$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa File: 8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa (raw, json) Hash identifier: Y9RjCZfLGmXCWmCrWI6RZeiRDjbHsNLEO3QaWHSj530= Subject key identifier: EA:59:C3:7C:B6:8D:A6:2B:8B:7D:C2:BB:00:79:22:DA:FC:31:7C:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE4B2C6434ACF611D3AB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.34.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:4b:2c:64:34:ac:f6:11:d3:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=c7c0d0b0-c5b8-4311-8b2b-e4173ce1ade9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:68:e8:35:b4:ad:ea:f1:2c:87:b6:ea:aa: 0a:15:fb:b0:d5:04:74:96:8b:b4:d1:54:b1:9d:dc: f6:91:f2:0c:f9:50:95:a1:4d:f2:59:43:eb:7a:30: ad:46:89:fa:51:6e:8e:8c:5d:88:04:fe:f9:08:14: 84:fb:5a:c0:cf:9f:4f:0c:99:65:71:57:0f:01:4a: bc:01:5d:88:de:26:ee:18:10:bd:76:20:f1:d9:d2: 40:a7:82:06:9e:3b:bc:6a:bd:8c:f3:5b:cd:7e:a5: a8:3e:75:2b:cb:22:a4:b1:70:08:ce:de:99:f5:9f: 79:bc:fe:24:fe:8b:5a:43:2f:b1:05:52:52:79:92: d7:46:84:2e:28:67:43:1a:f8:66:e7:2a:4e:c8:59: b0:ad:0f:a6:65:b6:1e:7e:de:60:98:89:0e:3c:2a: 9b:5e:dc:bf:3e:cd:5b:df:bb:ad:7d:88:27:36:ed: dd:49:88:3e:7a:0a:e3:a4:ec:76:09:4d:d4:7c:cc: 3e:03:cd:f4:27:65:6a:ca:97:d3:30:0f:41:b1:2a: fd:75:c5:80:6f:f3:78:ea:df:1b:68:03:e6:80:3a: a2:2e:d8:39:cc:ea:f9:66:02:35:70:7e:2b:1b:32: b1:ef:31:26:80:3a:40:47:34:b7:e3:86:5f:ce:eb: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:59:C3:7C:B6:8D:A6:2B:8B:7D:C2:BB:00:79:22:DA:FC:31:7C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:dd:61:fc:3a:d8:1e:6e:39:75:49:d6:b8:fd:da:d7:68:6b: e3:7a:39:96:46:d1:47:d4:40:7e:58:6e:55:d2:28:19:29:cb: 0d:5f:ec:c2:b0:d3:24:88:c7:48:49:d1:ee:dc:c2:a8:f3:57: 86:46:9a:b1:30:28:ab:73:dc:6d:e7:3b:80:d1:4c:50:72:02: da:ea:50:86:c8:60:51:32:91:d4:36:c8:41:86:a4:86:ca:c4: 97:9b:bc:36:3a:31:72:56:5f:78:ab:b0:71:5c:54:00:43:ef: 52:b9:fc:98:de:54:3e:fd:6d:9a:60:0c:9a:53:ac:ef:6c:7d: d5:a9:6b:73:9f:21:39:9e:f3:c1:da:cd:37:0b:00:8f:b2:59: 90:b2:f8:97:05:9b:4a:fe:fd:e3:6b:82:5a:f5:d7:c0:0d:b5: 21:dd:e7:46:32:02:c4:41:25:58:33:44:b8:53:b0:fc:38:54: 6a:bf:96:e7:cf:8d:43:b1:e0:2e:89:2e:90:df:1d:f6:ce:46: 24:54:e2:cd:d1:5e:c9:b4:14:57:23:0d:73:6c:6f:36:38:ee: ff:c6:07:8c:53:83:8b:62:2b:75:7b:7f:6d:d4:e4:4b:61:48: 66:bd:6a:f9:32:70:18:c6:a3:b4:52:26:ab:77:bd:df:3e:69: a3:44:a5:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07kssZDSs9hHTq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzdjMGQwYjAtYzViOC00MzExLThiMmItZTQxNzNjZTFhZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdNo6DW0rerxLIe26qoKFfuw1QR0lou00VSx ndz2kfIM+VCVoU3yWUPrejCtRon6UW6OjF2IBP75CBSE+1rAz59PDJllcVcPAUq8 AV2I3ibuGBC9diDx2dJAp4IGnju8ar2M81vNfqWoPnUryyKksXAIzt6Z9Z95vP4k /otaQy+xBVJSeZLXRoQuKGdDGvhm5ypOyFmwrQ+mZbYeft5gmIkOPCqbXty/Ps1b 37utfYgnNu3dSYg+egrjpOx2CU3UfMw+A830J2VqypfTMA9BsSr9dcWAb/N46t8b aAPmgDqiLtg5zOr5ZgI1cH4rGzKx7zEmgDpARzS344Zfzusr9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpZw3y2jaYri33CuwB5Itr8MXymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ4Yjc4MWEtNzc5Ny0z ZjhiLTlmOGYtNjRjNmRhYzM0Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCJKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfdYfw62B5uOXVJ1rj92tdoa+N6OZZG0UfUQH5YblXSKBkpyw1f7MKw 0ySIx0hJ0e7cwqjzV4ZGmrEwKKtz3G3nO4DRTFByAtrqUIbIYFEykdQ2yEGGpIbK xJebvDY6MXJWX3irsHFcVABD71K5/JjeVD79bZpgDJpTrO9sfdWpa3OfITme88Ha zTcLAI+yWZCy+JcFm0r+/eNrglr118ANtSHd50YyAsRBJVgzRLhTsPw4VGq/lufP jUOx4C6JLpDfHfbORiRU4s3RXsm0FFcjDXNsbzY47v/GB4xTg4tiK3V7f23U5Eth SGa9avkycBjGo7RSJqt3vd8+aaNEpU0= -----END CERTIFICATE-----Generated at Sun Aug 24 06:24:44 2025 by rpki-client