:e7:95:31:d2:6d:18:b2:73:90:49:6a:4c: 76:52:f1:5e:21:af:37:85:ec:20:64:00:2e:ec:b8: b9:9f:72:da:99:63:99:05:75:cf:ca:21:e8:0a:ea: 17:b4:f1:79:42:77:82:d9:95:aa:28:c2:5a:43:7a: 9a:40:bd:cc:be:3b:69:74:4f:68:c6:9f:46:bf:15: 4a:8e:88:15:54:9e:5b:af:cc:18:f9:55:79:77:ca: 81:c0:54:a5:23:4e:11:4a:87:b9:93:01:fe:9e:ac: 12:d0:6d:f6:1c:11:4c:31:bb:7d:4a:0c:2e:44:2c: f9:d2:6b:d2:6e:5a:93:1a:bd:7b:ab:55:a9:53:59: 0b:f8:59:e7:5b:b3:15:92:db:7a:cd:b5:59:ab:bc: 6b:38:5b:f3:bd:42:dd:e0:ac:2b:a5:31:12:9d:07: de:61:02:7a:ee:aa:d3:f1:9f:bb:71:29:94:ee:a8: 3d:49:ce:d5:a5:39:5a:10:12:30:60:0a:43:c5:16: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:12:C4:02:85:15:E5:32:79:C3:FE:6E:50:2A:4A:18:20:43:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:03:61:81:c3:93:e6:24:ca:77:5d:00:45:36:cf:4d:33:5d: a3:06:57:7b:01:a1:d6:35:0a:66:2a:2d:51:80:ee:53:cd:b4: 5f:9c:b2:f7:77:66:2f:43:91:8f:c9:e8:95:bc:64:dd:c7:97: a2:1c:06:cb:d1:44:0e:1c:fd:b5:9b:5d:2e:7c:6f:0a:5c:f1: d7:e6:99:95:11:be:5c:a5:ed:1d:0c:72:3f:54:72:89:79:51: fb:29:e6:b7:6a:8c:95:d4:18:3e:35:a9:fb:fc:e8:25:2c:82: 46:01:d1:ba:28:ee:f3:7b:e3:10:ff:e0:1b:a5:2a:1b:20:2f: 1f:af:1e:60:7d:5b:f5:ca:59:1b:70:a6:2f:f6:8f:96:8a:6e: 72:e9:6a:61:e1:20:a3:08:5d:c9:c9:b8:48:8b:d3:6c:42:b3: bb:9d:27:d0:d4:d0:d7:7d:17:d1:9b:ff:79:90:4c:e8:9b:eb: 6a:d5:ff:4d:5e:60:ab:ad:6a:2c:4f:ba:6e:b0:83:59:43:28: 59:7b:55:54:fb:c3:1f:25:19:cb:64:44:48:69:a6:00:d9:d2: 2a:d5:2a:28:3a:79:06:38:1e:75:5e:ec:b0:ea:fd:8e:26:82: 24:a1:26:8d:0c:fc:75:70:69:07:7f:20:41:52:3b:1c:90:ce: f6:95:f9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDlZRDQBKnCty4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTlkMDlkODYtYjgxYi00NjQ4LTg2N2UtNGVjMDFmMzFkYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2M1lO25G27hY9FvcD4NwvYYqYL9GL9zHBVO qTTBheNZSqP+ZX9xkRVXqmy6Mq1icsgIEDaCCoF9U403XrbnlTHSbRiyc5BJakx2 UvFeIa83hewgZAAu7Li5n3LamWOZBXXPyiHoCuoXtPF5QneC2ZWqKMJaQ3qaQL3M vjtpdE9oxp9GvxVKjogVVJ5br8wY+VV5d8qBwFSlI04RSoe5kwH+nqwS0G32HBFM Mbt9SgwuRCz50mvSblqTGr17q1WpU1kL+FnnW7MVktt6zbVZq7xrOFvzvULd4Kwr pTESnQfeYQJ67qrT8Z+7cSmU7qg9Sc7VpTlaEBIwYApDxRa/swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImEEsQChRXlMnnD/m5QKkoYIEO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFjODMwYmMtN2ZkOC0z YzdlLWFlMWYtMjM0YmEyNGMwYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcDYYHDk+YkynddAEU2z00zXaMGV3sBodY1CmYqLVGA7lPNtF+csvd3 Zi9DkY/J6JW8ZN3Hl6IcBsvRRA4c/bWbXS58bwpc8dfmmZURvlyl7R0Mcj9Ucol5 Ufsp5rdqjJXUGD41qfv86CUsgkYB0boo7vN74xD/4BulKhsgLx+vHmB9W/XKWRtw pi/2j5aKbnLpamHhIKMIXcnJuEiL02xCs7udJ9DU0Nd9F9Gb/3mQTOib62rV/01e YKutaixPum6wg1lDKFl7VVT7wx8lGctkREhppgDZ0irVKig6eQY4HnVe7LDq/Y4m giShJo0M/HVwaQd/IEFSOxyQzvaV+XE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:46:11 2025 by rpki-client