$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e000f52-94cb-31bc-95e5-70b6a5e3ca91.roa File: 3e000f52-94cb-31bc-95e5-70b6a5e3ca91.roa (raw, json) Hash identifier: RGZFAfwyoVngp8gue/VDAO7eZj73WQD/1w15HQda/mQ= Subject key identifier: 5F:EB:D0:26:AC:1F:75:B3:BA:8D:D2:43:C1:84:16:80:B0:F5:9D:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC931F75FCCB5AFCFF91C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e000f52-94cb-31bc-95e5-70b6a5e3ca91.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.32.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:93:1f:75:fc:cb:5a:fc:ff:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=f3eb424f-f5ab-4542-a491-5d562d41dd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:94:ed:3a:7a:c5:be:cb:55:93:a7:ab:dc: d8:c5:b0:2a:b1:94:c1:23:24:f9:6e:91:4d:35:ef: a9:af:6d:01:c9:8b:7f:47:38:f6:fe:2a:c2:75:0f: 64:e5:29:40:7f:58:20:57:e0:1c:70:0e:ca:62:b8: f0:5f:32:b8:64:ec:2e:23:f8:5d:b5:a7:d0:ec:c4: 5d:0f:fb:d8:c3:9f:8b:d3:51:40:d6:48:6a:08:44: 4a:c5:dd:b1:21:62:2e:58:d6:5a:87:65:c4:c0:c3: 11:a5:7c:97:fd:5c:e6:a3:e0:0a:1c:65:22:3d:c7: f2:db:92:80:86:c3:f8:61:09:ec:0e:c7:f0:f2:52: 63:15:f1:5a:f6:a0:18:17:66:2f:00:ec:ae:a8:fe: 44:2e:4f:ff:eb:bf:be:d3:29:0d:23:2b:ca:b7:f0: ff:ad:64:e0:4a:4e:c6:bb:f4:65:b6:75:5d:8c:0a: d5:9f:b4:f6:2a:1d:da:9e:60:11:a5:38:86:16:24: 7f:ed:5c:e2:e3:8d:84:94:ff:95:bb:4f:40:60:e7: 66:1a:8f:ed:09:97:21:ad:b5:c0:3b:28:61:72:08: 56:80:29:a8:a8:46:32:0b:4e:24:cf:e8:06:f9:a1: 23:a8:6f:a4:c3:10:05:91:69:56:a7:5d:54:80:19: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:D0:26:AC:1F:75:B3:BA:8D:D2:43:C1:84:16:80:B0:F5:9D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e000f52-94cb-31bc-95e5-70b6a5e3ca91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:24:a5:5a:34:f2:b4:01:d7:66:30:cb:f9:65:de:f8:7e:6f: 7d:f7:58:51:0d:24:0b:21:00:14:35:e6:27:c1:4a:b5:9b:ee: 3a:5c:61:d0:7b:74:fd:1e:56:63:db:19:97:dd:04:b9:bd:03: ce:49:80:0a:a3:85:d5:e3:b1:c7:a1:b0:87:e8:de:dd:c2:bb: 5c:0e:bc:88:d6:f5:9b:44:e2:6c:0c:f1:a6:9f:df:83:67:ee: 77:b4:cc:4b:a1:f0:5e:05:33:fe:b6:94:f3:1b:74:82:86:c3: ba:71:be:49:b8:4a:f7:21:57:26:52:2d:9a:fb:73:73:fb:8f: 00:50:01:09:bf:fc:be:77:bd:ed:dc:81:53:6a:eb:49:06:53: 12:fe:aa:e4:45:8c:d5:2f:39:b6:13:9c:ab:e2:80:ea:93:43: c0:39:75:ac:3c:21:c7:93:ce:f4:31:b3:45:15:50:df:75:ff: 08:ee:e6:c1:c0:05:8e:f8:dd:e1:f9:fb:61:eb:7c:fd:37:19: 31:1b:4f:cc:df:b3:5d:3c:35:82:d6:44:85:56:58:01:e8:91: 8e:cb:ac:49:96:b6:1d:66:fb:08:65:ef:da:c3:0e:8d:67:35: 01:49:09:c5:eb:ab:ef:37:a7:c5:a3:73:a3:13:10:9e:29:b3: 2e:cf:74:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JMfdfzLWvz/kcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjNlYjQyNGYtZjVhYi00NTQyLWE0OTEtNWQ1NjJkNDFkZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjyU7Tp6xb7LVZOnq9zYxbAqsZTBIyT5bpFN Ne+pr20ByYt/Rzj2/irCdQ9k5SlAf1ggV+AccA7KYrjwXzK4ZOwuI/hdtafQ7MRd D/vYw5+L01FA1khqCERKxd2xIWIuWNZah2XEwMMRpXyX/Vzmo+AKHGUiPcfy25KA hsP4YQnsDsfw8lJjFfFa9qAYF2YvAOyuqP5ELk//67++0ykNIyvKt/D/rWTgSk7G u/RltnVdjArVn7T2Kh3anmARpTiGFiR/7Vzi442ElP+Vu09AYOdmGo/tCZchrbXA OyhhcghWgCmoqEYyC04kz+gG+aEjqG+kwxAFkWlWp11UgBk8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/r0CasH3Wzuo3SQ8GEFoCw9Z0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UwMDBmNTItOTRjYi0z MWJjLTk1ZTUtNzBiNmE1ZTNjYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4kpVo08rQB12Ywy/ll3vh+b333WFENJAshABQ15ifBSrWb7jpcYdB7 dP0eVmPbGZfdBLm9A85JgAqjhdXjscehsIfo3t3Cu1wOvIjW9ZtE4mwM8aaf34Nn 7ne0zEuh8F4FM/62lPMbdIKGw7pxvkm4SvchVyZSLZr7c3P7jwBQAQm//L53ve3c gVNq60kGUxL+quRFjNUvObYTnKvigOqTQ8A5daw8IceTzvQxs0UVUN91/wju5sHA BY743eH5+2HrfP03GTEbT8zfs108NYLWRIVWWAHokY7LrEmWth1m+whl79rDDo1n NQFJCcXrq+83p8Wjc6MTEJ4psy7PdLA= -----END CERTIFICATE-----Generated at Sun Aug 24 02:32:31 2025 by rpki-client