$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db1d05f0-235b-38b7-8cd7-80738912e31c.roa File: db1d05f0-235b-38b7-8cd7-80738912e31c.roa (raw, json) Hash identifier: cNVDu+ytidb0TG8H0f4kwXQyQVR7ENG5lOVO5f71WFw= Subject key identifier: EB:C6:D8:E0:9E:9C:73:41:89:62:36:3A:12:9E:20:59:56:EA:B3:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC23063ADF37B504C85F820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db1d05f0-235b-38b7-8cd7-80738912e31c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.44.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:30:63:ad:f3:7b:50:4c:85:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=962a4625-5f53-4f9a-9b77-e423875810a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:07:df:98:60:d9:66:32:ce:48:4d:52:a7: 51:ee:ba:d7:da:f6:bf:a7:7f:1b:44:c2:a7:7b:51: 5c:51:5b:c5:a3:db:20:ce:0f:02:88:e5:48:44:cb: ac:9f:5e:38:74:1f:bf:5b:6b:1a:0d:65:85:a3:03: c6:be:b1:6a:c6:27:da:df:c0:cd:38:dd:32:0e:d8: e5:18:59:d2:e3:e8:02:c3:59:fc:0a:c9:57:1b:0d: 25:a9:29:00:1f:03:c6:39:98:5f:79:ab:d3:25:cc: 4c:95:8e:d4:0f:6f:13:13:85:39:f6:66:d3:3f:73: a5:fb:61:41:c6:cb:74:2d:91:c1:52:43:e7:59:2b: 77:41:72:45:02:8e:15:3f:60:46:f1:d7:a4:ec:df: ce:10:a5:d3:c2:e1:64:0d:b6:68:bd:f5:da:bc:6c: 1e:f1:35:15:42:1e:6c:e4:90:51:1f:a7:01:9a:80: 35:69:65:53:26:6f:d0:fe:8a:2f:71:35:a4:0d:b6: b8:15:f2:52:7b:23:f8:f1:d6:6e:77:53:50:74:da: 1c:ab:ff:6e:92:20:62:5b:07:b1:78:ae:9f:59:80: 41:13:83:0a:43:75:43:db:1c:80:23:eb:61:da:4a: 24:c2:63:8d:4c:ed:93:d4:6d:41:b3:3c:42:0e:28: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C6:D8:E0:9E:9C:73:41:89:62:36:3A:12:9E:20:59:56:EA:B3:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db1d05f0-235b-38b7-8cd7-80738912e31c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:69:9d:b0:2f:f5:c4:a2:20:cd:e5:eb:86:e4:ad:82:26:50: 50:a9:47:cb:c6:47:44:64:e7:96:d9:a2:4f:d7:8f:c8:25:ff: b1:59:2c:df:97:b1:9b:79:43:1a:78:9f:9e:67:61:10:6b:8d: 33:60:61:c8:ae:9c:77:de:42:77:67:51:61:bf:d9:bb:96:d9: 2a:a3:d1:28:42:ab:98:18:d1:94:1d:7f:51:bd:0b:c5:23:ab: 92:bc:cf:08:ff:ca:2a:1a:9b:e0:93:7c:2c:dd:fb:1c:73:a1: 3b:c9:25:01:b9:28:61:4e:ad:48:13:8a:4e:00:7d:fa:92:c4: ae:1b:8a:92:fa:52:39:98:40:e4:26:f7:58:0d:d6:82:ff:46: b4:4f:a5:15:38:a2:4c:4a:40:bc:53:f9:03:ee:9c:d1:af:36: 15:1b:35:68:98:14:d5:f7:95:c9:c9:21:84:94:7c:86:a8:09: 94:24:8c:9f:ab:ce:06:92:78:0b:76:6d:ab:62:80:ce:ed:b6: de:62:a9:aa:e4:c6:ef:00:71:6e:6f:e0:99:4d:c9:01:02:af: 19:56:db:29:50:f0:b5:aa:0e:fa:0d:85:3f:d3:0d:71:8e:9e: 26:3a:71:27:9a:6e:bb:74:5d:81:24:db:82:92:9a:65:c2:94: f0:8a:9a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswjBjrfN7UEyF+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTYyYTQ2MjUtNWY1My00ZjlhLTliNzctZTQyMzg3NTgxMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNEH35hg2WYyzkhNUqdR7rrX2va/p38bRMKn e1FcUVvFo9sgzg8CiOVIRMusn144dB+/W2saDWWFowPGvrFqxifa38DNON0yDtjl GFnS4+gCw1n8CslXGw0lqSkAHwPGOZhfeavTJcxMlY7UD28TE4U59mbTP3Ol+2FB xst0LZHBUkPnWSt3QXJFAo4VP2BG8dek7N/OEKXTwuFkDbZovfXavGwe8TUVQh5s 5JBRH6cBmoA1aWVTJm/Q/oovcTWkDba4FfJSeyP48dZud1NQdNocq/9ukiBiWwex eK6fWYBBE4MKQ3VD2xyAI+th2kokwmONTO2T1G1BszxCDigSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvG2OCenHNBiWI2OhKeIFlW6rPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGIxZDA1ZjAtMjM1Yi0z OGI3LThjZDctODA3Mzg5MTJlMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABpnbAv9cSiIM3l64bkrYImUFCpR8vGR0Rk55bZok/Xj8gl/7FZLN+X sZt5Qxp4n55nYRBrjTNgYciunHfeQndnUWG/2buW2Sqj0ShCq5gY0ZQdf1G9C8Uj q5K8zwj/yioam+CTfCzd+xxzoTvJJQG5KGFOrUgTik4AffqSxK4bipL6UjmYQOQm 91gN1oL/RrRPpRU4okxKQLxT+QPunNGvNhUbNWiYFNX3lcnJIYSUfIaoCZQkjJ+r zgaSeAt2batigM7ttt5iqarkxu8AcW5v4JlNyQECrxlW2ylQ8LWqDvoNhT/TDXGO niY6cSeabrt0XYEk24KSmmXClPCKmo0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:38:58 2025 by rpki-client