$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa File: 7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa (raw, json) Hash identifier: /OkG9QYoBuZdd7LHJa1BCL3qZWW4ZsxgAlOuz/HuhD8= Subject key identifier: CF:DD:9A:F4:87:21:9F:09:A2:1E:6A:AE:9C:32:53:4A:5D:96:F1:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC99499BA6451AC5D1E580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.52.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:99:49:9b:a6:45:1a:c5:d1:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=4254e5d3-595e-405a-a400-03220ed57977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:97:a6:bb:70:66:f9:9c:07:8a:de:a5:12: 47:cb:03:65:32:2d:cf:3a:83:24:38:71:3b:f0:13: f9:b7:e5:4c:5d:63:98:c5:97:ab:d3:2d:1b:bd:fd: b6:e7:cb:46:91:23:b4:1a:d8:76:03:73:60:d8:4d: ba:43:47:1a:87:41:18:ea:cc:dc:99:9a:33:64:bc: 71:89:de:31:f3:79:4c:6b:d7:e0:2f:be:40:3b:82: fa:41:5c:43:34:9e:07:ea:13:fe:fa:66:c3:e5:9b: bb:66:0f:71:e1:5a:64:26:73:04:45:4a:30:5e:6c: 51:ec:6f:61:3c:b0:65:40:b2:27:ee:b2:9c:80:b6: 4b:b0:d4:c7:a7:55:a3:d9:ab:3e:5d:49:a2:c2:5d: 89:b5:04:79:9b:69:d0:0e:4c:46:18:0b:ad:bc:8a: 3d:4f:fb:27:15:ca:e1:64:6c:71:8c:a8:43:84:37: 18:59:31:59:e1:6b:ac:28:bc:60:70:13:07:b8:8f: bd:9a:f5:f9:02:82:fe:93:4f:21:cc:bd:d9:cb:6b: 5d:4a:65:b5:39:19:2b:14:2f:d7:89:a9:d2:cc:1a: 97:34:13:86:be:7e:b4:5b:04:23:20:6a:87:be:f3: 93:4d:8f:a1:23:55:19:ae:78:f2:fd:20:32:32:80: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:9A:F4:87:21:9F:09:A2:1E:6A:AE:9C:32:53:4A:5D:96:F1:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:69:5f:83:8d:3b:84:28:cc:0a:6f:85:3a:03:f7:32:bc:bc: 9f:87:c7:e7:a3:10:e8:09:49:7e:e1:84:78:7c:2c:5a:9f:54: 7f:be:72:2b:d2:96:c5:1c:7d:03:e6:7b:13:dd:68:66:82:6f: 3c:d4:1d:7a:e2:5f:70:60:7f:29:d8:84:10:80:1f:db:ad:6c: 63:7a:3c:84:ea:08:79:85:a7:94:7a:eb:1e:7a:93:5b:79:5c: 22:6c:af:c4:ce:6d:d4:56:71:ec:6b:19:67:fe:64:f3:69:71: cb:83:a5:9a:15:58:0b:f5:69:70:15:47:fb:65:42:8b:1b:67: b6:14:ec:82:70:15:7d:f1:ca:66:5c:60:1d:50:37:84:30:ad: 47:3e:5a:24:a5:28:d0:33:3c:a3:e1:b3:c7:c4:f7:c2:10:a8: 50:f7:90:3d:2a:33:ed:69:7d:ae:c2:41:77:8b:47:b7:59:b3: 56:03:05:55:36:e9:d4:f3:65:9c:48:2e:b7:17:0e:01:0f:17: 03:ae:0a:97:e9:55:24:ab:9d:73:93:ed:dc:27:02:27:fa:5c: da:55:8e:08:01:b6:df:e2:38:d4:8a:1c:f5:5c:98:54:04:78: c7:c1:29:e0:ad:8f:75:cd:45:90:4f:51:90:27:06:0e:38:da: 6c:93:c1:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/JlJm6ZFGsXR5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDI1NGU1ZDMtNTk1ZS00MDVhLWE0MDAtMDMyMjBlZDU3OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HyXprtwZvmcB4repRJHywNlMi3POoMkOHE7 8BP5t+VMXWOYxZer0y0bvf2258tGkSO0Gth2A3Ng2E26Q0cah0EY6szcmZozZLxx id4x83lMa9fgL75AO4L6QVxDNJ4H6hP++mbD5Zu7Zg9x4VpkJnMERUowXmxR7G9h PLBlQLIn7rKcgLZLsNTHp1Wj2as+XUmiwl2JtQR5m2nQDkxGGAutvIo9T/snFcrh ZGxxjKhDhDcYWTFZ4WusKLxgcBMHuI+9mvX5AoL+k08hzL3Zy2tdSmW1ORkrFC/X ianSzBqXNBOGvn60WwQjIGqHvvOTTY+hI1UZrnjy/SAyMoC2RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/dmvSHIZ8Joh5qrpwyU0pdlvHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2RhZDQ3ZDEtYjQ0Ni0z Y2RhLWE0Y2YtNTI3ZDVlODIzM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDQZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNpX4ONO4QozApvhToD9zK8vJ+Hx+ejEOgJSX7hhHh8LFqfVH++civS lsUcfQPmexPdaGaCbzzUHXriX3BgfynYhBCAH9utbGN6PITqCHmFp5R66x56k1t5 XCJsr8TObdRWcexrGWf+ZPNpccuDpZoVWAv1aXAVR/tlQosbZ7YU7IJwFX3xymZc YB1QN4QwrUc+WiSlKNAzPKPhs8fE98IQqFD3kD0qM+1pfa7CQXeLR7dZs1YDBVU2 6dTzZZxILrcXDgEPFwOuCpfpVSSrnXOT7dwnAif6XNpVjggBtt/iONSKHPVcmFQE eMfBKeCtj3XNRZBPUZAnBg442myTwa0= -----END CERTIFICATE-----Generated at Sun Jul 20 17:37:07 2025 by rpki-client