$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f436f55-f5f5-3aa2-b4cc-b661566f1719.roa File: 6f436f55-f5f5-3aa2-b4cc-b661566f1719.roa (raw, json) Hash identifier: dSKEi8ypmIPqVRxxAiLhOaf174RgLQM9Op0EI36l5EE= Subject key identifier: 1C:8B:1E:3E:58:A3:D6:9C:D8:CC:9A:96:C8:0C:00:CB:D3:00:53:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC22E9182FAE81916A7F680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f436f55-f5f5-3aa2-b4cc-b661566f1719.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.39.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:2e:91:82:fa:e8:19:16:a7:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e17e5728-5df4-4270-b326-79b268431c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:72:45:9e:23:c2:60:36:87:9f:de:b8:02: c3:e0:aa:a4:6b:94:ce:4e:8c:22:25:96:97:04:a6: e3:71:24:fd:cd:87:cd:1f:80:b5:ff:c7:fc:e8:90: fc:4a:92:93:cc:ff:7d:67:6d:12:82:3f:0f:43:b2: 72:f3:e2:1e:58:cf:17:c2:8b:be:e4:b7:2f:3f:a9: 46:65:17:52:9f:67:05:eb:65:da:9f:dc:3d:a3:77: 4c:4b:41:ec:64:4c:31:cc:8d:54:be:94:cc:11:93: 31:79:11:ca:35:70:dd:48:00:36:54:f4:42:26:99: 4b:60:bd:41:22:fa:c9:a3:fd:f2:c5:7c:56:93:1e: 76:31:be:72:53:4c:02:ac:66:fe:27:6f:9d:14:d6: 1e:9b:13:2f:ca:2a:99:0f:c0:91:68:26:25:d2:ad: 7c:2d:6c:e3:8d:8a:1f:56:1e:74:15:3e:6e:d3:2f: 6a:13:d9:95:9f:98:fc:23:04:94:30:da:9f:0c:c4: d4:5c:14:f7:f7:25:ae:d6:10:46:98:33:b8:a0:38: 3a:79:75:ef:47:a0:43:ca:95:ba:00:e7:0d:0b:70: d4:1c:e5:9b:97:d3:94:32:a3:56:aa:fd:c2:63:cf: 78:5e:75:0b:22:12:5f:ee:13:d5:90:5f:92:ba:9d: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8B:1E:3E:58:A3:D6:9C:D8:CC:9A:96:C8:0C:00:CB:D3:00:53:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f436f55-f5f5-3aa2-b4cc-b661566f1719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d6:e4:4e:ee:87:49:af:3e:60:6f:d4:8b:72:f6:c9:de:fa: 39:bf:bf:7a:35:cf:4c:b3:72:07:0d:7d:3c:55:dc:d4:1a:1a: cd:c7:2b:92:5e:27:78:cb:c7:4b:60:be:fc:b6:2f:df:67:64: 13:53:05:17:0a:ee:61:21:3a:7f:97:51:fe:ac:33:92:46:16: 24:e7:f2:a1:77:c9:19:dd:b7:f5:4f:ce:b6:10:0b:d2:72:cc: 0c:0d:c8:88:02:2e:4a:74:b6:5d:e1:2a:bc:d4:57:74:9f:ef: 59:1c:4e:bb:1d:41:c2:62:b6:be:d8:df:ac:aa:25:44:59:e9: d0:5d:e5:c8:8a:6a:1d:90:75:71:8c:4a:25:ce:c1:93:22:03: ad:1d:94:d0:67:78:d8:57:b5:9e:7d:0e:17:bc:f9:ef:a3:2b: 42:9b:db:f8:4a:af:bd:27:36:6e:f0:a8:34:d8:2c:16:77:54: 6c:00:e3:b2:7b:bf:aa:17:1e:0b:9a:a2:e9:a5:c4:aa:34:36: a9:f7:4e:57:59:63:73:43:3e:2d:e5:89:b4:0f:4a:69:bb:48: 6a:bd:e5:fd:dc:aa:60:0c:63:d4:59:1d:23:a1:aa:8d:56:50: e7:fe:6c:4f:e4:d1:7f:30:3a:25:36:8f:6c:6d:f7:a5:d9:b8: 01:3b:72:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswi6RgvroGRan9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTE3ZTU3MjgtNWRmNC00MjcwLWIzMjYtNzliMjY4NDMxYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gRyRZ4jwmA2h5/euALD4Kqka5TOTowiJZaX BKbjcST9zYfNH4C1/8f86JD8SpKTzP99Z20Sgj8PQ7Jy8+IeWM8Xwou+5LcvP6lG ZRdSn2cF62Xan9w9o3dMS0HsZEwxzI1UvpTMEZMxeRHKNXDdSAA2VPRCJplLYL1B IvrJo/3yxXxWkx52Mb5yU0wCrGb+J2+dFNYemxMvyiqZD8CRaCYl0q18LWzjjYof Vh50FT5u0y9qE9mVn5j8IwSUMNqfDMTUXBT39yWu1hBGmDO4oDg6eXXvR6BDypW6 AOcNC3DUHOWbl9OUMqNWqv3CY894XnULIhJf7hPVkF+Sup04iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByLHj5Yo9ac2MyalsgMAMvTAFPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmY0MzZmNTUtZjVmNS0z YWEyLWI0Y2MtYjY2MTU2NmYxNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvW5E7uh0mvPmBv1Ity9sne+jm/v3o1z0yzcgcNfTxV3NQaGs3HK5Je J3jLx0tgvvy2L99nZBNTBRcK7mEhOn+XUf6sM5JGFiTn8qF3yRndt/VPzrYQC9Jy zAwNyIgCLkp0tl3hKrzUV3Sf71kcTrsdQcJitr7Y36yqJURZ6dBd5ciKah2QdXGM SiXOwZMiA60dlNBneNhXtZ59Dhe8+e+jK0Kb2/hKr70nNm7wqDTYLBZ3VGwA47J7 v6oXHguaoumlxKo0Nqn3TldZY3NDPi3libQPSmm7SGq95f3cqmAMY9RZHSOhqo1W UOf+bE/k0X8wOiU2j2xt96XZuAE7crc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:01:17 2025 by rpki-client