$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa File: 436a2f02-617b-309a-a15b-7d9578f4f892.roa (raw, json) Hash identifier: X7DzFKewVPHAfqJ4N5E9R9KxkcxxFTYm9aEC1qs2s5A= Subject key identifier: 6E:FE:A6:ED:3B:FC:55:9E:4B:00:77:8B:18:80:AB:69:F3:C3:77:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1CD8D27C12E09AEB7DD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.81.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:cd:8d:27:c1:2e:09:ae:b7:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=dd37dd91-0a5e-4aaf-9d67-4150971a5d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:7f:96:38:b1:1d:50:9f:f2:42:a4:0b:bd: 72:a0:47:ce:7e:04:6d:6e:09:4d:84:2e:84:3e:59: 29:7f:c6:e2:e2:37:a0:cf:65:1a:e6:68:86:df:0b: a3:35:8d:2f:43:ef:b8:9d:4a:3f:73:2d:a5:90:41: c2:08:d4:13:25:44:af:ea:18:40:e4:79:b1:61:31: 92:ee:7e:9e:b7:77:cf:c5:eb:cc:02:12:b0:49:7b: 97:1f:03:8f:57:43:d3:97:ab:53:93:d9:6f:52:76: 30:05:f1:46:d4:48:96:95:1f:58:92:d3:e1:ad:84: 8f:e1:2b:0e:61:f8:2e:f3:03:8b:d4:59:6b:c2:ab: 3f:89:4a:6e:bd:a8:16:88:1e:26:43:51:4d:f8:74: cb:c9:9d:c0:8a:41:45:45:21:20:b3:9a:40:49:f8: 17:84:c6:1b:41:eb:ab:c0:30:b4:fc:c3:d3:35:76: 5c:78:14:76:fb:87:1e:c5:90:31:99:2b:da:32:7a: 9a:46:d4:fa:b7:a7:7d:77:ce:fa:d5:07:27:e0:38: 13:00:7c:38:7e:0f:e9:10:bb:4c:20:b0:98:e1:af: ab:0e:56:6e:e1:c4:cc:46:af:55:c5:d2:59:48:80: ec:ea:31:d2:ed:1c:ec:b7:bd:58:fc:98:87:43:3e: e6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FE:A6:ED:3B:FC:55:9E:4B:00:77:8B:18:80:AB:69:F3:C3:77:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:39:c9:e0:1c:39:6f:b7:a6:6b:bb:b4:7a:6e:70:aa:0e:0d: 0c:b3:ec:1e:6e:93:86:26:17:4c:0a:ff:b7:ce:d8:67:2d:05: 3c:8d:c0:a1:31:72:be:f9:a2:9e:15:03:24:26:ed:ed:82:34: ac:12:03:16:72:86:79:5a:d4:74:4c:d9:88:36:cd:f1:92:fd: 17:0f:1c:dd:f9:6b:4f:66:e5:30:0f:7c:b6:6d:02:03:30:e4: cf:c2:f9:e5:2b:40:be:f1:02:87:df:f1:f9:36:c1:6f:9a:6e: 9c:cc:58:3c:97:fe:b6:fe:2b:9a:fa:64:92:ed:3b:26:ef:88: 4d:92:5a:f1:04:7b:dc:82:36:70:5e:95:9e:26:6f:5f:15:44: 50:06:4c:50:cd:01:ac:88:97:23:f4:16:23:ce:2d:9d:46:ea: 20:99:6c:91:6a:01:ed:67:c9:08:27:cc:0d:32:24:62:25:5b: 6a:81:13:0b:93:bb:9f:24:d1:09:93:b3:da:64:7a:27:6c:b3: 76:52:5a:6e:b4:e9:26:53:08:24:e6:0f:35:0c:48:ff:17:0b: f8:47:01:90:09:8d:8f:8f:f2:a7:59:01:03:d1:87:8c:7e:99: 39:e5:69:bd:47:4a:1b:0e:ac:ef:0d:59:69:e9:fe:86:04:6b: 05:c0:12:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswc2NJ8EuCa633QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGQzN2RkOTEtMGE1ZS00YWFmLTlkNjctNDE1MDk3MWE1ZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwap/ljixHVCf8kKkC71yoEfOfgRtbglNhC6E Plkpf8bi4jegz2Ua5miG3wujNY0vQ++4nUo/cy2lkEHCCNQTJUSv6hhA5HmxYTGS 7n6et3fPxevMAhKwSXuXHwOPV0PTl6tTk9lvUnYwBfFG1EiWlR9YktPhrYSP4SsO Yfgu8wOL1Flrwqs/iUpuvagWiB4mQ1FN+HTLyZ3AikFFRSEgs5pASfgXhMYbQeur wDC0/MPTNXZceBR2+4cexZAxmSvaMnqaRtT6t6d9d8761Qcn4DgTAHw4fg/pELtM ILCY4a+rDlZu4cTMRq9VxdJZSIDs6jHS7Rzst71Y/JiHQz7m0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7+pu07/FWeSwB3ixiAq2nzw3eeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM2YTJmMDItNjE3Yi0z MDlhLWExNWItN2Q5NTc4ZjRmODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB85yeAcOW+3pmu7tHpucKoODQyz7B5uk4YmF0wK/7fO2GctBTyNwKEx cr75op4VAyQm7e2CNKwSAxZyhnla1HRM2Yg2zfGS/RcPHN35a09m5TAPfLZtAgMw 5M/C+eUrQL7xAoff8fk2wW+abpzMWDyX/rb+K5r6ZJLtOybviE2SWvEEe9yCNnBe lZ4mb18VRFAGTFDNAayIlyP0FiPOLZ1G6iCZbJFqAe1nyQgnzA0yJGIlW2qBEwuT u58k0QmTs9pkeidss3ZSWm606SZTCCTmDzUMSP8XC/hHAZAJjY+P8qdZAQPRh4x+ mTnlab1HShsOrO8NWWnp/oYEawXAEto= -----END CERTIFICATE-----Generated at Sun Aug 24 02:24:29 2025 by rpki-client