$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70f2ff81-d809-31ee-b46f-7b1d019e27bd.roa File: 70f2ff81-d809-31ee-b46f-7b1d019e27bd.roa (raw, json) Hash identifier: TYSPHBJR65TE+hy8O2THiBLJzRQLV21PHirRQJjtY5k= Subject key identifier: EC:6B:24:AD:A7:A1:BF:25:DF:F5:74:D0:D5:E9:B3:A1:5F:28:F2:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC440CDFEBFC4E1DF1A7180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70f2ff81-d809-31ee-b46f-7b1d019e27bd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.45.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:40:cd:fe:bf:c4:e1:df:1a:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bf492bdf-6718-4861-8d83-5afac3586d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:96:15:ff:9c:f3:26:1b:1e:ec:ae:1b:74: 8e:ce:af:7f:93:1a:76:72:d8:39:9e:67:07:09:1e: 48:ee:a3:80:8f:ab:83:c9:40:69:c5:ad:84:96:c1: 8f:e9:0f:8c:2f:59:c2:40:69:dd:13:6a:21:c3:4f: ae:9a:3e:60:7f:05:3e:f7:b1:11:3c:77:8a:cc:43: 24:2d:6c:33:09:15:9c:fa:b3:82:d2:cf:79:ba:4c: 23:18:23:c9:ba:ad:18:1b:3b:2c:e4:d5:30:f4:66: b1:6e:b8:fb:8f:72:34:eb:89:1a:a5:7f:1c:30:16: 10:8b:89:99:a1:f1:e2:2c:64:ce:6f:28:f2:13:03: d6:d9:18:bc:84:10:bf:61:c1:c8:96:e1:63:1b:6b: 7f:13:46:b7:1e:fd:b2:c2:49:38:96:da:52:3e:bb: f8:e3:54:0b:29:72:de:7f:c0:18:03:57:3b:1d:4a: 0d:3c:45:28:fd:ae:df:c4:ff:7c:00:ba:58:b3:50: 67:eb:cc:98:97:75:f7:f8:c4:9e:b7:a3:13:b5:e5: cb:86:7a:bc:d0:15:5e:49:69:51:85:8a:a3:38:dc: 2e:11:4f:04:74:e6:fe:54:e7:e7:4e:0d:e7:21:8f: bc:80:72:86:1a:22:a0:22:95:1a:f3:d4:71:d6:49: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:24:AD:A7:A1:BF:25:DF:F5:74:D0:D5:E9:B3:A1:5F:28:F2:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70f2ff81-d809-31ee-b46f-7b1d019e27bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b5:5a:9a:df:2a:04:53:13:43:1c:b5:1a:87:07:15:31:39: e2:06:ad:4a:4b:d0:2a:9b:dc:da:c5:2f:56:2a:c7:63:2d:76: 04:b7:ab:2c:53:f1:1e:7a:0c:db:24:85:c5:07:51:94:60:6c: 71:8b:fe:f4:93:7f:46:33:2a:da:9e:61:06:25:8b:64:28:c6: 28:af:b3:ad:99:bf:03:0d:13:a8:0a:9a:1a:d0:5c:6c:6c:96: 92:22:bd:06:f0:0e:ad:c6:86:8a:1d:80:b0:b6:55:e5:8d:5c: d0:f1:11:a7:7c:b7:e9:dc:db:eb:45:2b:9c:bf:f3:a5:22:7f: 7b:18:28:d9:35:c1:ab:2b:d3:30:e0:0c:7a:4b:ea:4c:2e:51: c7:99:41:22:21:49:2d:7a:1e:f3:b9:0c:f5:5f:d4:c1:d1:0b: e3:19:e8:a3:d8:cb:27:3e:b1:8e:50:0e:ff:cb:c8:20:25:71: 77:8c:db:ce:94:e4:c4:14:3f:c8:8b:a1:41:15:57:6f:97:fb: f3:11:dc:cb:fa:f6:39:80:ee:1b:96:f5:25:7c:83:5e:10:be: 50:92:2b:4e:f7:aa:10:0b:32:68:4d:29:85:8d:d1:43:6d:d0: a2:ab:8f:c4:de:ba:bb:95:31:12:78:f8:e1:54:7d:81:c8:7f: fc:de:b4:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxEDN/r/E4d8acYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmY0OTJiZGYtNjcxOC00ODYxLThkODMtNWFmYWMzNTg2ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9iWFf+c8yYbHuyuG3SOzq9/kxp2ctg5nmcH CR5I7qOAj6uDyUBpxa2ElsGP6Q+ML1nCQGndE2ohw0+umj5gfwU+97ERPHeKzEMk LWwzCRWc+rOC0s95ukwjGCPJuq0YGzss5NUw9Gaxbrj7j3I064kapX8cMBYQi4mZ ofHiLGTObyjyEwPW2Ri8hBC/YcHIluFjG2t/E0a3Hv2ywkk4ltpSPrv441QLKXLe f8AYA1c7HUoNPEUo/a7fxP98ALpYs1Bn68yYl3X3+MSet6MTteXLhnq80BVeSWlR hYqjONwuEU8EdOb+VOfnTg3nIY+8gHKGGiKgIpUa89Rx1kkMLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxrJK2nob8l3/V00NXps6FfKPInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBmMmZmODEtZDgwOS0z MWVlLWI0NmYtN2IxZDAxOWUyN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu1WprfKgRTE0MctRqHBxUxOeIGrUpL0Cqb3NrFL1Yqx2MtdgS3qyxT 8R56DNskhcUHUZRgbHGL/vSTf0YzKtqeYQYli2Qoxiivs62ZvwMNE6gKmhrQXGxs lpIivQbwDq3GhoodgLC2VeWNXNDxEad8t+nc2+tFK5y/86Uif3sYKNk1wasr0zDg DHpL6kwuUceZQSIhSS16HvO5DPVf1MHRC+MZ6KPYyyc+sY5QDv/LyCAlcXeM286U 5MQUP8iLoUEVV2+X+/MR3Mv69jmA7huW9SV8g14QvlCSK073qhALMmhNKYWN0UNt 0KKrj8TeuruVMRJ4+OFUfYHIf/zetAQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:21:56 2025 by rpki-client