$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81673ea-87db-3d54-8484-bd0ad0359713.roa File: d81673ea-87db-3d54-8484-bd0ad0359713.roa (raw, json) Hash identifier: gTf+UUja2kSNYvSjg9aFaO4UiPN6KmeU0KvnwX+FLE0= Subject key identifier: F9:30:30:F6:87:34:6F:66:F1:13:71:34:12:F1:AB:64:56:6E:00:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC23F5187CE34F035948680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81673ea-87db-3d54-8484-bd0ad0359713.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.54.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:3f:51:87:ce:34:f0:35:94:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8cd1b058-fe63-4f1c-b6d9-54edd14d5253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e5:d9:6d:e1:4f:89:47:f4:cb:1c:60:75:2c: 99:d0:76:dd:4c:62:bd:0b:a9:99:e4:21:93:a9:63: 78:94:09:b7:1d:44:10:5e:97:4e:59:1d:7f:ce:1c: af:ed:6e:d6:76:2f:82:16:fd:5d:59:36:01:d5:0e: 88:eb:7a:20:aa:0b:a1:ef:a4:fc:24:68:47:5f:ca: d0:64:ed:cd:a6:ff:58:55:a6:75:cf:59:8c:68:87: 26:98:3b:43:84:3a:fa:39:fe:65:74:ef:4a:5e:0b: d9:fa:10:58:f3:58:cc:43:4d:94:8f:7d:1f:67:c9: d4:a8:43:d8:e3:16:c9:aa:bc:39:b7:70:25:42:b5: c5:10:cb:65:b4:e6:1c:ab:4b:17:82:46:cb:54:e8: a7:5d:3d:4a:34:bf:8c:fb:56:a9:dc:3b:af:61:6d: d5:3c:a7:46:57:a6:5e:2a:9b:be:2e:4b:2e:c1:58: 55:77:e6:29:b5:0f:2f:f2:bb:60:a4:8a:e1:60:c1: d1:5d:c7:b0:35:81:d5:83:1a:05:92:d4:98:2d:cb: 55:1b:59:e7:fa:83:09:9c:49:17:45:f0:8b:d9:35: 61:9d:72:b8:61:f3:cd:fe:99:2e:a3:6d:ff:8e:9f: 47:02:8e:5a:6f:6e:11:2f:40:b6:cf:c6:62:43:dd: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:30:30:F6:87:34:6F:66:F1:13:71:34:12:F1:AB:64:56:6E:00:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81673ea-87db-3d54-8484-bd0ad0359713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:56:bc:c0:35:8e:56:a4:12:5b:86:2e:40:49:61:33:ff:c7: 8c:84:5e:ca:37:5f:b2:7a:a7:04:e8:4d:a4:a4:f8:1c:79:5a: c2:88:e7:46:78:1f:ac:04:1d:f9:22:68:9b:f5:53:78:2b:ee: 6d:dc:70:53:f6:fb:cb:1a:54:7f:3d:e5:46:fd:e8:ae:a3:43: 9d:46:6b:cb:c3:11:95:be:f9:b4:8f:a2:81:df:f6:83:d3:96: 7b:03:72:00:2c:17:08:29:b4:da:07:ca:07:cc:10:76:bc:6a: af:fa:9f:01:a6:ad:73:3b:e5:7f:9e:b6:df:3a:e9:15:fa:04: b3:6a:71:71:a4:fc:a8:e7:14:69:b5:07:1c:34:2c:19:5f:d5: 53:c8:f4:2a:98:e6:87:f7:18:cb:e0:97:5a:6c:11:4e:91:b2: 31:f9:af:1e:65:9e:89:4c:64:72:d7:b2:18:30:c3:a7:52:01: d4:c7:bd:2f:38:94:3c:11:1b:88:1b:7c:49:2a:32:86:5a:31: 51:f1:9d:45:c9:07:96:b8:74:57:3e:ec:f1:1e:d5:d2:90:80: 24:50:41:6f:0b:16:72:1e:a7:c2:a0:c7:0b:a4:bf:6a:2c:bc: 94:55:dc:07:ef:66:3d:e5:ae:b7:fb:9d:f1:86:b5:22:51:23: 89:7b:2f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswj9Rh8408DWUhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGNkMWIwNTgtZmU2My00ZjFjLWI2ZDktNTRlZGQxNGQ1MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuXZbeFPiUf0yxxgdSyZ0HbdTGK9C6mZ5CGT qWN4lAm3HUQQXpdOWR1/zhyv7W7Wdi+CFv1dWTYB1Q6I63ogqguh76T8JGhHX8rQ ZO3Npv9YVaZ1z1mMaIcmmDtDhDr6Of5ldO9KXgvZ+hBY81jMQ02Uj30fZ8nUqEPY 4xbJqrw5t3AlQrXFEMtltOYcq0sXgkbLVOinXT1KNL+M+1ap3DuvYW3VPKdGV6Ze Kpu+LksuwVhVd+YptQ8v8rtgpIrhYMHRXcewNYHVgxoFktSYLctVG1nn+oMJnEkX RfCL2TVhnXK4YfPN/pkuo23/jp9HAo5ab24RL0C2z8ZiQ92tuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkwMPaHNG9m8RNxNBLxq2RWbgAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgxNjczZWEtODdkYi0z ZDU0LTg0ODQtYmQwYWQwMzU5NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZWvMA1jlakEluGLkBJYTP/x4yEXso3X7J6pwToTaSk+Bx5WsKI50Z4 H6wEHfkiaJv1U3gr7m3ccFP2+8saVH895Ub96K6jQ51Ga8vDEZW++bSPooHf9oPT lnsDcgAsFwgptNoHygfMEHa8aq/6nwGmrXM75X+ett866RX6BLNqcXGk/KjnFGm1 Bxw0LBlf1VPI9CqY5of3GMvgl1psEU6RsjH5rx5lnolMZHLXshgww6dSAdTHvS84 lDwRG4gbfEkqMoZaMVHxnUXJB5a4dFc+7PEe1dKQgCRQQW8LFnIep8Kgxwukv2os vJRV3AfvZj3lrrf7nfGGtSJRI4l7L78= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:38 2025 by rpki-client