$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f798be0c-5247-3c68-a564-1239505b2c42.roa File: f798be0c-5247-3c68-a564-1239505b2c42.roa (raw, json) Hash identifier: dihO/DoDXotQBjnpUNYMuIwiJjZ1Z6m0rgS+b0J1M4I= Subject key identifier: 02:89:D2:CD:3D:59:FB:A8:42:35:64:77:1E:FA:FC:1B:73:7B:3F:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC44B73A6CBA8A3E1027200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f798be0c-5247-3c68-a564-1239505b2c42.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.58.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:4b:73:a6:cb:a8:a3:e1:02:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5c272fd2-6a2a-4d34-9110-971cace3195f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:9f:35:39:08:18:87:7b:07:00:ff:34:81: 66:96:57:60:7a:b5:4f:ad:91:91:ad:fb:e5:8e:2b: 5d:7d:db:75:b6:1b:2b:da:2b:f7:e1:ad:c3:f7:93: d4:cb:e5:c3:00:d4:82:b5:c4:aa:9f:8d:3b:31:46: 71:00:2a:f7:b3:59:43:e8:af:32:66:88:ea:f0:35: c7:0c:ca:60:fe:94:ef:33:ec:43:13:84:66:9e:9b: e6:3f:16:3f:05:39:02:5d:95:e4:c1:bb:ed:1f:2b: 5c:e6:e9:15:db:1f:e0:cc:5b:88:6c:e5:b8:45:21: 2f:ec:6e:12:82:79:52:54:6b:62:19:f9:7a:e3:5b: e0:06:50:f3:dc:ac:58:76:b3:38:2f:95:b9:f1:da: 44:7f:a7:b1:7a:aa:59:a5:ed:81:ac:2c:52:82:44: c1:03:98:bd:ea:e4:96:08:d1:d3:7c:8c:dd:e5:d8: 50:bf:78:ca:cc:b6:38:35:06:03:d6:8f:79:f1:34: 22:f0:04:71:f0:31:56:fd:f7:5b:b7:f2:48:7c:e2: 02:fd:13:e3:6e:11:49:7f:8f:1a:34:38:a5:d7:03: 36:b6:e5:67:22:b9:ce:be:38:29:42:05:19:8e:43: 93:5e:a4:05:86:ea:7d:aa:b4:c2:08:f3:a9:6f:03: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:89:D2:CD:3D:59:FB:A8:42:35:64:77:1E:FA:FC:1B:73:7B:3F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f798be0c-5247-3c68-a564-1239505b2c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6e:e4:b2:3f:f0:04:3e:9f:dc:de:06:e9:15:d4:3a:73:1c: 04:eb:a7:4c:04:df:b6:ce:4b:28:16:26:06:06:08:18:72:66: f7:9d:18:1d:41:72:ad:19:5c:96:93:6f:0b:8d:a2:ca:4a:8e: 83:13:c9:5d:54:c6:16:c6:0b:7c:92:3d:57:56:9b:28:05:60: c9:ec:d1:64:f0:2b:99:fe:e8:9c:1c:ac:12:da:b8:77:40:85: ef:10:53:1a:28:dd:7c:13:71:e7:1d:88:c1:20:8d:75:d0:35: 3e:ec:c6:1a:64:68:84:5c:c4:c5:64:b1:ae:b8:08:e9:ef:ce: c3:09:93:50:c5:f4:50:aa:d6:9b:f5:61:e7:19:1e:6d:d6:4a: ef:fa:05:ff:c5:e2:5f:4a:47:61:0c:00:4c:01:f6:b5:4e:b4: ae:cc:86:e4:cb:7f:d8:0e:2a:60:11:43:5c:59:09:29:89:15: 59:65:33:bf:19:da:d7:f4:58:7f:c8:76:1f:a2:34:44:53:bb: e2:f5:61:3c:34:95:db:22:b8:5f:ca:60:79:e5:1d:27:2f:c7: 13:9a:06:83:91:8f:32:2a:eb:f3:c1:91:51:9c:81:0b:55:05: 84:67:e9:1f:c8:7c:ac:eb:16:be:74:24:09:ec:7e:85:73:c1: ea:09:7b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxEtzpsuoo+ECcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWMyNzJmZDItNmEyYS00ZDM0LTkxMTAtOTcxY2FjZTMxOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLKfNTkIGId7BwD/NIFmlldgerVPrZGRrfvl jitdfdt1thsr2iv34a3D95PUy+XDANSCtcSqn407MUZxACr3s1lD6K8yZojq8DXH DMpg/pTvM+xDE4RmnpvmPxY/BTkCXZXkwbvtHytc5ukV2x/gzFuIbOW4RSEv7G4S gnlSVGtiGfl641vgBlDz3KxYdrM4L5W58dpEf6exeqpZpe2BrCxSgkTBA5i96uSW CNHTfIzd5dhQv3jKzLY4NQYD1o958TQi8ARx8DFW/fdbt/JIfOIC/RPjbhFJf48a NDil1wM2tuVnIrnOvjgpQgUZjkOTXqQFhup9qrTCCPOpbwNaQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKJ0s09WfuoQjVkdx76/Btzez9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc5OGJlMGMtNTI0Ny0z YzY4LWE1NjQtMTIzOTUwNWIyYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFu5LI/8AQ+n9zeBukV1DpzHATrp0wE37bOSygWJgYGCBhyZvedGB1B cq0ZXJaTbwuNospKjoMTyV1UxhbGC3ySPVdWmygFYMns0WTwK5n+6JwcrBLauHdA he8QUxoo3XwTcecdiMEgjXXQNT7sxhpkaIRcxMVksa64COnvzsMJk1DF9FCq1pv1 YecZHm3WSu/6Bf/F4l9KR2EMAEwB9rVOtK7MhuTLf9gOKmARQ1xZCSmJFVllM78Z 2tf0WH/Idh+iNERTu+L1YTw0ldsiuF/KYHnlHScvxxOaBoORjzIq6/PBkVGcgQtV BYRn6R/IfKzrFr50JAnsfoVzweoJewA= -----END CERTIFICATE-----Generated at Sun Aug 24 04:27:12 2025 by rpki-client