$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54a37f48-b5e2-345c-b2e4-d5f7ad560290.roa File: 54a37f48-b5e2-345c-b2e4-d5f7ad560290.roa (raw, json) Hash identifier: gH1vP7FW4qeNCNRnt4v2LD0WFY9KsqK0KWCIq7tQdFk= Subject key identifier: 28:58:26:3A:8B:7F:60:A3:41:C7:96:ED:B2:79:6E:FB:BB:D3:2A:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC43DCB1F4CB9F9119F8500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54a37f48-b5e2-345c-b2e4-d5f7ad560290.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.44.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:3d:cb:1f:4c:b9:f9:11:9f:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=55ccdf96-f0be-4cd0-83f2-4fd640879005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:62:d4:d8:6c:10:70:84:97:fe:92:16:6f: 65:c1:3b:b7:c0:27:a5:bf:6f:d2:43:37:dc:91:67: 22:34:bb:c7:34:83:d9:2e:d4:34:75:6b:73:ca:29: ce:99:0d:bb:da:f9:0a:9b:ea:81:cc:66:8c:81:e7: 5a:15:f7:b1:16:36:87:82:19:c2:55:6a:cb:86:d6: a1:74:25:df:c6:2a:e3:6e:d9:05:26:98:88:83:d6: e3:bd:30:4f:19:d0:19:78:74:11:3d:84:34:71:45: 0c:3d:65:ee:b1:53:80:d9:47:64:f2:ae:d1:1f:18: 5c:d4:38:7a:6b:0f:0a:4d:1b:bd:d1:1b:c6:5f:2e: 00:45:58:7f:af:1f:a5:29:6b:36:29:64:e1:7a:0d: 8c:3d:e5:73:23:0b:d4:94:49:e8:2d:0e:d5:31:e6: 1f:fb:e0:0a:75:8d:8a:9e:e3:94:fc:13:22:c8:df: 9f:35:7f:03:21:2a:9f:c8:ce:6b:3e:de:6d:d1:d3: 03:8f:a1:11:7d:7b:12:c7:af:4a:11:b2:0c:ee:eb: 84:83:92:8f:10:b8:c8:dc:22:36:4e:af:73:f7:b1: 59:be:17:c3:43:ea:ab:e7:e8:71:46:a9:ac:61:08: cb:9b:11:bb:ac:3b:1c:0b:56:c7:8f:4b:c2:a5:1d: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:58:26:3A:8B:7F:60:A3:41:C7:96:ED:B2:79:6E:FB:BB:D3:2A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54a37f48-b5e2-345c-b2e4-d5f7ad560290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:74:bd:17:8c:8f:86:e8:f1:6b:7a:89:60:cb:c5:a7:66:9a: 06:10:40:a3:9b:2f:f2:5a:92:ca:31:44:ab:fc:65:b3:a7:b1: 08:13:28:a7:5f:da:d1:4b:99:73:04:b5:35:ed:89:ad:d1:9c: 1b:e4:24:ab:a3:f5:49:fa:df:00:9a:d1:02:4c:07:a0:50:39: 70:22:8b:62:30:d7:94:e5:0f:3e:24:39:87:ff:69:d5:3e:a9: ad:a5:cf:65:ed:38:48:c2:d0:03:2d:bf:50:58:34:2b:1a:16: c5:1c:5e:84:02:63:a4:3a:3d:7f:e0:81:36:d0:03:0d:50:3a: 58:66:8a:25:c6:f3:4a:af:05:72:73:ce:2c:ef:0b:0f:7a:51: 99:1e:63:78:ba:80:bd:5e:56:50:26:de:4c:72:fb:b8:91:b3: e8:78:a3:10:dc:04:6a:db:3a:6b:bb:04:31:7e:cf:c6:eb:dd: 48:df:b8:7e:7a:6b:86:a0:81:94:25:eb:80:01:ec:cc:a7:60: 79:fb:06:67:02:51:2f:50:20:a4:23:f3:df:b4:71:81:af:b1: a8:78:00:8b:ca:84:f0:e0:a4:c3:42:c9:9e:c8:d2:74:5a:93: ed:a9:a0:05:92:2d:82:ba:02:f6:03:3f:9d:83:e6:0d:a4:4a: 84:ea:88:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxD3LH0y5+RGfhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTVjY2RmOTYtZjBiZS00Y2QwLTgzZjItNGZkNjQwODc5MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1chi1NhsEHCEl/6SFm9lwTu3wCelv2/SQzfc kWciNLvHNIPZLtQ0dWtzyinOmQ272vkKm+qBzGaMgedaFfexFjaHghnCVWrLhtah dCXfxirjbtkFJpiIg9bjvTBPGdAZeHQRPYQ0cUUMPWXusVOA2Udk8q7RHxhc1Dh6 aw8KTRu90RvGXy4ARVh/rx+lKWs2KWTheg2MPeVzIwvUlEnoLQ7VMeYf++AKdY2K nuOU/BMiyN+fNX8DISqfyM5rPt5t0dMDj6ERfXsSx69KEbIM7uuEg5KPELjI3CI2 Tq9z97FZvhfDQ+qr5+hxRqmsYQjLmxG7rDscC1bHj0vCpR3kXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChYJjqLf2CjQceW7bJ5bvu70yqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTRhMzdmNDgtYjVlMi0z NDVjLWIyZTQtZDVmN2FkNTYwMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI10vReMj4bo8Wt6iWDLxadmmgYQQKObL/JaksoxRKv8ZbOnsQgTKKdf 2tFLmXMEtTXtia3RnBvkJKuj9Un63wCa0QJMB6BQOXAii2Iw15TlDz4kOYf/adU+ qa2lz2XtOEjC0AMtv1BYNCsaFsUcXoQCY6Q6PX/ggTbQAw1QOlhmiiXG80qvBXJz zizvCw96UZkeY3i6gL1eVlAm3kxy+7iRs+h4oxDcBGrbOmu7BDF+z8br3UjfuH56 a4aggZQl64AB7MynYHn7BmcCUS9QIKQj89+0cYGvsah4AIvKhPDgpMNCyZ7I0nRa k+2poAWSLYK6AvYDP52D5g2kSoTqiEs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:39:53 2025 by rpki-client