$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fed5b06-4146-382c-9461-8a93dad3d029.roa File: 2fed5b06-4146-382c-9461-8a93dad3d029.roa (raw, json) Hash identifier: i0PzxG8ASnDR0WwM1RCklRlmE+Mn3f7WimuVXlDYIbw= Subject key identifier: 15:5E:A2:C3:CD:7B:89:C5:D0:8D:20:D8:1A:A1:CE:81:6F:05:7B:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC22B48206668E1B1A9E5B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fed5b06-4146-382c-9461-8a93dad3d029.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.38.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:2b:48:20:66:68:e1:b1:a9:e5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=27d71627-b2aa-49f7-bed2-beda19b492c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:d9:45:34:24:c6:0f:58:e3:e0:b8:d2:42: 24:50:10:b8:fe:02:64:59:35:cc:b9:b8:c7:07:a9: 6e:f1:bb:ef:3b:42:64:bb:6d:04:b2:cd:99:43:e2: e3:2e:4e:aa:8e:0d:17:df:8d:ea:75:38:21:86:00: 8b:dd:58:6a:e6:d3:4a:f2:29:53:62:fa:02:8f:75: 90:15:0e:98:26:01:49:63:06:96:37:0c:ea:a0:f4: 04:c6:65:89:25:22:26:44:7e:ca:a2:ed:c8:19:b9: 93:ea:23:a1:e7:67:ae:fd:78:18:95:c1:9e:7e:c8: e1:bd:02:79:9b:e1:8f:03:50:84:35:ed:95:40:45: 2f:36:06:15:c9:83:f8:de:e4:31:e2:27:da:c1:7a: 9b:5a:11:c9:a6:18:90:24:fc:20:45:98:4c:0e:d7: 94:4b:d9:e6:fc:eb:75:8d:c7:86:3c:73:02:90:78: 63:75:91:7d:27:bd:c4:11:d8:dd:be:5d:ca:82:21: dd:ac:1d:84:7a:2d:91:c1:ac:11:78:c3:03:44:b3: f3:9c:6a:b3:68:c5:2d:f6:a2:3e:ba:ad:07:73:d4: 48:df:be:41:ce:a5:53:a5:1b:01:fe:de:61:88:67: 42:dd:36:59:8b:26:81:ad:87:08:e1:1b:9d:0c:35: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5E:A2:C3:CD:7B:89:C5:D0:8D:20:D8:1A:A1:CE:81:6F:05:7B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fed5b06-4146-382c-9461-8a93dad3d029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:41:a8:31:94:9d:a0:17:e4:5d:c0:d5:f7:62:48:9c:ee:6a: 9a:53:3e:ec:36:42:b2:71:9d:6d:94:1d:88:7c:bf:02:9d:46: c4:52:f0:e8:98:b1:2e:85:49:a4:07:a1:d1:11:2e:a6:d7:f0: 46:2f:43:07:36:6c:75:03:c1:8c:41:58:25:27:5c:5b:0a:3f: 3f:04:6b:87:59:3f:55:00:0f:51:b6:cf:72:e0:32:fa:a4:00: de:ed:d5:e9:66:3d:ca:1c:22:93:26:0f:99:7f:53:3b:41:13: a0:b6:9b:d5:0d:0d:7e:7f:6d:0d:ef:d1:ae:87:94:14:fe:72: 77:13:92:ca:90:72:b0:28:ca:94:b2:13:34:90:32:f9:df:51: f8:c2:56:92:31:94:b1:9f:75:1a:0b:24:72:e9:bf:c1:df:a2: 6e:96:8e:91:b5:83:cf:84:1a:b7:79:b4:d2:50:b9:56:bd:13: a1:6d:e9:c1:6a:e5:8c:b4:a8:1b:9a:dc:1f:7b:d9:d9:46:fe: 10:6d:7b:68:fa:62:bf:32:8d:98:a0:fd:7e:12:30:e6:e3:3b: cd:a4:4a:6b:bf:e3:32:e6:1c:1a:dd:fb:8f:a1:f0:00:a6:cb: 1a:dd:3f:0d:db:d5:4c:b1:ad:fe:35:21:84:1f:8e:34:32:f1: 9b:aa:47:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswitIIGZo4bGp5bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjdkNzE2MjctYjJhYS00OWY3LWJlZDItYmVkYTE5YjQ5MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdjZRTQkxg9Y4+C40kIkUBC4/gJkWTXMubjH B6lu8bvvO0Jku20Ess2ZQ+LjLk6qjg0X343qdTghhgCL3Vhq5tNK8ilTYvoCj3WQ FQ6YJgFJYwaWNwzqoPQExmWJJSImRH7Kou3IGbmT6iOh52eu/XgYlcGefsjhvQJ5 m+GPA1CENe2VQEUvNgYVyYP43uQx4ifawXqbWhHJphiQJPwgRZhMDteUS9nm/Ot1 jceGPHMCkHhjdZF9J73EEdjdvl3KgiHdrB2Eei2RwawReMMDRLPznGqzaMUt9qI+ uq0Hc9RI375BzqVTpRsB/t5hiGdC3TZZiyaBrYcI4RudDDUg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVeosPNe4nF0I0g2BqhzoFvBXvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZlZDViMDYtNDE0Ni0z ODJjLTk0NjEtOGE5M2RhZDNkMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdBqDGUnaAX5F3A1fdiSJzuappTPuw2QrJxnW2UHYh8vwKdRsRS8OiY sS6FSaQHodERLqbX8EYvQwc2bHUDwYxBWCUnXFsKPz8Ea4dZP1UAD1G2z3LgMvqk AN7t1elmPcocIpMmD5l/UztBE6C2m9UNDX5/bQ3v0a6HlBT+cncTksqQcrAoypSy EzSQMvnfUfjCVpIxlLGfdRoLJHLpv8Hfom6WjpG1g8+EGrd5tNJQuVa9E6Ft6cFq 5Yy0qBua3B972dlG/hBte2j6Yr8yjZig/X4SMObjO82kSmu/4zLmHBrd+4+h8ACm yxrdPw3b1Uyxrf41IYQfjjQy8ZuqR30= -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:14 2025 by rpki-client