$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43ac38f4-d0d6-3a1a-8017-fc8a29040650.roa File: 43ac38f4-d0d6-3a1a-8017-fc8a29040650.roa (raw, json) Hash identifier: hYyCS/jnSHFOw79FYlckgdDeSW0OH84hbmexhKh/XyQ= Subject key identifier: 70:5C:E7:19:01:1D:9B:91:94:9B:74:35:22:09:60:45:E0:41:7A:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC43E884CDB59E859913800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43ac38f4-d0d6-3a1a-8017-fc8a29040650.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.44.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:3e:88:4c:db:59:e8:59:91:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=60af5bdc-2007-4b98-a68f-a64b62a027bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:d5:f4:5e:bc:af:48:ff:13:d2:c1:aa:ef: 32:72:e9:fa:4d:f8:cd:90:6b:70:64:03:6c:7f:e3: c2:37:ea:00:d6:47:50:57:64:62:74:7b:4d:68:f5: 20:b2:d3:33:b5:b3:fc:f9:86:f5:6f:b9:0f:48:16: e0:4e:ed:87:c0:a0:ea:49:63:a0:6a:5a:1f:b9:b6: 2e:b2:50:df:5e:fe:48:35:ad:dc:6f:b0:32:03:ed: 56:4e:58:ed:5a:c7:d2:3e:0e:fc:bb:ed:b8:61:e8: 6b:01:ed:f9:0d:e6:a3:24:5d:6f:9f:c0:da:d4:7e: 2c:06:23:dd:30:33:28:5d:b7:8a:bd:dc:16:02:3c: c6:b2:cd:d6:15:83:f5:da:4a:c5:1e:a1:36:d8:c3: 8e:83:22:34:cf:f6:a1:4b:af:5b:95:b9:7f:1f:63: 76:f9:a8:73:2e:db:de:2f:e9:bd:ef:a1:03:c6:da: d5:ec:ec:ca:cf:d9:ad:ff:1d:74:ac:ae:d9:17:59: 9f:5c:69:85:84:14:cf:d6:1c:6a:f7:27:40:c2:9b: 0d:df:41:23:cd:f5:50:64:0b:ac:1f:5a:19:b4:db: 75:e6:d2:7a:8e:13:ff:e9:cf:18:3c:43:3a:dd:a4: 5d:24:07:44:82:51:05:8d:6e:61:01:ba:68:0f:8e: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:E7:19:01:1D:9B:91:94:9B:74:35:22:09:60:45:E0:41:7A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43ac38f4-d0d6-3a1a-8017-fc8a29040650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b8:30:97:b3:1c:91:9a:a6:4d:69:0b:d2:8c:ab:67:38:f4: 06:bc:ed:23:2b:92:dc:61:55:a7:dc:9c:3a:f9:bd:d7:e4:50: b5:e4:36:21:1e:38:a9:de:bc:c2:d6:b7:8b:f8:9f:4d:4e:b2: 1f:68:41:4a:f2:94:9d:1f:d0:12:ab:5c:10:c5:e3:1f:38:61: 86:0a:0b:a7:fb:67:d5:16:61:47:24:11:47:e7:95:06:33:be: eb:2d:72:eb:99:65:c2:fe:a8:0d:d7:4a:50:0a:5b:d5:6d:71: 39:a7:fc:3c:c7:e0:b6:61:4d:d8:6e:6e:0c:83:10:f0:43:91: 23:c0:31:08:48:e9:e3:d0:26:48:77:ac:15:3a:a9:53:ac:14: e3:97:96:62:4d:1f:dc:ef:db:92:25:ad:4b:0e:0d:8a:81:88: 41:fe:37:7c:7b:6c:8f:b2:33:f3:06:be:87:e5:bb:38:75:2b: d7:04:19:38:ed:fe:06:44:db:48:ac:b5:a4:0f:4c:63:ea:3d: 06:1f:23:ee:c7:83:36:43:87:75:72:a2:a8:c0:09:84:35:d0: 73:61:99:37:d0:83:6f:4d:76:05:9a:56:6c:19:ac:08:a2:fb: a1:23:cc:fb:75:e2:ec:3d:2c:f6:f5:73:fd:a1:ab:4d:d7:57: c3:f4:b1:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxD6ITNtZ6FmROAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjBhZjViZGMtMjAwNy00Yjk4LWE2OGYtYTY0YjYyYTAyN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKPV9F68r0j/E9LBqu8ycun6TfjNkGtwZANs f+PCN+oA1kdQV2RidHtNaPUgstMztbP8+Yb1b7kPSBbgTu2HwKDqSWOgalofubYu slDfXv5INa3cb7AyA+1WTljtWsfSPg78u+24YehrAe35DeajJF1vn8Da1H4sBiPd MDMoXbeKvdwWAjzGss3WFYP12krFHqE22MOOgyI0z/ahS69blbl/H2N2+ahzLtve L+m976EDxtrV7OzKz9mt/x10rK7ZF1mfXGmFhBTP1hxq9ydAwpsN30EjzfVQZAus H1oZtNt15tJ6jhP/6c8YPEM63aRdJAdEglEFjW5hAbpoD47o3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBc5xkBHZuRlJt0NSIJYEXgQXrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNhYzM4ZjQtZDBkNi0z YTFhLTgwMTctZmM4YTI5MDQwNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCz5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm4MJezHJGapk1pC9KMq2c49Aa87SMrktxhVafcnDr5vdfkULXkNiEe OKnevMLWt4v4n01Osh9oQUrylJ0f0BKrXBDF4x84YYYKC6f7Z9UWYUckEUfnlQYz vustcuuZZcL+qA3XSlAKW9VtcTmn/DzH4LZhTdhubgyDEPBDkSPAMQhI6ePQJkh3 rBU6qVOsFOOXlmJNH9zv25IlrUsODYqBiEH+N3x7bI+yM/MGvofluzh1K9cEGTjt /gZE20istaQPTGPqPQYfI+7HgzZDh3VyoqjACYQ10HNhmTfQg29NdgWaVmwZrAii +6EjzPt14uw9LPb1c/2hq03XV8P0sUI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:27:16 2025 by rpki-client