$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f028fed-c8c2-3315-9521-cbd759730581.roa File: 8f028fed-c8c2-3315-9521-cbd759730581.roa (raw, json) Hash identifier: rKOn0yVSBnkuXn0heEmJWqTtQ8t9m/JC9jko96KndrY= Subject key identifier: FF:B0:8A:18:CE:A8:89:1F:A1:49:FF:33:E6:1C:DF:E5:6C:7C:71:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC22D95F8F6F22B8B656D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f028fed-c8c2-3315-9521-cbd759730581.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.39.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:2d:95:f8:f6:f2:2b:8b:65:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=13a2b44b-6a00-4fb6-9e8f-35fc77b0f12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:99:81:d5:e7:e0:8a:a2:b0:62:15:b5:47: 52:a5:32:10:2a:d8:d0:01:bb:ea:df:5b:d9:06:13: 81:f6:19:33:58:8a:f9:1d:f8:fd:6f:02:b7:6b:92: 62:44:9b:36:e3:3c:d6:12:71:d4:07:1b:83:06:17: 4c:f7:27:22:cd:cb:25:33:83:44:83:10:75:09:f7: 61:51:59:5a:91:62:0b:b1:3f:ae:b8:d7:60:63:37: 5a:2d:9d:b5:0d:4f:22:7b:9f:c1:b1:01:90:f0:ab: 0f:4f:51:e9:95:c0:f0:69:5c:2a:66:b0:62:90:71: 04:90:07:dc:af:6e:38:11:a0:e9:b4:3e:7d:1b:21: 3a:40:93:9b:aa:e0:54:15:72:ad:76:b1:a7:71:26: 95:55:6a:cd:3c:a6:a4:0e:0d:11:8a:f1:f2:85:7f: 60:10:7f:45:26:59:72:8c:0a:e9:67:1f:49:1a:51: 49:f7:b8:82:f0:dd:c4:a4:5e:52:50:6f:6a:fa:24: 9f:25:bc:e8:34:2c:e9:b0:bc:26:16:fe:a8:ac:ad: 66:d2:52:77:af:1f:df:4e:29:80:b1:0a:2c:a1:4f: 7a:53:e4:52:8b:c0:1c:13:c4:8b:4c:9e:dc:65:86: 91:68:c0:09:61:68:76:3a:58:e6:da:75:66:c0:3b: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B0:8A:18:CE:A8:89:1F:A1:49:FF:33:E6:1C:DF:E5:6C:7C:71:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f028fed-c8c2-3315-9521-cbd759730581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c9:b2:43:fe:6a:d3:b5:39:d7:e4:de:2e:6a:36:21:82:82: 93:da:1e:76:ae:5d:89:19:d1:0f:95:60:48:bd:e1:21:f1:41: 05:c8:d3:d3:2b:31:54:6d:c3:80:87:c9:f6:fb:9f:03:e6:7a: 54:9d:27:b0:66:db:64:6a:6f:06:36:e8:b4:ac:82:ff:62:fa: c7:0e:a1:6c:b2:9d:02:8c:bf:0b:40:f5:c8:88:1c:e1:a0:43: 5f:27:9e:9f:1f:2f:bc:9b:58:01:6b:85:6c:f6:6b:a7:45:94: f6:57:04:c6:be:53:f8:64:aa:a9:8e:ca:49:1c:a4:06:fc:0c: d0:36:61:21:b7:b3:fd:cf:51:71:a6:00:0c:eb:ad:85:47:c6: df:c9:8e:86:c9:80:93:a0:3f:06:64:af:17:db:2a:0f:f0:71: cb:0c:92:d5:ce:3a:25:8e:4a:28:9e:f5:4e:de:7a:19:e6:b1: 7e:d7:87:d2:38:43:e3:72:17:97:5e:f9:11:c3:fb:a8:f6:80: 3c:1c:d8:67:f7:c4:dc:c3:a7:e4:21:6f:a0:0d:af:68:7e:b3: e6:d8:6e:e1:73:4a:da:81:4c:fa:22:d2:63:fd:cf:32:f9:24: ef:6c:1e:68:da:8b:50:bd:19:fc:00:45:7a:42:78:28:6d:2d: 6b:06:b9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswi2V+PbyK4tlbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTNhMmI0NGItNmEwMC00ZmI2LTllOGYtMzVmYzc3YjBmMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4OZgdXn4IqisGIVtUdSpTIQKtjQAbvq31vZ BhOB9hkzWIr5Hfj9bwK3a5JiRJs24zzWEnHUBxuDBhdM9ycizcslM4NEgxB1Cfdh UVlakWILsT+uuNdgYzdaLZ21DU8ie5/BsQGQ8KsPT1HplcDwaVwqZrBikHEEkAfc r244EaDptD59GyE6QJObquBUFXKtdrGncSaVVWrNPKakDg0RivHyhX9gEH9FJlly jArpZx9JGlFJ97iC8N3EpF5SUG9q+iSfJbzoNCzpsLwmFv6orK1m0lJ3rx/fTimA sQosoU96U+RSi8AcE8SLTJ7cZYaRaMAJYWh2Oljm2nVmwDtW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+wihjOqIkfoUn/M+Yc3+VsfHH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYwMjhmZWQtYzhjMi0z MzE1LTk1MjEtY2JkNzU5NzMwNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPJskP+atO1Odfk3i5qNiGCgpPaHnauXYkZ0Q+VYEi94SHxQQXI09Mr MVRtw4CHyfb7nwPmelSdJ7Bm22RqbwY26LSsgv9i+scOoWyynQKMvwtA9ciIHOGg Q18nnp8fL7ybWAFrhWz2a6dFlPZXBMa+U/hkqqmOykkcpAb8DNA2YSG3s/3PUXGm AAzrrYVHxt/JjobJgJOgPwZkrxfbKg/wccsMktXOOiWOSiie9U7eehnmsX7Xh9I4 Q+NyF5de+RHD+6j2gDwc2Gf3xNzDp+Qhb6ANr2h+s+bYbuFzStqBTPoi0mP9zzL5 JO9sHmjai1C9GfwARXpCeChtLWsGufQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:56:48 2025 by rpki-client