$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abefce31-1bb4-3079-a2de-4b96368efc41.roa File: abefce31-1bb4-3079-a2de-4b96368efc41.roa (raw, json) Hash identifier: zs5PupzpWIgI6t6/+zwBqTAWIoUx40UVlQ3ltQMKx6g= Subject key identifier: E8:B0:CD:54:32:C4:ED:10:2A:11:93:08:50:D1:1D:6F:45:E3:25:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC234B59101864CE1C991C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abefce31-1bb4-3079-a2de-4b96368efc41.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.45.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:34:b5:91:01:86:4c:e1:c9:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=31ee2b55-cc04-4013-87f7-20987035fd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:1c:88:31:7b:48:ab:ad:04:72:76:7c:2d: cc:97:03:79:8c:c2:d9:c7:f9:51:b8:5e:30:77:73: 17:14:06:5d:e5:81:88:43:4d:12:a1:dd:f5:01:25: 51:2e:8e:86:e6:80:13:c2:a8:44:ea:85:33:e7:0f: 64:f3:7d:b0:69:a4:ac:8a:2a:ea:03:b9:fa:e0:fb: 9f:1f:44:79:38:57:c2:b8:06:44:54:9d:a8:a2:95: d6:83:cd:5f:6c:50:1a:ff:5b:cc:c4:aa:55:d3:b9: d1:94:87:ce:59:5c:77:88:ed:fd:db:b6:db:94:11: 7e:9a:03:e5:d4:ce:4c:e8:c1:79:38:e1:79:4f:8e: f6:64:10:30:ee:f9:c9:d5:f9:d8:98:34:10:cc:4d: 70:b2:2f:31:ab:0c:69:ab:56:96:11:71:71:9e:95: c4:69:80:0d:1c:79:ef:34:a8:0d:7f:c9:f2:15:55: 79:a8:c6:a5:9c:80:96:61:68:d1:8c:a4:f0:be:d3: 07:ca:bc:95:2c:06:3a:f1:06:fd:d9:1f:e8:48:31: a6:b3:83:b8:16:21:12:ea:de:c7:ba:4c:89:7d:74: 2b:1a:3f:5b:cf:80:e1:c2:70:f5:a4:e2:f2:c4:a9: bf:c4:b9:f8:2c:60:b9:05:87:2a:4c:81:81:99:9e: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B0:CD:54:32:C4:ED:10:2A:11:93:08:50:D1:1D:6F:45:E3:25:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abefce31-1bb4-3079-a2de-4b96368efc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0f:d6:5b:3d:cc:cb:40:b5:ac:d8:4e:7f:0f:76:ba:b6:b8: ca:14:76:24:9d:56:71:2e:ad:1b:35:b5:01:01:c0:98:b8:01: 58:50:a2:e2:1d:b2:8f:28:b9:e2:ac:97:48:b3:98:91:6b:ca: 5b:63:87:e7:05:9f:2f:ee:76:c6:64:bb:64:87:cc:03:e7:c2: d7:e1:68:aa:48:28:a7:9d:84:2a:68:1a:ac:5c:a7:a5:d5:13: b9:13:ac:b4:07:04:24:eb:93:cc:38:a5:b0:2c:72:c2:2d:13: 43:c1:a6:1d:8f:24:a7:bb:d8:b6:c3:22:54:e6:a3:16:04:cf: a3:be:18:5b:8b:14:c5:c0:1b:4a:e0:dd:53:b5:c6:49:05:f7: c5:6b:1b:9b:f1:58:58:d6:12:39:dd:ab:3f:5a:01:5c:ca:7b: 15:5e:d8:a2:a7:fe:eb:6c:28:1c:68:7d:09:62:dd:3a:92:69: 5c:63:de:ab:69:4e:86:55:44:5e:05:0e:7b:d4:5d:1d:2a:f3: a0:04:df:73:26:b7:7d:d1:60:1b:e0:9c:34:10:30:7e:c6:e2: 54:91:5a:d3:7f:36:85:5a:eb:c7:45:7d:20:f0:2e:94:f5:35: 4f:88:17:08:35:3c:f8:47:35:e7:ff:38:da:29:72:31:a4:8c: 46:6e:db:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswjS1kQGGTOHJkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzFlZTJiNTUtY2MwNC00MDEzLTg3ZjctMjA5ODcwMzVmZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu34ciDF7SKutBHJ2fC3MlwN5jMLZx/lRuF4w d3MXFAZd5YGIQ00Sod31ASVRLo6G5oATwqhE6oUz5w9k832waaSsiirqA7n64Puf H0R5OFfCuAZEVJ2oopXWg81fbFAa/1vMxKpV07nRlIfOWVx3iO3927bblBF+mgPl 1M5M6MF5OOF5T472ZBAw7vnJ1fnYmDQQzE1wsi8xqwxpq1aWEXFxnpXEaYANHHnv NKgNf8nyFVV5qMalnICWYWjRjKTwvtMHyryVLAY68Qb92R/oSDGms4O4FiES6t7H ukyJfXQrGj9bz4DhwnD1pOLyxKm/xLn4LGC5BYcqTIGBmZ614wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiwzVQyxO0QKhGTCFDRHW9F4yVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWJlZmNlMzEtMWJiNC0z MDc5LWEyZGUtNGI5NjM2OGVmYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRC1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0P1ls9zMtAtazYTn8Pdrq2uMoUdiSdVnEurRs1tQEBwJi4AVhQouId so8oueKsl0izmJFryltjh+cFny/udsZku2SHzAPnwtfhaKpIKKedhCpoGqxcp6XV E7kTrLQHBCTrk8w4pbAscsItE0PBph2PJKe72LbDIlTmoxYEz6O+GFuLFMXAG0rg 3VO1xkkF98VrG5vxWFjWEjndqz9aAVzKexVe2KKn/utsKBxofQli3TqSaVxj3qtp ToZVRF4FDnvUXR0q86AE33Mmt33RYBvgnDQQMH7G4lSRWtN/NoVa68dFfSDwLpT1 NU+IFwg1PPhHNef/ONopcjGkjEZu29s= -----END CERTIFICATE-----Generated at Sun Aug 24 01:35:43 2025 by rpki-client