$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b317740-531b-36ce-80ad-0eca433fdeb5.roa File: 3b317740-531b-36ce-80ad-0eca433fdeb5.roa (raw, json) Hash identifier: u5X5jOIlae0dE/fMKtbkaIGUYxkPl2pXhw4Dv8UXCOA= Subject key identifier: D1:0D:9A:44:4B:C7:18:53:2F:E7:23:97:DC:A9:AE:8E:42:2E:61:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC439D788D590354BD75BE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b317740-531b-36ce-80ad-0eca433fdeb5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.38.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:39:d7:88:d5:90:35:4b:d7:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ea9e578d-215e-4206-81db-175d010e6e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:69:56:05:d5:74:77:0d:f2:af:db:eb:0f: ec:ca:ed:0e:68:b7:aa:72:75:41:ae:9b:3c:25:79: f4:50:e7:27:03:65:d0:6b:3b:bf:d6:d0:5e:9f:74: c0:66:37:84:cd:86:3a:ba:77:3e:e8:60:a2:fa:9c: 49:34:a7:f4:e6:6a:96:04:46:72:2b:68:ca:79:51: cc:73:18:fc:c6:a2:84:bf:22:4b:85:f2:fe:75:22: 0f:00:bf:45:3b:7e:94:0b:b3:46:10:27:81:a8:9a: 7f:a6:dc:f5:ba:f6:77:67:0b:c1:05:c7:cf:75:75: ae:16:af:bd:34:df:b3:00:3d:11:f3:5c:e0:a1:0a: 90:39:a2:bc:cc:15:49:6f:ee:4e:dc:50:11:df:62: 17:d7:63:bf:d8:f4:e1:3a:5a:69:4a:21:7e:60:0f: 23:41:36:f0:7b:bb:d0:73:ad:80:cc:63:e6:b9:0d: aa:8a:5b:c8:0d:ba:64:fb:38:09:e7:11:1d:46:fc: ec:01:c7:0e:df:26:7c:81:27:30:0d:a0:88:a0:ab: 91:30:d4:79:11:23:cc:b8:4b:3b:3c:3a:49:b7:ab: dd:ff:a0:1b:73:df:a0:7c:37:f7:0e:2a:c3:6f:f4: ab:47:90:3e:40:cb:1f:6c:73:0b:e0:9e:29:40:e5: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0D:9A:44:4B:C7:18:53:2F:E7:23:97:DC:A9:AE:8E:42:2E:61:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b317740-531b-36ce-80ad-0eca433fdeb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2d:ba:01:c6:d8:20:00:8d:c0:83:d0:ab:3b:28:39:67:68: 3c:6e:32:86:cc:08:3e:06:db:9b:56:b1:f7:fe:86:a3:e3:00: 4e:c8:1d:87:60:5c:31:26:e8:3f:24:14:ec:73:f2:8e:26:4d: 76:af:8f:5a:e8:46:ba:d2:d9:b4:94:6d:00:60:48:e9:cc:10: 17:6c:e3:42:05:81:12:dc:be:48:32:4e:81:85:c0:aa:0a:cc: 75:68:7f:e1:62:42:1c:2a:ac:95:c1:86:c8:df:ad:68:2a:5d: af:39:3d:97:32:fe:e1:df:32:d3:30:3b:03:66:4d:e6:0a:0b: 51:2a:f9:e0:74:27:01:7e:f6:af:38:a7:29:b0:95:f5:77:69: 0c:09:8d:a8:8d:ea:f6:86:05:2a:79:c6:78:9b:6c:4b:b7:e4: 61:de:c8:03:ec:5b:a4:aa:45:32:ce:7a:4d:da:68:fe:d4:20: b6:22:fd:30:14:75:69:da:49:24:0a:0d:d6:c5:1c:d3:97:e2: 3d:c7:94:7a:a4:cc:0e:07:d8:89:f2:c9:7c:b8:fc:b0:50:ac: 8d:f7:53:74:df:0a:ce:9b:a9:d8:32:7a:56:9f:65:64:22:70: b5:49:2c:ef:09:20:e1:47:f5:14:4d:96:3b:d8:31:65:a6:5b: 84:d4:b3:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDnXiNWQNUvXW+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWE5ZTU3OGQtMjE1ZS00MjA2LTgxZGItMTc1ZDAxMGU2ZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLxpVgXVdHcN8q/b6w/syu0OaLeqcnVBrps8 JXn0UOcnA2XQazu/1tBen3TAZjeEzYY6unc+6GCi+pxJNKf05mqWBEZyK2jKeVHM cxj8xqKEvyJLhfL+dSIPAL9FO36UC7NGECeBqJp/ptz1uvZ3ZwvBBcfPdXWuFq+9 NN+zAD0R81zgoQqQOaK8zBVJb+5O3FAR32IX12O/2PThOlppSiF+YA8jQTbwe7vQ c62AzGPmuQ2qilvIDbpk+zgJ5xEdRvzsAccO3yZ8gScwDaCIoKuRMNR5ESPMuEs7 PDpJt6vd/6Abc9+gfDf3DirDb/SrR5A+QMsfbHML4J4pQOXb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNENmkRLxxhTL+cjl9ypro5CLmEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IzMTc3NDAtNTMxYi0z NmNlLTgwYWQtMGVjYTQzM2ZkZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCY6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0tugHG2CAAjcCD0Ks7KDlnaDxuMobMCD4G25tWsff+hqPjAE7IHYdg XDEm6D8kFOxz8o4mTXavj1roRrrS2bSUbQBgSOnMEBds40IFgRLcvkgyToGFwKoK zHVof+FiQhwqrJXBhsjfrWgqXa85PZcy/uHfMtMwOwNmTeYKC1Eq+eB0JwF+9q84 pymwlfV3aQwJjaiN6vaGBSp5xnibbEu35GHeyAPsW6SqRTLOek3aaP7UILYi/TAU dWnaSSQKDdbFHNOX4j3HlHqkzA4H2InyyXy4/LBQrI33U3TfCs6bqdgyelafZWQi cLVJLO8JIOFH9RRNljvYMWWmW4TUs9I= -----END CERTIFICATE-----Generated at Sun Aug 24 02:29:53 2025 by rpki-client