$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d8f8fbb-91db-3d2d-abea-faf45e219154.roa File: 4d8f8fbb-91db-3d2d-abea-faf45e219154.roa (raw, json) Hash identifier: 60D+6zyGbbCRXEFthkSaVb96c+JVOalJvXoY/L0XWKo= Subject key identifier: 46:5C:EA:13:F2:82:55:31:28:C4:F9:7D:F1:E9:44:5A:F2:F5:4C:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC37CF39109924A6F11BF10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d8f8fbb-91db-3d2d-abea-faf45e219154.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 68.84.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:7c:f3:91:09:92:4a:6f:11:bf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0a143fff-04f7-4b17-b5bf-626cc99dc117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:80:d1:64:cb:a8:09:0f:44:62:23:0e:36: 25:19:ba:62:be:bf:5b:3d:40:ce:7b:42:f8:99:ae: 65:33:30:a1:e1:9b:7c:a4:f1:33:8c:60:b5:bc:4a: 12:2b:82:97:be:9e:05:06:06:e4:0f:8e:c0:c7:ec: f6:19:f4:80:51:4f:09:ac:c2:8d:bd:a9:5b:26:99: 78:e0:a0:17:e7:d1:94:f0:c1:e1:0d:a5:bf:ce:60: 8c:f5:cc:59:83:89:f1:e1:d0:98:6a:5b:35:16:ef: 84:42:d2:84:d4:cc:25:b1:96:50:f6:79:8e:e1:d8: 0f:6f:52:f5:5c:d2:6a:02:bc:c3:4c:f2:9f:e4:3a: f2:0e:00:3d:f2:8a:a5:7e:11:0d:c4:fd:ee:07:33: 04:44:da:0c:ac:90:b5:4a:56:c2:66:41:85:a6:79: 6d:b8:2b:12:2f:6b:59:21:22:e3:a3:56:b6:b8:b7: 25:0a:3c:96:f4:84:f3:e6:5f:9b:0c:d2:4a:54:52: 16:a9:2b:a7:81:ae:9f:59:4d:c0:c2:40:cb:bf:d4: 63:04:0d:20:5d:4e:d9:15:b4:86:f1:b0:f4:a2:3e: 38:9d:33:56:d6:ac:77:f1:ba:bf:57:cc:b8:8f:a9: 74:36:da:b6:05:41:d3:98:a9:63:a7:0c:f7:63:d1: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:EA:13:F2:82:55:31:28:C4:F9:7D:F1:E9:44:5A:F2:F5:4C:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d8f8fbb-91db-3d2d-abea-faf45e219154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2e:1d:d3:cd:59:cb:01:93:de:45:f8:76:6d:c0:ca:64:42: 2b:ea:aa:95:07:72:65:73:aa:7d:09:a9:0f:fe:95:44:a0:f8: b8:cf:6d:32:18:5e:2d:57:39:a0:f9:b7:17:f2:e2:03:7d:42: 25:ca:71:5c:b5:fc:17:93:93:b5:49:0a:46:2e:ef:38:84:54: 45:60:e7:96:be:d2:af:8b:7d:9c:bd:7b:b5:ea:32:97:1d:29: 13:f5:eb:9f:c9:76:f0:66:d3:38:b5:48:52:2e:e2:a2:05:b0: 3a:ed:5f:34:7d:53:f6:70:d1:a3:d7:e1:32:db:dd:56:ef:79: ac:c9:da:80:f1:ec:e1:6e:1f:46:bb:dc:e7:f2:df:9b:ca:4e: a5:62:e3:de:63:f5:39:42:ca:d6:97:fc:a8:21:27:f1:94:39: 3b:fd:65:7d:5a:ab:a9:c6:b6:ce:c6:b2:06:0a:90:20:ea:2d: 5c:7d:70:1e:6b:ed:38:00:9f:bd:90:0d:c0:70:d7:5b:93:26: b8:b9:a4:be:57:cf:00:d4:64:6e:b7:04:34:20:fc:49:d4:64: 72:c0:62:91:4e:91:73:82:69:bd:2e:37:26:97:79:e4:be:41: 08:93:c3:eb:26:c1:37:8e:27:ec:2f:8a:b5:a3:26:fe:75:9a: 4b:e6:61:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw3zzkQmSSm8RvxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGExNDNmZmYtMDRmNy00YjE3LWI1YmYtNjI2Y2M5OWRjMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg2A0WTLqAkPRGIjDjYlGbpivr9bPUDOe0L4 ma5lMzCh4Zt8pPEzjGC1vEoSK4KXvp4FBgbkD47Ax+z2GfSAUU8JrMKNvalbJpl4 4KAX59GU8MHhDaW/zmCM9cxZg4nx4dCYals1Fu+EQtKE1MwlsZZQ9nmO4dgPb1L1 XNJqArzDTPKf5DryDgA98oqlfhENxP3uBzMERNoMrJC1SlbCZkGFpnltuCsSL2tZ ISLjo1a2uLclCjyW9ITz5l+bDNJKVFIWqSunga6fWU3AwkDLv9RjBA0gXU7ZFbSG 8bD0oj44nTNW1qx38bq/V8y4j6l0Ntq2BUHTmKljpwz3Y9H5OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZc6hPyglUxKMT5ffHpRFry9UxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ4ZjhmYmItOTFkYi0z ZDJkLWFiZWEtZmFmNDVlMjE5MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYuHdPNWcsBk95F+HZtwMpkQivqqpUHcmVzqn0JqQ/+lUSg+LjPbTIY Xi1XOaD5txfy4gN9QiXKcVy1/BeTk7VJCkYu7ziEVEVg55a+0q+LfZy9e7XqMpcd KRP165/JdvBm0zi1SFIu4qIFsDrtXzR9U/Zw0aPX4TLb3VbveazJ2oDx7OFuH0a7 3Ofy35vKTqVi495j9TlCytaX/KghJ/GUOTv9ZX1aq6nGts7GsgYKkCDqLVx9cB5r 7TgAn72QDcBw11uTJri5pL5XzwDUZG63BDQg/EnUZHLAYpFOkXOCab0uNyaXeeS+ QQiTw+smwTeOJ+wvirWjJv51mkvmYTc= -----END CERTIFICATE-----Generated at Sun Aug 24 01:18:01 2025 by rpki-client