$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68589563-8b7b-338b-b8ec-626bd8d6d359.roa File: 68589563-8b7b-338b-b8ec-626bd8d6d359.roa (raw, json) Hash identifier: YI+5Or2VPVifQWMSN35c1CmM8EUFHRdFG3v5LT/zUus= Subject key identifier: 76:2B:A5:95:F4:30:49:2B:E7:A8:76:EC:C0:D8:AD:A9:A9:1A:D5:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC33EC92004333C65278340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68589563-8b7b-338b-b8ec-626bd8d6d359.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 96.217.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:3e:c9:20:04:33:3c:65:27:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7efc679e-1e5e-4110-9c53-2a803a7fca4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:65:f9:2d:49:78:6e:5e:1a:78:44:d8:aa: 8c:d3:18:b6:f2:25:64:eb:d7:95:bc:f6:bb:93:20: 64:a5:2b:31:ac:e0:4b:d9:67:9f:17:9c:8b:b2:06: a8:1c:b1:27:9d:33:02:3f:2f:ef:0b:34:0c:e7:5c: c9:8d:15:48:7a:60:1c:b7:ad:cd:9f:29:86:4c:fc: 41:d5:f1:22:12:fd:54:94:77:b8:ea:e0:1e:a1:b6: dd:a3:fd:2f:0e:e1:d9:32:37:9d:34:95:56:bd:a8: ad:7d:2b:03:95:5e:58:c4:1d:aa:2f:fa:63:9d:df: 4a:9e:84:04:4a:b4:e5:92:f7:98:a7:4b:ee:9f:de: 48:14:15:e7:31:e3:a7:c1:db:6d:e9:87:89:a1:02: ad:58:52:c0:86:e4:bc:e8:d0:bb:71:98:63:3e:bf: ae:3c:8b:83:b9:3a:84:25:41:f5:9a:a9:37:6a:47: 43:42:3a:8e:5b:b6:05:b6:60:6d:5e:99:da:bc:f8: 3e:84:e4:c7:cf:5a:e9:e1:25:4a:e4:c7:41:d7:57: 7d:5a:db:cc:f8:70:1d:73:c6:06:4b:cb:6a:10:06: 32:1e:8c:97:63:5f:e9:3a:bd:41:15:e4:f2:2e:b5: 57:87:31:b9:f3:bb:59:5d:e5:93:de:e3:33:13:ef: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2B:A5:95:F4:30:49:2B:E7:A8:76:EC:C0:D8:AD:A9:A9:1A:D5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68589563-8b7b-338b-b8ec-626bd8d6d359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.217.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:86:0a:da:13:ee:5a:10:fd:cc:06:50:b0:bc:44:21:cb:53: 3d:5a:c3:2f:60:8c:f3:52:d1:af:d5:6b:99:5b:b1:5e:85:2a: e3:73:9d:82:70:04:3f:4a:67:2e:25:84:59:4c:08:34:95:12: 59:86:66:88:13:f9:91:ba:3f:0f:3d:69:c5:6a:15:4f:6a:f2: 2d:db:55:0a:81:b1:a2:52:02:66:3c:58:55:ce:5f:c6:3e:7c: ce:ae:da:9d:5e:47:5e:ee:2e:9a:a7:9e:93:82:54:e9:89:a6: 31:25:fb:8a:4d:2d:d4:39:74:a1:6a:11:db:b3:0b:58:2e:04: b0:21:4a:9d:f3:44:fd:09:b5:49:24:3b:be:8b:c9:d6:0e:ab: 61:42:9d:b7:85:89:46:00:10:48:88:6e:18:b7:87:43:8c:ce: 5b:ff:13:7d:79:47:0c:3c:ad:29:b8:46:13:6f:f1:0d:29:9b: 7d:01:e9:33:13:43:8a:d8:b2:35:b4:ae:7d:6e:04:21:61:44: cd:82:c6:7a:d4:41:a1:b4:d7:0e:86:06:fb:5a:83:63:38:65: 57:6d:57:f7:7c:1d:14:29:b7:40:e4:5f:5b:d5:1d:98:4b:a4: 64:82:c8:b3:1e:fd:bc:04:26:37:fb:56:51:f3:93:f3:9a:d0: 12:9e:e8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswz7JIAQzPGUng0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2VmYzY3OWUtMWU1ZS00MTEwLTljNTMtMmE4MDNhN2ZjYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWRl+S1JeG5eGnhE2KqM0xi28iVk69eVvPa7 kyBkpSsxrOBL2WefF5yLsgaoHLEnnTMCPy/vCzQM51zJjRVIemAct63NnymGTPxB 1fEiEv1UlHe46uAeobbdo/0vDuHZMjedNJVWvaitfSsDlV5YxB2qL/pjnd9KnoQE SrTlkveYp0vun95IFBXnMeOnwdtt6YeJoQKtWFLAhuS86NC7cZhjPr+uPIuDuTqE JUH1mqk3akdDQjqOW7YFtmBtXpnavPg+hOTHz1rp4SVK5MdB11d9WtvM+HAdc8YG S8tqEAYyHoyXY1/pOr1BFeTyLrVXhzG587tZXeWT3uMzE+8P0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYrpZX0MEkr56h27MDYrampGtURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjg1ODk1NjMtOGI3Yi0z MzhiLWI4ZWMtNjI2YmQ4ZDZkMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYNlaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqGCtoT7loQ/cwGULC8RCHLUz1awy9gjPNS0a/Va5lbsV6FKuNznYJw BD9KZy4lhFlMCDSVElmGZogT+ZG6Pw89acVqFU9q8i3bVQqBsaJSAmY8WFXOX8Y+ fM6u2p1eR17uLpqnnpOCVOmJpjEl+4pNLdQ5dKFqEduzC1guBLAhSp3zRP0JtUkk O76LydYOq2FCnbeFiUYAEEiIbhi3h0OMzlv/E315Rww8rSm4RhNv8Q0pm30B6TMT Q4rYsjW0rn1uBCFhRM2CxnrUQaG01w6GBvtag2M4ZVdtV/d8HRQpt0DkX1vVHZhL pGSCyLMe/bwEJjf7VlHzk/Oa0BKe6MI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:50:19 2025 by rpki-client