$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb19f30-c3c3-3803-8daa-0a905885557d.roa File: 3eb19f30-c3c3-3803-8daa-0a905885557d.roa (raw, json) Hash identifier: EMm+TSIqhNr+P6EfziOhEZ4mx/tCqZyduEVVWpxzQmE= Subject key identifier: F5:86:9F:E4:4E:F3:9A:15:85:1D:5D:F4:80:F6:D1:3B:43:EE:AC:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC236F801C38DD6692F0B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb19f30-c3c3-3803-8daa-0a905885557d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.45.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:36:f8:01:c3:8d:d6:69:2f:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=12e04bf5-7897-47ec-998b-8df07c204519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:8f:6f:00:e9:ba:35:46:e1:50:b4:ce:f9: 72:5e:71:4e:17:d5:e8:08:60:2e:8a:b7:6c:75:14: 7e:86:53:4a:9d:82:60:7c:b6:bc:20:5b:ac:9d:6d: 9a:21:47:85:f1:d3:e9:0a:82:25:65:6b:d2:c0:7b: 45:2f:87:e8:bb:40:f2:6d:60:b6:68:3d:bc:a4:7a: e2:29:ec:03:73:1a:0a:69:52:31:72:40:14:8a:1a: 86:d9:22:af:ad:0c:bd:0d:32:da:a6:c8:aa:fa:b8: 25:39:a4:af:71:92:00:56:80:3a:8f:93:58:40:50: 2b:52:cf:a3:d2:33:04:36:a7:8d:5d:21:f3:36:35: 40:7b:25:42:5e:4c:f9:b6:58:76:0e:3c:66:e3:08: e0:cc:5c:94:9b:a5:4e:58:3f:ff:41:c5:b7:26:05: f8:c8:5b:2c:96:4b:3b:6e:7a:24:6c:dd:04:17:c0: 38:d7:2d:c8:42:f0:50:8f:d7:65:fe:b4:4a:05:38: 51:58:8b:3b:8e:2c:8d:9a:77:8d:56:a0:cf:82:e4: 18:53:3f:48:92:4a:30:69:a6:42:28:c9:de:ad:e1: 90:f3:89:0a:9b:52:f5:e7:d9:18:09:61:84:7a:38: ec:53:4e:31:91:96:af:c1:ef:27:2a:85:a1:a0:5c: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:86:9F:E4:4E:F3:9A:15:85:1D:5D:F4:80:F6:D1:3B:43:EE:AC:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb19f30-c3c3-3803-8daa-0a905885557d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:2b:03:d5:50:84:8e:ca:c2:ba:d5:41:b5:63:23:1e:ac:2e: 9f:f1:21:8b:4c:3d:6a:3d:e6:2b:e2:99:88:6f:97:ed:82:35: 5a:fe:c5:58:44:ee:ab:c2:c3:b8:7a:f2:79:46:7c:bd:8d:48: 2d:95:74:9e:7d:fb:78:5e:d9:72:ae:09:70:2e:28:e5:2a:f0: ce:59:40:aa:be:5a:f4:a5:7d:c8:96:38:7b:58:a4:6e:f5:52: 0b:06:cd:10:b1:5f:a2:13:79:dc:4c:6c:9b:ee:0d:e3:f3:86: de:97:3f:97:e1:60:32:6a:dc:ff:eb:32:3a:13:3a:79:35:ab: 85:c8:45:75:de:9b:b9:2a:79:b6:0f:94:2f:5e:b5:3b:01:f2: ea:89:3d:e8:32:13:69:9a:56:e0:da:9f:ae:10:d8:aa:8d:c7: 8b:85:c9:ae:0a:ad:28:ac:d9:a7:0d:0f:08:33:b0:c8:0a:7a: 6e:e1:da:6d:42:88:2a:d1:d3:59:a4:d5:bf:6f:62:e5:96:21: 02:1c:fc:38:da:d1:45:a3:2e:d5:43:33:6a:16:7d:59:d1:51: ab:09:3b:71:ed:ea:03:c9:7b:11:ff:49:c2:d8:45:6c:23:62: f7:09:3e:de:b0:20:a5:12:13:75:fe:aa:1c:79:64:68:2f:5b: fa:1d:6a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswjb4AcON1mkvCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTJlMDRiZjUtNzg5Ny00N2VjLTk5OGItOGRmMDdjMjA0NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVuPbwDpujVG4VC0zvlyXnFOF9XoCGAuirds dRR+hlNKnYJgfLa8IFusnW2aIUeF8dPpCoIlZWvSwHtFL4fou0DybWC2aD28pHri KewDcxoKaVIxckAUihqG2SKvrQy9DTLapsiq+rglOaSvcZIAVoA6j5NYQFArUs+j 0jMENqeNXSHzNjVAeyVCXkz5tlh2Djxm4wjgzFyUm6VOWD//QcW3JgX4yFsslks7 bnokbN0EF8A41y3IQvBQj9dl/rRKBThRWIs7jiyNmneNVqDPguQYUz9IkkowaaZC KMnereGQ84kKm1L159kYCWGEejjsU04xkZavwe8nKoWhoFxvBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWGn+RO85oVhR1d9ID20TtD7qy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ViMTlmMzAtYzNjMy0z ODAzLThkYWEtMGE5MDU4ODU1NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgrA9VQhI7KwrrVQbVjIx6sLp/xIYtMPWo95ivimYhvl+2CNVr+xVhE 7qvCw7h68nlGfL2NSC2VdJ59+3he2XKuCXAuKOUq8M5ZQKq+WvSlfciWOHtYpG71 UgsGzRCxX6ITedxMbJvuDePzht6XP5fhYDJq3P/rMjoTOnk1q4XIRXXem7kqebYP lC9etTsB8uqJPegyE2maVuDan64Q2KqNx4uFya4KrSis2acNDwgzsMgKem7h2m1C iCrR01mk1b9vYuWWIQIc/Dja0UWjLtVDM2oWfVnRUasJO3Ht6gPJexH/ScLYRWwj YvcJPt6wIKUSE3X+qhx5ZGgvW/odarc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:02:40 2025 by rpki-client