$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a5621-f275-3db6-8614-0c1d46fe8365.roa File: 8f3a5621-f275-3db6-8614-0c1d46fe8365.roa (raw, json) Hash identifier: C3DF7fDbI4WVFWYAhY4h3D7hzGlERbyJoPrCkSZ5mmA= Subject key identifier: 4C:1A:3B:B5:89:A2:4B:AE:E7:46:29:F2:8D:95:BD:D0:D4:64:56:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3D597EF32436BB2B3AD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a5621-f275-3db6-8614-0c1d46fe8365.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.84.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:d5:97:ef:32:43:6b:b2:b3:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=cf023e0f-0d40-468d-95a2-ddb1631689ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:e7:c0:68:67:37:23:d3:e7:d5:6b:03:2f: bc:76:e4:a6:7c:0e:9a:04:9b:95:86:3e:46:82:96: 54:3d:26:22:7d:a9:ff:59:38:a6:83:94:47:55:9b: 3d:d6:83:67:67:fd:25:12:a3:dc:25:6a:2a:29:e0: a1:cd:84:13:ae:8a:9e:0e:f5:ea:db:6d:6d:06:63: cb:cc:36:d2:91:8f:0b:ce:0f:97:b3:e0:df:37:dc: e8:dc:f2:d0:00:67:a6:d6:44:0d:2f:6e:ab:45:25: fc:59:68:49:0b:e2:f5:73:d5:22:ef:3a:9f:8f:76: 72:15:da:ad:39:c7:78:82:a3:fb:20:c4:f7:ec:6d: 57:15:5e:79:63:4b:c5:36:e1:40:dd:53:07:b7:01: 8a:18:da:64:a8:91:da:37:0f:2b:30:d0:43:37:93: fb:77:9b:cd:4e:81:b5:e1:3b:0e:e8:4c:9e:92:63: e4:3b:cd:e1:44:c1:df:ae:6b:b3:08:ba:29:51:a6: ce:91:77:5a:76:9f:6f:5e:da:a2:fa:0a:ed:d0:2d: b7:06:5f:5e:07:69:3d:b8:76:7d:d9:c5:85:fd:57: 08:45:00:6a:06:92:77:19:82:39:d9:94:73:1a:90: a4:37:f1:22:00:75:c0:e9:f2:0c:b4:00:06:43:45: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1A:3B:B5:89:A2:4B:AE:E7:46:29:F2:8D:95:BD:D0:D4:64:56:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a5621-f275-3db6-8614-0c1d46fe8365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:ca:f3:be:cd:fa:33:f9:3d:ec:5a:e5:a1:67:e4:6d:da:57: c0:10:ed:a2:52:45:2b:b5:02:3f:3b:da:35:e3:10:b0:56:16: 84:86:67:9c:20:f4:0f:92:10:e9:46:43:e5:d9:81:6c:47:3b: be:78:09:68:a5:33:11:c0:f9:32:75:d0:e9:14:74:1d:4d:5c: 44:de:04:7a:bf:a8:cd:5f:8b:22:2d:ea:5b:b8:51:1c:25:d9: e1:0a:8c:36:2e:83:51:49:43:ad:42:aa:34:82:2e:73:58:00: fd:98:2a:02:15:78:cb:d6:b1:45:5c:e5:c4:84:15:c6:40:b9: 7d:0e:9e:94:0f:43:6c:27:fc:db:68:6e:e1:9a:ae:46:5f:15: f3:51:7c:f1:b2:38:68:43:b3:7a:1f:f3:75:f6:d9:21:00:bd: 4d:9e:a0:86:9b:64:f6:d9:06:90:a9:9b:12:a2:40:54:f7:13: de:b7:63:3c:d3:58:9e:90:25:60:98:96:81:db:54:4a:d5:0f: d6:8a:aa:0b:a1:d0:16:58:ef:34:70:10:40:0f:95:e6:d1:8d: 5d:10:f1:e0:de:f3:d3:27:f3:f5:23:c3:bb:7a:a5:5b:b2:8e: 81:d5:24:c1:d8:1a:f3:3e:47:ad:c8:04:1a:9f:9d:9e:e1:a3: bd:41:35:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw9WX7zJDa7KzrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2YwMjNlMGYtMGQ0MC00NjhkLTk1YTItZGRiMTYzMTY4OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJTnwGhnNyPT59VrAy+8duSmfA6aBJuVhj5G gpZUPSYifan/WTimg5RHVZs91oNnZ/0lEqPcJWoqKeChzYQTroqeDvXq221tBmPL zDbSkY8Lzg+Xs+DfN9zo3PLQAGem1kQNL26rRSX8WWhJC+L1c9Ui7zqfj3ZyFdqt Ocd4gqP7IMT37G1XFV55Y0vFNuFA3VMHtwGKGNpkqJHaNw8rMNBDN5P7d5vNToG1 4TsO6EyekmPkO83hRMHfrmuzCLopUabOkXdadp9vXtqi+grt0C23Bl9eB2k9uHZ9 2cWF/VcIRQBqBpJ3GYI52ZRzGpCkN/EiAHXA6fIMtAAGQ0WAawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwaO7WJokuu50Yp8o2VvdDUZFbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYzYTU2MjEtZjI3NS0z ZGI2LTg2MTQtMGMxZDQ2ZmU4MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvK877N+jP5Pexa5aFn5G3aV8AQ7aJSRSu1Aj872jXjELBWFoSGZ5wg 9A+SEOlGQ+XZgWxHO754CWilMxHA+TJ10OkUdB1NXETeBHq/qM1fiyIt6lu4URwl 2eEKjDYug1FJQ61CqjSCLnNYAP2YKgIVeMvWsUVc5cSEFcZAuX0OnpQPQ2wn/Nto buGarkZfFfNRfPGyOGhDs3of83X22SEAvU2eoIabZPbZBpCpmxKiQFT3E963YzzT WJ6QJWCYloHbVErVD9aKqguh0BZY7zRwEEAPlebRjV0Q8eDe89Mn8/Ujw7t6pVuy joHVJMHYGvM+R63IBBqfnZ7ho71BNc8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:24:46 2025 by rpki-client