$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d91d41e9-7418-3f64-bf6c-8af3d92be7fb.roa File: d91d41e9-7418-3f64-bf6c-8af3d92be7fb.roa (raw, json) Hash identifier: ebcUz6Diq1epk3ZINdew9sA/NK5L687OaoK4s7HUQhU= Subject key identifier: B7:D9:F3:DF:40:C3:2E:DA:98:0A:DB:AB:C7:2E:BE:FD:CB:19:5A:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3CA373BCB166DCF28CCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d91d41e9-7418-3f64-bf6c-8af3d92be7fb.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.81.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:ca:37:3b:cb:16:6d:cf:28:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3513916a-2820-4ad0-9a64-9b7db72df1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:e7:21:31:c3:12:0f:f1:d4:aa:52:b7:16: f2:13:92:14:bb:7e:30:a4:f8:81:52:f8:e2:2e:ff: b2:06:cd:e8:f1:6b:93:bd:97:e2:b8:81:e1:a0:8b: bb:a1:b7:64:2d:08:08:8a:af:b4:49:cf:9f:70:f7: 6e:bd:a0:b8:01:38:6e:8d:ef:85:4a:07:0c:6a:1d: d0:f5:14:ad:46:7a:84:46:3b:bd:64:df:ad:58:43: 67:87:75:ce:4e:0d:bc:d1:97:0c:dc:d2:a9:5e:66: 85:09:a4:b7:ea:e4:65:bf:cd:bc:4b:29:bf:92:4a: 2e:13:6a:ae:dc:30:18:4c:87:e1:d8:7c:96:85:23: f0:19:57:d8:18:e4:ea:d2:3a:2a:9f:5f:d3:9f:4a: 04:3f:7d:9e:d3:6e:7c:e3:15:0b:93:b7:0c:d8:83: 46:7d:51:73:67:30:ba:23:73:5c:9e:91:de:21:0e: 90:f6:39:ca:f9:e5:61:e6:69:0d:e8:18:84:45:d1: e1:dc:75:46:9e:b5:51:b4:10:76:a9:48:b0:38:c4: ec:3f:90:de:2d:a1:c8:a3:1c:83:ec:1f:c3:78:20: 5f:11:69:8c:06:05:2b:9f:eb:1b:de:dd:d7:af:73: 33:cd:c6:86:50:d7:f6:7f:71:58:9e:20:ca:63:04: 12:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D9:F3:DF:40:C3:2E:DA:98:0A:DB:AB:C7:2E:BE:FD:CB:19:5A:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d91d41e9-7418-3f64-bf6c-8af3d92be7fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:07:3e:fc:f2:25:6b:f4:f7:93:86:2b:56:b7:d8:03:3e:c1: 7c:a3:b1:3d:e4:1a:f3:1c:a5:46:6e:0d:14:6f:79:0d:7a:32: 91:e0:8e:6c:05:b8:1f:28:58:97:61:53:1e:23:7e:b0:93:c0: 61:4f:ea:9c:b4:63:3b:44:e2:a7:2f:60:b7:e1:ca:6c:02:d1: 38:3f:cb:59:b7:8f:af:5d:0a:de:e9:d1:d4:92:9c:2b:cf:c2: e0:69:dd:5f:03:a1:af:52:56:c7:a4:fd:de:f0:ae:b7:2d:bc: ff:8f:fb:a4:93:15:53:a8:d4:5a:35:7e:be:26:47:8b:4a:02: 11:62:e0:67:25:9b:74:a3:37:eb:18:0e:de:30:d2:1f:b7:e2: e0:d3:37:d2:ab:42:76:fa:4f:34:81:4c:1b:49:9c:fc:78:91: 01:1c:1b:bd:dd:74:fb:e0:a5:69:74:d4:5e:c4:95:f0:db:45: cf:49:a7:88:cc:f1:29:0f:dc:38:ff:e7:4e:be:be:8b:f9:b4: 36:a9:f4:b0:03:7c:1f:7b:e0:7e:a9:48:42:ca:c3:fd:66:c6: 4b:91:f3:7a:14:1e:4e:22:57:48:83:46:76:77:6b:97:8b:c3: 91:04:dd:51:52:98:b7:2b:17:be:77:6d:ea:77:b4:77:1b:95: 25:08:4c:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw8o3O8sWbc8ozMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzUxMzkxNmEtMjgyMC00YWQwLTlhNjQtOWI3ZGI3MmRmMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5XnITHDEg/x1KpStxbyE5IUu34wpPiBUvji Lv+yBs3o8WuTvZfiuIHhoIu7obdkLQgIiq+0Sc+fcPduvaC4AThuje+FSgcMah3Q 9RStRnqERju9ZN+tWENnh3XOTg280ZcM3NKpXmaFCaS36uRlv828Sym/kkouE2qu 3DAYTIfh2HyWhSPwGVfYGOTq0joqn1/Tn0oEP32e02584xULk7cM2INGfVFzZzC6 I3NcnpHeIQ6Q9jnK+eVh5mkN6BiERdHh3HVGnrVRtBB2qUiwOMTsP5DeLaHIoxyD 7B/DeCBfEWmMBgUrn+sb3t3Xr3MzzcaGUNf2f3FYniDKYwQSiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfZ899Awy7amArbq8cuvv3LGVr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkxZDQxZTktNzQxOC0z ZjY0LWJmNmMtOGFmM2Q5MmJlN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoHPvzyJWv095OGK1a32AM+wXyjsT3kGvMcpUZuDRRveQ16MpHgjmwF uB8oWJdhUx4jfrCTwGFP6py0YztE4qcvYLfhymwC0Tg/y1m3j69dCt7p0dSSnCvP wuBp3V8Doa9SVsek/d7wrrctvP+P+6STFVOo1Fo1fr4mR4tKAhFi4Gclm3SjN+sY Dt4w0h+34uDTN9KrQnb6TzSBTBtJnPx4kQEcG73ddPvgpWl01F7ElfDbRc9Jp4jM 8SkP3Dj/506+vov5tDap9LADfB974H6pSELKw/1mxkuR83oUHk4iV0iDRnZ3a5eL w5EE3VFSmLcrF753bep3tHcblSUITEg= -----END CERTIFICATE-----Generated at Sat Aug 23 22:55:30 2025 by rpki-client