$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef1a7e6-3344-3bf8-ab26-8635626d8432.roa File: 8ef1a7e6-3344-3bf8-ab26-8635626d8432.roa (raw, json) Hash identifier: AoYQoN5Nm2Xj0Mp+wOIISoDG9cTmppMgjlKfakjLLXA= Subject key identifier: 4C:31:5A:25:49:5E:11:D7:8D:29:B3:27:5F:D3:1D:CF:36:41:56:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC43AA13790269AF241F600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef1a7e6-3344-3bf8-ab26-8635626d8432.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.39.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:3a:a1:37:90:26:9a:f2:41:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bb746f38-a0c6-475c-b7c9-5e59f09e4fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:08:7f:df:5d:6f:4a:09:a8:b0:5b:19:7c:78: e4:38:2f:0d:14:4c:ee:bd:5c:8d:25:d8:40:c5:d7: 56:e3:f1:89:8d:e8:cf:c4:e6:54:17:f4:c3:bb:91: fd:02:50:09:2f:9e:dc:90:d8:dd:0e:1e:66:cb:11: 6c:1d:0f:1d:c5:c4:c0:aa:10:6c:47:8a:63:49:4b: 0e:66:71:40:a2:a3:4c:8c:d7:1a:ec:27:56:02:d5: 99:fc:6a:8f:bd:90:64:51:59:99:37:5e:a8:80:8c: d5:aa:b0:1b:41:3e:3b:64:fd:d2:68:94:65:27:e9: ed:62:db:a8:4f:58:af:a6:bc:a8:b6:24:8f:34:cf: 86:d0:4b:0c:e0:9b:bb:9e:04:e3:38:fe:66:33:d8: 43:0c:26:01:e2:9a:13:fb:5b:99:3f:79:15:f4:0b: 2f:1a:d7:83:de:b1:c6:91:73:8c:e8:d5:34:48:8e: 9a:0c:cf:ed:55:4e:01:8c:b2:0d:60:42:ab:d9:6c: 24:04:b4:ad:54:f1:2b:ce:a7:2b:0a:1c:c0:f0:a1: 61:42:ea:c6:90:75:c1:d1:1e:bf:e9:76:16:cd:14: c2:c3:31:c4:55:c1:d2:3c:be:1c:94:50:3c:53:ad: ca:04:89:05:a5:d0:fe:a6:47:fc:9d:32:50:3e:48: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:31:5A:25:49:5E:11:D7:8D:29:B3:27:5F:D3:1D:CF:36:41:56:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef1a7e6-3344-3bf8-ab26-8635626d8432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:64:81:02:1e:5e:45:6e:eb:5b:fd:b7:05:27:7b:02:95:f4: 89:6f:d5:e3:0d:fa:82:16:5e:57:b9:e8:73:c3:cf:58:24:9e: 8c:c3:e1:36:29:74:ad:51:33:86:e1:0a:8d:c8:70:40:eb:ce: d4:7c:03:98:66:cc:67:28:49:66:bb:eb:a7:b3:bc:8b:95:ce: 8a:be:7a:48:49:a9:a0:64:dd:d7:73:0d:ce:4a:a5:73:25:cf: 67:21:b7:c7:83:79:9d:31:86:f4:87:e6:8e:26:ed:63:aa:f8: 0f:eb:7f:88:1d:7f:82:bb:96:22:ba:32:cb:f5:5f:3e:53:89: 4e:af:6b:0f:91:6c:35:88:75:25:a0:a0:67:05:ad:ef:6a:d8: 2b:48:2f:de:aa:fa:e3:9b:41:2f:08:6b:1a:e6:e2:5e:64:b4: 25:47:e5:29:c2:d7:f4:27:f1:83:c5:df:c2:da:41:6f:dd:03: d3:d0:13:21:cd:66:92:5a:86:83:da:19:52:17:32:59:85:4e: 8b:c8:e1:0a:71:aa:e1:cc:c3:63:16:3d:fe:75:1d:98:3f:54: eb:25:5c:25:9c:9e:67:7a:8d:f3:d6:12:76:ce:d4:56:05:75: c5:76:7e:0c:d8:ce:5a:2c:a3:f5:c2:f9:69:db:9b:2c:bd:e0: 5d:57:5f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDqhN5AmmvJB9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmI3NDZmMzgtYTBjNi00NzVjLWI3YzktNWU1OWYwOWU0ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQh/311vSgmosFsZfHjkOC8NFEzuvVyNJdhA xddW4/GJjejPxOZUF/TDu5H9AlAJL57ckNjdDh5myxFsHQ8dxcTAqhBsR4pjSUsO ZnFAoqNMjNca7CdWAtWZ/GqPvZBkUVmZN16ogIzVqrAbQT47ZP3SaJRlJ+ntYtuo T1ivpryotiSPNM+G0EsM4Ju7ngTjOP5mM9hDDCYB4poT+1uZP3kV9AsvGteD3rHG kXOM6NU0SI6aDM/tVU4BjLINYEKr2WwkBLStVPErzqcrChzA8KFhQurGkHXB0R6/ 6XYWzRTCwzHEVcHSPL4clFA8U63KBIkFpdD+pkf8nTJQPkjyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwxWiVJXhHXjSmzJ1/THc82QVZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGVmMWE3ZTYtMzM0NC0z YmY4LWFiMjYtODYzNTYyNmQ4NDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJkgQIeXkVu61v9twUnewKV9Ilv1eMN+oIWXle56HPDz1gknozD4TYp dK1RM4bhCo3IcEDrztR8A5hmzGcoSWa766ezvIuVzoq+ekhJqaBk3ddzDc5KpXMl z2cht8eDeZ0xhvSH5o4m7WOq+A/rf4gdf4K7liK6Msv1Xz5TiU6vaw+RbDWIdSWg oGcFre9q2CtIL96q+uObQS8Iaxrm4l5ktCVH5SnC1/Qn8YPF38LaQW/dA9PQEyHN ZpJahoPaGVIXMlmFTovI4QpxquHMw2MWPf51HZg/VOslXCWcnmd6jfPWEnbO1FYF dcV2fgzYzloso/XC+Wnbmyy94F1XX+4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:10:35 2025 by rpki-client