$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d8de02-83a6-310a-a74a-61af5eba8244.roa File: 86d8de02-83a6-310a-a74a-61af5eba8244.roa (raw, json) Hash identifier: tmiGBRUEorfJmwVg0tD6UsexqFyLEKO7WptkE2eLLs0= Subject key identifier: A9:8D:62:D0:1C:0C:15:3C:07:C9:11:7B:13:FD:15:60:8D:37:48:4B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC96825A3BCB538CBBE700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d8de02-83a6-310a-a74a-61af5eba8244.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.32.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:96:82:5a:3b:cb:53:8c:bb:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=5b19c9aa-aea8-4aae-9873-9a42d6f55827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:ae:77:96:70:c6:bd:75:db:6a:fb:e5:ba: bb:d9:d1:30:58:b8:02:b9:70:bd:1b:8e:75:ce:0b: b4:8d:37:51:82:8a:b2:fa:bc:cc:fe:54:3a:d4:a9: 75:3d:e4:c4:47:8a:bd:99:99:02:b8:74:b5:1a:73: 63:b2:01:3c:14:da:14:45:c4:d9:b7:9b:ec:e1:1d: eb:a4:ee:b3:8e:1f:07:e2:b8:71:0c:5a:11:16:c9: 98:51:05:6f:4d:6e:32:1d:2d:c6:b9:cb:a0:c7:6d: b8:a1:54:8b:22:7b:24:2b:bf:ae:2b:bd:09:85:25: f1:b2:59:53:40:dd:5f:9b:2d:55:87:71:17:03:ac: ac:72:7b:f7:96:26:be:99:b3:6c:b5:82:a9:ff:7b: e6:f1:f0:9b:e5:fa:88:82:ac:ed:ff:74:98:23:bf: ea:bb:52:3a:d6:70:55:40:af:40:81:76:c9:52:b8: 69:f4:6d:55:51:79:bc:73:b7:29:00:1d:ba:20:c3: 42:25:a6:0d:34:15:26:33:4b:6a:cf:e5:68:1a:60: 7f:e1:86:ee:93:c5:a7:19:a7:7c:68:ca:c3:05:6c: c1:d5:c3:c4:4b:0d:e1:1e:85:56:37:e8:7e:69:90: 6f:53:95:98:c8:18:a4:94:fb:f4:61:de:f0:85:b8: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8D:62:D0:1C:0C:15:3C:07:C9:11:7B:13:FD:15:60:8D:37:48:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86d8de02-83a6-310a-a74a-61af5eba8244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:26:2a:73:34:9d:58:b8:23:b1:54:af:be:fc:8a:c0:78:52: 91:63:5d:4f:58:e3:5e:e2:e5:65:bf:f9:44:3c:f2:e9:77:fd: 80:2a:c4:c5:79:67:9e:66:a4:d4:92:06:a1:da:ae:39:88:e7: df:17:7b:31:50:0f:e2:a6:f8:96:9a:1c:b8:98:59:c4:42:01: 62:89:f8:0e:dd:02:4e:b8:73:39:28:8a:e0:e4:02:94:ff:ab: 8a:93:1d:ef:7a:5a:92:19:c4:80:43:a9:84:f7:34:9e:9a:21: 3b:09:4c:52:4f:58:bb:d5:64:43:52:aa:9d:3d:e0:77:30:ff: f6:34:9a:ef:56:14:67:d2:8b:9c:f8:5c:e3:e7:4b:be:66:19: 44:74:53:a6:15:87:c9:b8:dd:a6:8e:dd:25:91:33:f3:21:ea: fa:e6:17:45:47:bf:81:c2:0a:64:db:be:64:5c:df:a8:43:66: 6d:7e:2e:31:ec:ae:56:27:71:bc:a4:5b:2b:bf:53:25:e2:96: 8c:8c:d7:f7:d0:be:11:ce:99:bf:73:07:f3:78:24:b4:32:e1: 60:b1:c8:82:fd:77:47:78:94:4a:a4:73:83:ef:d5:64:2e:e8: a3:51:bd:6a:19:83:f6:47:df:79:60:3e:44:d4:98:a1:2e:c7: 85:82:bc:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/JaCWjvLU4y75wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NWIxOWM5YWEtYWVhOC00YWFlLTk4NzMtOWE0MmQ2ZjU1ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvGud5Zwxr1122r75bq72dEwWLgCuXC9G451 zgu0jTdRgoqy+rzM/lQ61Kl1PeTER4q9mZkCuHS1GnNjsgE8FNoURcTZt5vs4R3r pO6zjh8H4rhxDFoRFsmYUQVvTW4yHS3Gucugx224oVSLInskK7+uK70JhSXxsllT QN1fmy1Vh3EXA6yscnv3lia+mbNstYKp/3vm8fCb5fqIgqzt/3SYI7/qu1I61nBV QK9AgXbJUrhp9G1VUXm8c7cpAB26IMNCJaYNNBUmM0tqz+VoGmB/4Ybuk8WnGad8 aMrDBWzB1cPESw3hHoVWN+h+aZBvU5WYyBiklPv0Yd7whbhLxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmNYtAcDBU8B8kRexP9FWCNN0hLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZkOGRlMDItODNhNi0z MTBhLWE3NGEtNjFhZjVlYmE4MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERCDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8mKnM0nVi4I7FUr778isB4UpFjXU9Y417i5WW/+UQ88ul3/YAqxMV5 Z55mpNSSBqHarjmI598XezFQD+Km+JaaHLiYWcRCAWKJ+A7dAk64czkoiuDkApT/ q4qTHe96WpIZxIBDqYT3NJ6aITsJTFJPWLvVZENSqp094Hcw//Y0mu9WFGfSi5z4 XOPnS75mGUR0U6YVh8m43aaO3SWRM/Mh6vrmF0VHv4HCCmTbvmRc36hDZm1+LjHs rlYncbykWyu/UyXiloyM1/fQvhHOmb9zB/N4JLQy4WCxyIL9d0d4lEqkc4Pv1WQu 6KNRvWoZg/ZH33lgPkTUmKEux4WCvB0= -----END CERTIFICATE-----Generated at Sun Jul 20 17:41:17 2025 by rpki-client