$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36bae1eb-9763-30fb-af59-0f5a7296ff33.roa File: 36bae1eb-9763-30fb-af59-0f5a7296ff33.roa (raw, json) Hash identifier: Pw3L/dXxfryjksCxBBkN1zyZKdEiAdxuSZ+nG9saMfo= Subject key identifier: 77:14:D6:60:59:B6:83:21:D5:F4:F3:63:30:5D:7F:2C:F3:A6:C9:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBC313BB4A4F5D8ABE7E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36bae1eb-9763-30fb-af59-0f5a7296ff33.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33652 IP address blocks: 68.85.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:c3:13:bb:4a:4f:5d:8a:be:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=1baa0f8c-874b-4398-9df1-db68f679327b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:d4:08:43:3b:08:7e:d3:6f:ae:29:47:44: 1b:6b:b7:2f:e6:13:dc:3b:e9:d8:e5:72:29:11:c3: 9a:2e:54:57:07:6a:c6:7f:12:c9:a4:eb:be:0b:bf: 38:f3:67:61:3b:6b:b2:01:d6:6f:ab:81:af:81:56: fd:67:5a:04:cb:30:f9:e0:98:db:78:08:7a:00:78: 9e:f7:f9:db:3d:4d:12:6a:de:d9:4f:38:e4:5a:3b: 74:e9:11:d9:7a:97:0b:4c:c6:f7:24:19:50:66:92: ab:68:b5:7a:96:e2:d5:d8:39:4e:ed:fe:66:f8:56: 84:2e:0d:63:95:1f:03:59:a4:2f:19:2a:0c:2e:89: 77:bc:2e:a4:22:13:43:e4:b1:d9:16:27:9a:eb:03: af:c1:9b:ba:90:d2:bd:39:ad:af:b5:70:aa:61:18: 27:de:43:82:6c:88:78:df:18:5d:35:10:1f:fc:bc: 33:3b:d7:d2:d0:99:69:7f:c6:79:af:b7:6e:df:cc: 64:fa:09:71:f5:43:bd:8f:e9:d7:46:c4:67:b3:22: 04:0c:5a:25:e9:63:13:48:f5:8b:44:0c:c4:e7:7f: 71:42:5c:78:61:7c:db:03:26:fd:a8:bc:e8:fe:34: 07:6c:e1:82:96:e2:26:a3:31:05:52:b8:99:10:52: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:14:D6:60:59:B6:83:21:D5:F4:F3:63:30:5D:7F:2C:F3:A6:C9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36bae1eb-9763-30fb-af59-0f5a7296ff33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cc:00:8d:6a:ab:63:76:66:29:9f:a4:25:27:64:66:f4:9f: aa:83:21:dd:19:09:66:97:3e:0b:ea:d6:ae:b1:eb:29:4f:93: 87:f5:48:20:fc:69:02:d0:f5:db:58:36:ae:d2:49:04:7d:a9: 81:a0:ae:bf:27:0f:2f:37:42:cf:c2:61:93:20:17:14:9a:51: 3d:49:5e:d6:25:52:1e:0e:90:ef:1e:50:d9:75:61:fa:1f:98: e1:8c:ec:fa:38:ac:3c:96:3c:95:c8:c9:cd:18:aa:9c:8d:3e: 6c:3e:36:a8:a9:1d:7a:43:00:ff:16:d5:66:5c:62:09:b1:bb: 60:84:d1:a0:dd:49:9e:23:b7:b2:78:a5:53:f6:87:f7:f5:57: aa:bf:d6:b9:c2:c8:f1:f3:2c:74:4a:08:05:7c:36:6d:62:97: 19:1e:43:b7:a2:da:94:51:73:df:91:93:ec:3e:51:0b:ea:db: aa:d8:4e:1f:e3:73:78:5c:9b:2d:b1:b3:40:f3:5e:8d:55:78: b4:50:73:6e:a6:09:e2:69:b9:a4:c1:45:c1:cb:ff:99:b4:a9: 9e:2a:3f:5d:9e:ab:e2:bb:b1:38:54:b3:d5:73:8d:1e:e8:04: 20:f7:df:e8:d8:aa:c2:8e:5c:c7:02:64:f0:52:52:cc:5c:3f: c4:6b:a7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+8MTu0pPXYq+fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MWJhYTBmOGMtODc0Yi00Mzk4LTlkZjEtZGI2OGY2NzkzMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDjUCEM7CH7Tb64pR0Qba7cv5hPcO+nY5XIp EcOaLlRXB2rGfxLJpOu+C78482dhO2uyAdZvq4GvgVb9Z1oEyzD54JjbeAh6AHie 9/nbPU0Sat7ZTzjkWjt06RHZepcLTMb3JBlQZpKraLV6luLV2DlO7f5m+FaELg1j lR8DWaQvGSoMLol3vC6kIhND5LHZFiea6wOvwZu6kNK9Oa2vtXCqYRgn3kOCbIh4 3xhdNRAf/LwzO9fS0Jlpf8Z5r7du38xk+glx9UO9j+nXRsRnsyIEDFol6WMTSPWL RAzE539xQlx4YXzbAyb9qLzo/jQHbOGCluImozEFUriZEFJQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcU1mBZtoMh1fTzYzBdfyzzpsnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZiYWUxZWItOTc2My0z MGZiLWFmNTktMGY1YTcyOTZmZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHMAI1qq2N2ZimfpCUnZGb0n6qDId0ZCWaXPgvq1q6x6ylPk4f1SCD8 aQLQ9dtYNq7SSQR9qYGgrr8nDy83Qs/CYZMgFxSaUT1JXtYlUh4OkO8eUNl1Yfof mOGM7Po4rDyWPJXIyc0YqpyNPmw+NqipHXpDAP8W1WZcYgmxu2CE0aDdSZ4jt7J4 pVP2h/f1V6q/1rnCyPHzLHRKCAV8Nm1ilxkeQ7ei2pRRc9+Rk+w+UQvq26rYTh/j c3hcmy2xs0DzXo1VeLRQc26mCeJpuaTBRcHL/5m0qZ4qP12eq+K7sThUs9VzjR7o BCD33+jYqsKOXMcCZPBSUsxcP8RrpzM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:16:35 2025 by rpki-client