$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f2453a-bf41-3da0-813c-cafa94b299d3.roa File: 53f2453a-bf41-3da0-813c-cafa94b299d3.roa (raw, json) Hash identifier: 9KX4Oslx7+h7hSprZ0STyAGO1ffGY5IjDh0jc7NTvbo= Subject key identifier: 33:63:3A:4B:4B:DB:00:31:FF:D0:B5:33:8D:9E:80:00:1E:3E:35:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3CB78B0F2146C1CD64BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f2453a-bf41-3da0-813c-cafa94b299d3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.81.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:cb:78:b0:f2:14:6c:1c:d6:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=aef4c41d-624d-48fe-bfcf-ff7f506fb1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:ae:ab:aa:13:e9:1f:22:17:7b:0e:12:0e: 0c:ca:48:13:ef:00:9d:af:37:73:56:1e:06:28:80: fe:79:67:b5:d1:3f:b9:ba:65:a3:37:92:84:03:93: 29:ba:18:7b:87:57:fe:fb:46:c1:08:0e:26:7d:4f: 31:17:2b:99:dd:61:8a:f2:6c:c5:79:35:16:a8:9c: 46:c8:1a:63:85:9c:62:ce:ec:9a:f4:c8:e2:32:ab: 33:e6:52:b1:00:88:ad:6e:a5:2e:3b:36:e4:2f:01: 5d:f1:69:a7:bf:c8:c0:7c:e8:74:47:f0:29:6a:af: d6:ec:25:32:27:2d:b8:59:a4:00:94:7d:41:c7:ee: 54:45:f3:33:c9:58:57:29:52:bc:48:5c:ea:ed:e2: c8:a9:ad:96:68:5b:f5:17:03:7e:0a:9c:20:2d:17: b1:9a:78:1a:d7:3d:db:f3:c8:d3:98:19:49:1b:c9: 55:f5:05:31:69:69:c1:ff:d0:90:73:47:da:47:65: a2:bb:07:9d:69:25:64:f2:1c:a9:1b:fe:1b:58:b1: 92:1d:f7:82:e4:ba:c1:df:92:3a:1b:6a:2e:2b:57: cf:7d:fd:ea:ba:91:48:92:e3:40:af:f8:30:0b:d2: 0d:53:55:21:4d:26:05:ac:d3:da:d4:5d:4b:7b:e9: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:63:3A:4B:4B:DB:00:31:FF:D0:B5:33:8D:9E:80:00:1E:3E:35:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f2453a-bf41-3da0-813c-cafa94b299d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:c7:0b:23:b8:96:94:9e:5f:1e:d2:3b:df:eb:fb:53:10:0a: 29:26:4e:1f:f3:02:45:e2:14:62:5c:bf:2c:92:44:b8:74:a1: 2d:5a:e0:ff:13:0d:e6:48:d9:5a:fa:6f:73:5e:a8:fd:26:ac: 93:e8:91:e3:3c:de:e7:43:31:d1:3c:19:df:44:44:8d:04:16: ae:e7:b1:a9:69:30:97:8a:a2:bd:03:3a:2d:59:f4:17:d0:8c: e6:f1:96:c7:ae:f9:9c:0b:c0:db:04:dd:3c:b5:da:29:ea:7b: e1:fa:91:ef:c5:fb:83:85:5d:e2:ab:4e:79:8d:63:29:12:94: c5:07:0c:a1:22:6e:64:e8:95:8a:3d:e1:40:50:13:27:d1:2d: e8:b0:6b:81:ac:03:db:0d:28:79:13:2d:7e:44:22:81:c3:96: b2:3e:83:bc:ff:61:c2:1c:f9:12:cb:54:d1:06:2c:ef:e6:bf: 79:c8:ea:2d:6d:65:c3:88:b5:fb:46:38:5b:26:f1:53:d1:3a: 3c:77:ba:01:96:31:f1:ed:16:30:3a:23:ae:99:64:c5:c2:ae: 76:b9:36:0c:10:0e:93:d0:c3:68:55:33:18:8d:e2:3b:c5:cb: a2:a5:a1:fb:93:42:f4:dc:48:ad:96:1c:cc:99:28:5f:24:4f: 46:e4:77:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw8t4sPIUbBzWS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWVmNGM0MWQtNjI0ZC00OGZlLWJmY2YtZmY3ZjUwNmZiMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoauq6oT6R8iF3sOEg4MykgT7wCdrzdzVh4G KID+eWe10T+5umWjN5KEA5Mpuhh7h1f++0bBCA4mfU8xFyuZ3WGK8mzFeTUWqJxG yBpjhZxizuya9MjiMqsz5lKxAIitbqUuOzbkLwFd8Wmnv8jAfOh0R/Apaq/W7CUy Jy24WaQAlH1Bx+5URfMzyVhXKVK8SFzq7eLIqa2WaFv1FwN+CpwgLRexmnga1z3b 88jTmBlJG8lV9QUxaWnB/9CQc0faR2WiuwedaSVk8hypG/4bWLGSHfeC5LrB35I6 G2ouK1fPff3qupFIkuNAr/gwC9INU1UhTSYFrNPa1F1Le+kdQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNjOktL2wAx/9C1M42egAAePjWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNmMjQ1M2EtYmY0MS0z ZGEwLTgxM2MtY2FmYTk0YjI5OWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHHCyO4lpSeXx7SO9/r+1MQCikmTh/zAkXiFGJcvyySRLh0oS1a4P8T DeZI2Vr6b3NeqP0mrJPokeM83udDMdE8Gd9ERI0EFq7nsalpMJeKor0DOi1Z9BfQ jObxlseu+ZwLwNsE3Ty12inqe+H6ke/F+4OFXeKrTnmNYykSlMUHDKEibmTolYo9 4UBQEyfRLeiwa4GsA9sNKHkTLX5EIoHDlrI+g7z/YcIc+RLLVNEGLO/mv3nI6i1t ZcOItftGOFsm8VPROjx3ugGWMfHtFjA6I66ZZMXCrna5NgwQDpPQw2hVMxiN4jvF y6KlofuTQvTcSK2WHMyZKF8kT0bkd44= -----END CERTIFICATE-----Generated at Sat Aug 23 23:06:53 2025 by rpki-client