$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae40cba9-1163-3f39-9ca4-39eda483be3f.roa File: ae40cba9-1163-3f39-9ca4-39eda483be3f.roa (raw, json) Hash identifier: nlxpB334j9Clo9wnrTaed+/rr8Fp0Fdu5yTy6uOdqhI= Subject key identifier: A9:2F:8D:DB:9C:52:5A:B7:F2:4A:3A:71:A6:A6:27:E7:03:F3:3E:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC43CCAAD9BA9E0884F6AE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae40cba9-1163-3f39-9ca4-39eda483be3f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.39.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:3c:ca:ad:9b:a9:e0:88:4f:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c833980d-4357-433b-a535-ed1fcc29f27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:e9:ac:c6:29:64:95:64:6f:92:ac:48:85: ef:0b:d4:0e:64:ed:5b:bd:56:6a:07:eb:3b:c8:6e: 6a:02:42:36:aa:91:eb:7d:dd:fd:73:6a:2b:ec:1c: bc:df:5a:e1:82:59:a0:dd:60:b6:43:61:19:3a:8c: 40:c1:bc:35:98:6e:cc:32:4d:e7:bd:e3:fd:78:fe: b5:45:45:27:78:56:5a:fb:01:8e:31:f3:51:bb:45: 9b:9d:83:ab:88:aa:94:a3:59:c5:ff:f7:fe:fe:53: 88:d0:c0:27:bf:4c:9e:fb:d4:90:01:31:46:e5:bd: 8c:93:a9:60:c7:ce:45:5c:43:f6:d2:7c:da:8c:8f: 60:29:a3:13:0a:8c:63:4f:58:ab:9e:fb:a7:6d:b0: 5b:6f:16:84:68:9c:5c:5b:6c:91:3b:37:33:65:95: 4b:fb:2b:f9:7b:57:81:38:29:34:1d:f7:46:a0:41: a3:14:23:55:0b:0c:7a:f1:fe:af:99:04:6d:04:ab: df:6c:97:96:c2:a3:f6:33:33:10:d2:1c:1f:48:7f: a1:4a:02:43:bb:9b:fb:fb:97:6c:fb:7f:1b:36:bb: 02:50:c1:d6:dd:6b:0d:3e:89:39:ab:10:c4:d7:04: 7a:4b:1e:2d:3d:f5:84:9a:4d:b4:f8:b6:1e:5d:7a: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2F:8D:DB:9C:52:5A:B7:F2:4A:3A:71:A6:A6:27:E7:03:F3:3E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae40cba9-1163-3f39-9ca4-39eda483be3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:f2:77:5a:7e:88:70:26:42:27:7f:3f:d5:97:07:ec:d2:59: 12:66:53:58:85:75:3d:2d:71:bb:c7:fc:5e:fc:2e:31:a9:45: 8c:10:ae:49:04:3f:30:a8:bf:83:15:be:db:06:b4:8f:93:78: bb:37:d6:d6:0b:a1:30:41:ac:48:c3:59:d3:53:aa:0d:c3:f4: ef:1e:81:2a:e7:b5:2b:33:28:4d:60:e8:e5:05:85:83:4c:e4: 50:ba:21:bf:2f:93:ba:d8:7c:b5:d4:58:bd:6b:d2:7b:f5:02: ce:96:16:79:79:3b:89:d8:72:c7:7b:8d:bf:ce:66:18:ea:14: b3:5e:04:fc:6c:28:05:9d:47:b3:24:70:6d:09:85:64:b5:ba: 6f:07:ec:0e:4d:95:8d:44:9d:f8:19:fa:65:53:f0:88:bb:b7: 3c:b9:58:ab:99:bf:5c:eb:8a:59:69:2b:59:a6:ab:2e:4f:fb: 98:27:70:2c:09:4d:d1:72:bb:6e:cf:8e:22:ac:41:7d:3e:1c: 75:93:e3:1b:72:f6:f7:ed:6a:4e:c4:ae:47:1a:51:6f:44:6c: 1a:59:8f:5a:60:73:53:19:b3:b4:b5:a0:43:44:6d:d1:b7:74: 69:34:c1:26:eb:37:a8:98:68:2a:cf:ee:0d:61:52:20:b7:01: e2:aa:cb:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxDzKrZup4IhPauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzgzMzk4MGQtNDM1Ny00MzNiLWE1MzUtZWQxZmNjMjlmMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMTprMYpZJVkb5KsSIXvC9QOZO1bvVZqB+s7 yG5qAkI2qpHrfd39c2or7By831rhglmg3WC2Q2EZOoxAwbw1mG7MMk3nveP9eP61 RUUneFZa+wGOMfNRu0WbnYOriKqUo1nF//f+/lOI0MAnv0ye+9SQATFG5b2Mk6lg x85FXEP20nzajI9gKaMTCoxjT1irnvunbbBbbxaEaJxcW2yROzczZZVL+yv5e1eB OCk0HfdGoEGjFCNVCwx68f6vmQRtBKvfbJeWwqP2MzMQ0hwfSH+hSgJDu5v7+5ds +38bNrsCUMHW3WsNPok5qxDE1wR6Sx4tPfWEmk20+LYeXXoxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkvjducUlq38ko6caamJ+cD8z5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWU0MGNiYTktMTE2My0z ZjM5LTljYTQtMzllZGE0ODNiZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXyd1p+iHAmQid/P9WXB+zSWRJmU1iFdT0tcbvH/F78LjGpRYwQrkkE PzCov4MVvtsGtI+TeLs31tYLoTBBrEjDWdNTqg3D9O8egSrntSszKE1g6OUFhYNM 5FC6Ib8vk7rYfLXUWL1r0nv1As6WFnl5O4nYcsd7jb/OZhjqFLNeBPxsKAWdR7Mk cG0JhWS1um8H7A5NlY1EnfgZ+mVT8Ii7tzy5WKuZv1zrillpK1mmqy5P+5gncCwJ TdFyu27PjiKsQX0+HHWT4xty9vftak7ErkcaUW9EbBpZj1pgc1MZs7S1oENEbdG3 dGk0wSbrN6iYaCrP7g1hUiC3AeKqy5c= -----END CERTIFICATE-----Generated at Sun Aug 24 01:19:23 2025 by rpki-client