$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48fc57cd-f70b-3e07-87e0-d9f6f26d44d4.roa File: 48fc57cd-f70b-3e07-87e0-d9f6f26d44d4.roa (raw, json) Hash identifier: Hn7XUqZWPJQsC4hhTRXFCAgAh6Zv8Ou/Sf41PozBKik= Subject key identifier: 96:39:DB:07:F7:77:85:2F:27:0F:BA:11:43:06:FB:BE:53:15:70:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3D52E3C23F921573C5380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48fc57cd-f70b-3e07-87e0-d9f6f26d44d4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.84.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:d5:2e:3c:23:f9:21:57:3c:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8a63fa8d-3be6-4d53-b74c-3f96de3825ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:e5:73:74:36:0d:cf:4c:cc:ab:91:00:ab: 0c:55:9b:6a:2c:04:a0:39:41:cf:1e:cf:b0:fd:ae: 37:18:6a:12:d8:f8:ed:33:13:27:10:7e:91:ce:2b: 7f:73:5f:b2:3e:60:d5:ff:1c:5c:47:85:fd:bf:5c: 5e:d4:9a:ee:e6:70:5c:c6:b5:04:ee:87:21:6b:44: a1:df:df:cf:57:a4:3b:9b:45:f7:7f:37:70:1f:22: 0a:58:bf:4b:9e:43:61:13:34:88:18:74:13:8b:a0: 67:1d:39:cf:26:b6:80:dc:60:e6:0c:a4:e2:76:9e: 63:9e:51:65:d2:19:ac:86:66:9b:cc:c3:61:9a:61: 56:1f:d6:35:7a:17:59:97:ba:e1:12:d3:f7:4a:6c: 98:47:bd:f5:d8:50:a2:2c:65:08:60:ef:e8:dd:0c: bf:90:59:07:ca:89:22:28:6d:65:29:80:a7:43:d9: 9f:83:12:a7:67:ae:df:40:e1:77:c7:37:ce:e7:b6: f5:23:26:03:42:8b:5f:b1:42:f7:a2:f0:3c:15:fd: 2c:8e:db:d8:3c:33:f2:47:46:08:ed:cd:2c:44:c3: cb:c2:43:4b:94:ab:81:d3:d9:79:33:1c:06:ea:0b: bc:66:09:cb:e2:6a:8d:e8:62:89:57:bc:a8:0e:6c: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:39:DB:07:F7:77:85:2F:27:0F:BA:11:43:06:FB:BE:53:15:70:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48fc57cd-f70b-3e07-87e0-d9f6f26d44d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b4:77:36:52:39:a3:3c:3b:60:de:4b:d7:74:35:4b:00:b0: 69:65:ec:81:f7:68:7a:8e:f7:73:28:65:56:e7:56:ac:23:09: a8:23:3f:fc:07:b0:fb:c8:ce:dd:b6:10:64:45:11:86:60:66: 45:99:db:41:28:c4:a5:67:62:00:e5:b6:6b:10:cc:18:95:6f: ce:ef:e8:0c:37:fa:c5:95:18:06:01:e8:d9:ad:36:9c:6a:ee: e8:dc:e9:75:f1:85:ec:c3:0c:fd:89:8e:73:7a:95:32:1d:2c: 79:0f:f3:21:fd:42:e0:d3:25:b8:6a:90:3b:ff:de:51:f7:2d: aa:6d:a8:71:a4:90:45:36:fa:71:55:af:0e:ef:c1:d2:48:a1: 50:6b:fa:9c:bb:98:93:ff:89:2d:00:45:fb:2b:be:07:5c:36: 23:11:6c:6b:5a:47:1d:fb:51:73:20:bd:e7:de:ec:7c:05:a6: 4a:c9:49:ed:40:9e:79:cb:ef:fa:91:6e:79:8c:7b:c5:08:b7: 9d:57:e6:fe:c9:be:cf:e7:e1:cf:20:45:29:83:13:d1:f8:54: c2:87:88:ca:7b:5b:81:2f:54:07:08:7c:72:df:11:17:dc:71: 03:29:7f:ea:d6:fb:d8:1a:41:bd:a2:f8:91:a6:a7:5b:c1:a8: da:6e:d3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw9UuPCP5IVc8U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGE2M2ZhOGQtM2JlNi00ZDUzLWI3NGMtM2Y5NmRlMzgyNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB3lc3Q2Dc9MzKuRAKsMVZtqLASgOUHPHs+w /a43GGoS2PjtMxMnEH6Rzit/c1+yPmDV/xxcR4X9v1xe1Jru5nBcxrUE7ocha0Sh 39/PV6Q7m0X3fzdwHyIKWL9LnkNhEzSIGHQTi6BnHTnPJraA3GDmDKTidp5jnlFl 0hmshmabzMNhmmFWH9Y1ehdZl7rhEtP3SmyYR7312FCiLGUIYO/o3Qy/kFkHyoki KG1lKYCnQ9mfgxKnZ67fQOF3xzfO57b1IyYDQotfsUL3ovA8Ff0sjtvYPDPyR0YI 7c0sRMPLwkNLlKuB09l5MxwG6gu8ZgnL4mqN6GKJV7yoDmx8YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY52wf3d4UvJw+6EUMG+75TFXDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDhmYzU3Y2QtZjcwYi0z ZTA3LTg3ZTAtZDlmNmYyNmQ0NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe0dzZSOaM8O2DeS9d0NUsAsGll7IH3aHqO93MoZVbnVqwjCagjP/wH sPvIzt22EGRFEYZgZkWZ20EoxKVnYgDltmsQzBiVb87v6Aw3+sWVGAYB6NmtNpxq 7ujc6XXxhezDDP2JjnN6lTIdLHkP8yH9QuDTJbhqkDv/3lH3LaptqHGkkEU2+nFV rw7vwdJIoVBr+py7mJP/iS0ARfsrvgdcNiMRbGtaRx37UXMgvefe7HwFpkrJSe1A nnnL7/qRbnmMe8UIt51X5v7Jvs/n4c8gRSmDE9H4VMKHiMp7W4EvVAcIfHLfERfc cQMpf+rW+9gaQb2i+JGmp1vBqNpu0/s= -----END CERTIFICATE-----Generated at Sat Aug 23 23:05:43 2025 by rpki-client