$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d0f382-3e75-364c-beb2-f20efc0d8302.roa File: 89d0f382-3e75-364c-beb2-f20efc0d8302.roa (raw, json) Hash identifier: oxWW7jPisuHEFjNX3D7P88NPyZkAQgIluwKThThhDws= Subject key identifier: 24:41:55:3E:AE:6D:06:8F:6B:1B:ED:90:A8:9C:2D:99:EC:F6:58:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC445E394287586CF0B7200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d0f382-3e75-364c-beb2-f20efc0d8302.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.51.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:45:e3:94:28:75:86:cf:0b:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e8d77b5d-4551-4059-ac2b-74074ba60aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:71:d9:ec:3d:a8:5a:be:35:72:d9:65:34: 36:0d:91:34:a4:2a:10:6c:00:8d:e5:7e:b3:d3:76: 2b:6d:36:95:fa:e2:61:56:ba:d0:19:68:b6:ab:b7: c2:a6:4e:0a:49:84:93:a2:34:86:2b:99:f6:a1:3e: 91:69:f8:03:35:f8:54:08:de:c1:03:6b:0d:aa:10: 7c:72:1a:4f:c9:12:58:4a:4c:1b:30:7f:f9:3f:82: 2c:fd:0e:41:02:6c:18:64:40:e8:13:46:88:ab:b1: cb:ac:58:27:98:f6:64:9e:b9:6e:b6:96:57:58:63: 89:48:ea:6b:dc:fc:ce:75:b8:8b:26:49:c4:49:67: 05:30:8e:48:2c:2e:8d:1d:f5:87:17:94:bb:28:f1: 11:80:0a:ce:cc:e2:63:ed:5c:25:75:e1:b1:cb:0f: ac:96:f2:9e:68:ac:90:1e:8b:95:86:7c:43:96:a4: ed:8b:8f:51:62:68:84:a0:1b:56:fe:ef:e3:d6:30: ea:8d:84:9b:4f:1a:7e:4d:b7:64:ec:d2:2b:da:a8: dc:a5:00:bb:51:33:eb:87:c8:c1:7c:e8:d7:ba:c9: b4:cf:ea:bc:bd:f9:10:14:55:b0:38:45:35:e6:b7: ef:72:85:6f:0c:93:9a:25:98:20:22:f9:4f:d5:24: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:41:55:3E:AE:6D:06:8F:6B:1B:ED:90:A8:9C:2D:99:EC:F6:58:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89d0f382-3e75-364c-beb2-f20efc0d8302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:f3:91:f9:40:06:4e:aa:f6:64:7e:20:ab:d9:91:36:a6:2a: e1:87:7c:a4:d4:08:b9:9e:fb:e7:0d:6d:89:03:91:60:ef:59: 19:79:8d:fb:d3:b4:45:0d:f4:30:5b:9b:5f:95:f1:a0:3e:dc: 3e:4e:54:37:f6:cf:bd:9b:81:66:63:ac:2a:0c:6f:c1:51:f8: c2:06:0e:bd:c5:3c:fd:b6:cc:df:48:1b:7a:c3:d7:86:fc:5f: 41:28:e8:a6:ed:85:ea:fe:fc:c1:bf:a0:96:0c:c1:73:3d:41: 31:54:06:56:8e:84:72:0e:1c:be:86:1a:25:f5:9c:e9:c6:aa: 75:1d:ca:07:5b:b9:97:94:b2:77:3c:1d:6a:7c:84:7f:92:2f: 85:b9:b6:28:5c:69:4a:05:7a:08:a4:ce:a4:18:bf:fd:cc:3f: 82:dc:78:eb:eb:cb:77:3b:de:23:c8:8f:8f:0e:7b:22:42:40: 71:dc:ad:a4:d3:f5:8e:5f:8a:8f:38:f5:19:1d:26:e7:fc:a1: 07:c0:d8:48:55:db:02:af:29:89:c2:e4:ee:9f:ed:f5:03:e5: 02:e7:d1:f8:9f:e6:7b:76:8e:11:a1:cb:ee:e0:b2:0b:aa:01: e7:73:87:89:f1:7d:13:44:60:f4:a4:4a:2d:76:a2:c8:b2:41: 53:cb:f7:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxEXjlCh1hs8LcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZThkNzdiNWQtNDU1MS00MDU5LWFjMmItNzQwNzRiYTYwYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRpx2ew9qFq+NXLZZTQ2DZE0pCoQbACN5X6z 03YrbTaV+uJhVrrQGWi2q7fCpk4KSYSTojSGK5n2oT6RafgDNfhUCN7BA2sNqhB8 chpPyRJYSkwbMH/5P4Is/Q5BAmwYZEDoE0aIq7HLrFgnmPZknrlutpZXWGOJSOpr 3PzOdbiLJknESWcFMI5ILC6NHfWHF5S7KPERgArOzOJj7VwldeGxyw+slvKeaKyQ HouVhnxDlqTti49RYmiEoBtW/u/j1jDqjYSbTxp+Tbdk7NIr2qjcpQC7UTPrh8jB fOjXusm0z+q8vfkQFFWwOEU15rfvcoVvDJOaJZggIvlP1SSsPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRBVT6ubQaPaxvtkKicLZns9li0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODlkMGYzODItM2U3NS0z NjRjLWJlYjItZjIwZWZjMGQ4MzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfzkflABk6q9mR+IKvZkTamKuGHfKTUCLme++cNbYkDkWDvWRl5jfvT tEUN9DBbm1+V8aA+3D5OVDf2z72bgWZjrCoMb8FR+MIGDr3FPP22zN9IG3rD14b8 X0Eo6Kbther+/MG/oJYMwXM9QTFUBlaOhHIOHL6GGiX1nOnGqnUdygdbuZeUsnc8 HWp8hH+SL4W5tihcaUoFegikzqQYv/3MP4LceOvry3c73iPIj48OeyJCQHHcraTT 9Y5fio849RkdJuf8oQfA2EhV2wKvKYnC5O6f7fUD5QLn0fif5nt2jhGhy+7gsguq Aedzh4nxfRNEYPSkSi12osiyQVPL93g= -----END CERTIFICATE-----Generated at Sun Aug 24 09:36:31 2025 by rpki-client