$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88fd6fa5-3dff-336b-819d-30b2f3025208.roa File: 88fd6fa5-3dff-336b-819d-30b2f3025208.roa (raw, json) Hash identifier: Ns5ZQmQFjdA+Dpd5EHumlK9uJTzYvlNUdogt5dB5ohA= Subject key identifier: 6A:C0:DE:4D:B9:68:97:4C:B7:56:6F:A7:C9:51:2E:00:8B:09:A8:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1CCC5A3121DEACD6482C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88fd6fa5-3dff-336b-819d-30b2f3025208.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.81.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:cc:c5:a3:12:1d:ea:cd:64:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6e34ee67-8580-4f64-b103-33d4c640111c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:1f:4a:89:dc:f6:96:89:40:4f:83:0d:d4: c2:e2:b9:3d:01:bc:1b:a3:c7:93:ee:ac:37:cb:42: 91:f3:b4:55:b9:df:94:32:b4:a8:13:e1:d0:50:a8: 1c:b7:3b:f4:6a:03:03:5e:32:78:72:3c:71:4f:6e: e8:fc:23:69:b4:96:ac:82:95:35:04:d3:84:6a:3c: 8d:49:97:57:f0:51:4e:75:dd:83:71:c1:02:c9:87: 87:72:96:f9:41:4d:ad:ef:7f:7a:c0:b2:6b:0a:05: 53:fc:6a:50:e4:14:c7:7c:27:07:5b:50:d1:2e:ca: e6:5b:c0:ee:3a:af:65:f1:6f:6b:03:44:59:b6:31: 73:34:6e:08:31:5b:73:ec:6b:50:1a:d4:8c:aa:fd: 50:35:fd:d1:61:48:59:33:10:d1:90:56:62:19:8e: 9a:31:3a:13:0a:f7:2a:97:88:cd:69:64:f1:ff:0b: 5d:ac:68:13:12:9e:df:10:ce:45:d5:f9:a9:58:5e: 4d:18:40:3a:91:fe:32:99:9e:8a:d2:26:f2:2e:99: fe:e4:12:6e:9f:61:e6:31:06:0f:02:c5:7c:66:86: e2:db:cf:32:64:ff:06:ec:3c:95:0a:97:35:35:88: b3:d6:b1:3a:56:0e:64:d6:bd:88:77:ba:bc:cf:4f: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C0:DE:4D:B9:68:97:4C:B7:56:6F:A7:C9:51:2E:00:8B:09:A8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88fd6fa5-3dff-336b-819d-30b2f3025208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9f:5b:7d:61:66:35:d3:16:a0:88:95:fc:aa:8c:9c:57:7f: dd:c3:d5:1b:3d:14:3d:2b:00:47:b3:16:56:7a:71:70:a9:88: 89:c7:89:57:59:a5:de:cd:be:70:7d:8d:ef:27:6d:34:fe:d3: 65:84:61:6d:88:0e:ca:d6:e1:7e:de:06:50:0f:f2:01:cb:eb: dc:1b:94:9c:68:b8:e6:f8:dd:28:1b:aa:6a:0a:90:68:95:fc: aa:6b:9d:91:aa:6b:d2:96:87:c8:32:4a:a6:7c:ab:5e:19:a3: a1:d4:3c:4f:50:85:f3:a3:f8:ec:22:2f:ff:0b:48:bc:5c:73: 77:e4:00:6d:54:5b:47:35:01:40:e5:25:58:8a:c3:3f:3a:1b: fc:7e:a1:d0:ac:33:04:a0:48:9f:a6:18:7d:0f:cb:f7:bc:d1: 5f:62:43:84:f7:c3:29:00:d6:09:cb:ce:51:9d:89:f7:05:a7: 79:d0:bb:02:96:54:46:24:90:67:c9:9b:95:68:ab:7e:3d:50: 30:b6:71:72:1f:b2:61:68:d5:b5:a8:e8:a8:41:4a:ce:44:75: f2:07:28:0d:7e:2b:d0:6b:40:d3:c0:64:32:9e:69:64:66:6a: bb:9a:07:41:e3:64:d6:21:dc:c5:a3:f3:ea:d7:9f:b0:7e:44: 42:17:6c:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswczFoxId6s1kgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmUzNGVlNjctODU4MC00ZjY0LWIxMDMtMzNkNGM2NDAxMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSYfSonc9paJQE+DDdTC4rk9Abwbo8eT7qw3 y0KR87RVud+UMrSoE+HQUKgctzv0agMDXjJ4cjxxT27o/CNptJasgpU1BNOEajyN SZdX8FFOdd2DccECyYeHcpb5QU2t7396wLJrCgVT/GpQ5BTHfCcHW1DRLsrmW8Du Oq9l8W9rA0RZtjFzNG4IMVtz7GtQGtSMqv1QNf3RYUhZMxDRkFZiGY6aMToTCvcq l4jNaWTx/wtdrGgTEp7fEM5F1fmpWF5NGEA6kf4ymZ6K0ibyLpn+5BJun2HmMQYP AsV8Zobi288yZP8G7DyVCpc1NYiz1rE6Vg5k1r2Id7q8z0/F3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrA3k25aJdMt1Zvp8lRLgCLCahwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhmZDZmYTUtM2RmZi0z MzZiLTgxOWQtMzBiMmYzMDI1MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGfW31hZjXTFqCIlfyqjJxXf93D1Rs9FD0rAEezFlZ6cXCpiInHiVdZ pd7NvnB9je8nbTT+02WEYW2IDsrW4X7eBlAP8gHL69wblJxouOb43SgbqmoKkGiV /KprnZGqa9KWh8gySqZ8q14Zo6HUPE9QhfOj+OwiL/8LSLxcc3fkAG1UW0c1AUDl JViKwz86G/x+odCsMwSgSJ+mGH0Py/e80V9iQ4T3wykA1gnLzlGdifcFp3nQuwKW VEYkkGfJm5Voq349UDC2cXIfsmFo1bWo6KhBSs5EdfIHKA1+K9BrQNPAZDKeaWRm aruaB0HjZNYh3MWj8+rXn7B+REIXbIM= -----END CERTIFICATE-----Generated at Sun Aug 24 01:33:42 2025 by rpki-client