$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa File: 4de974c0-a88b-3292-9f16-0430edcbd00d.roa (raw, json) Hash identifier: DXjHDbs03ADm8NT2QOBpbgyAbt1mYiHI/IcY3C818Fo= Subject key identifier: 8E:45:75:86:74:B3:3F:36:D2:1B:D5:54:93:03:7B:82:1B:FB:2D:02 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584AECC1332E81DE7851C63F7940 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 68.71.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:33:2e:81:de:78:51:c6:3f:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c8bc8130-34ee-4dc8-a8ad-c909d50b8f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:d5:b7:60:25:bc:d8:cb:ce:6a:7a:88:41: 26:ea:de:1c:9e:76:69:47:93:88:86:35:02:e2:f7: 7d:6d:61:e3:30:92:45:72:a5:0d:12:bd:e6:bc:66: 97:27:c5:c2:78:67:fa:cc:5a:92:7d:17:89:7a:1f: ee:bd:51:5b:3d:e9:a5:65:89:5e:74:de:aa:c0:97: 2c:9a:b1:21:cf:ef:de:4a:95:f0:74:b1:63:1c:a4: cb:b3:72:06:a6:8f:f4:71:5b:d3:2e:ea:88:9a:ca: 39:0b:b4:94:5e:5f:24:da:d4:a2:d3:af:eb:cd:81: d1:d5:5b:d1:5f:35:48:18:ee:7e:59:d4:45:ab:4f: dd:15:d8:9a:9f:16:00:dc:1c:5f:9b:db:27:d4:c3: 09:7d:e4:39:b8:ba:b6:23:ed:4d:8e:80:f8:f5:72: e3:7d:25:29:e4:40:ed:e5:f3:2f:4d:1d:02:bd:b8: 23:9f:cf:5d:20:c8:da:91:7c:72:bb:3f:05:09:54: 4a:6a:8c:fc:fa:62:a5:7d:dc:55:60:68:ca:ce:ba: 43:30:33:b4:22:65:8d:a7:f4:d2:4c:34:cb:3f:3d: b6:49:66:17:2d:29:c7:4c:47:0f:a0:e0:26:d0:cf: c7:31:2f:5f:8f:28:24:29:8b:3a:c9:0a:37:a1:70: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:45:75:86:74:B3:3F:36:D2:1B:D5:54:93:03:7B:82:1B:FB:2D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e4:01:0c:22:ce:04:2a:6c:ee:0f:da:9c:75:9c:17:4f:78: 96:e4:14:90:0b:72:77:f4:44:7a:9b:2b:a3:c9:7b:86:81:e9: a2:23:03:0f:c9:2c:bc:8a:0b:5d:a9:13:57:e7:29:0b:3b:11: e9:05:f4:03:00:64:d7:b9:71:be:14:4d:28:a3:43:71:79:c0: 5e:2f:ba:78:53:b0:68:79:36:f9:50:ba:1e:6b:fa:b9:39:10: 11:51:54:a5:52:0d:44:8e:f2:09:b2:3f:a1:6c:48:b1:0d:41: ab:cb:b3:1e:93:2b:ff:d5:63:32:57:32:29:15:87:9e:3b:3b: 8a:f2:11:c2:56:f9:25:ba:e7:72:34:38:d7:99:77:f3:20:9e: 72:4f:2e:6e:17:c9:cf:ba:3f:4b:23:32:95:74:f6:f5:a6:24: cc:29:73:d0:ce:4f:0d:71:43:8a:c8:b2:75:e7:90:6f:13:b6: 1c:bb:53:81:75:2b:74:a5:36:d1:e1:3c:0a:32:36:8c:0c:f4: 3f:d5:2e:32:74:9a:80:85:8a:e2:23:c2:b8:d4:48:de:94:72: ee:a8:20:ad:5f:03:43:dd:a4:c1:f0:70:25:b3:99:a4:ed:1f: 07:79:33:bb:9b:3b:c9:47:c7:48:1b:a4:ba:cd:64:d2:5a:9f: 26:a1:02:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTMugd54UcY/eUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzhiYzgxMzAtMzRlZS00ZGM4LWE4YWQtYzkwOWQ1MGI4ZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP/Vt2AlvNjLzmp6iEEm6t4cnnZpR5OIhjUC 4vd9bWHjMJJFcqUNEr3mvGaXJ8XCeGf6zFqSfReJeh/uvVFbPemlZYledN6qwJcs mrEhz+/eSpXwdLFjHKTLs3IGpo/0cVvTLuqImso5C7SUXl8k2tSi06/rzYHR1VvR XzVIGO5+WdRFq0/dFdianxYA3Bxfm9sn1MMJfeQ5uLq2I+1NjoD49XLjfSUp5EDt 5fMvTR0Cvbgjn89dIMjakXxyuz8FCVRKaoz8+mKlfdxVYGjKzrpDMDO0ImWNp/TS TDTLPz22SWYXLSnHTEcPoOAm0M/HMS9fjygkKYs6yQo3oXApfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5FdYZ0sz820hvVVJMDe4Ib+y0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNGRlOTc0YzAtYTg4Yi0z MjkyLTlmMTYtMDQzMGVkY2JkMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALkAQwizgQqbO4P2px1nBdPeJbkFJALcnf0RHqbK6PJe4aB6aIjAw/J LLyKC12pE1fnKQs7EekF9AMAZNe5cb4UTSijQ3F5wF4vunhTsGh5NvlQuh5r+rk5 EBFRVKVSDUSO8gmyP6FsSLENQavLsx6TK//VYzJXMikVh547O4ryEcJW+SW653I0 ONeZd/MgnnJPLm4Xyc+6P0sjMpV09vWmJMwpc9DOTw1xQ4rIsnXnkG8Tthy7U4F1 K3SlNtHhPAoyNowM9D/VLjJ0moCFiuIjwrjUSN6Ucu6oIK1fA0PdpMHwcCWzmaTt Hwd5M7ubO8lHx0gbpLrNZNJanyahAnE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:52 2025 by rpki-client