$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa File: 8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa (raw, json) Hash identifier: 2Oqdt6fdpFjs4Q1eU7eeFwiYkYnkpDmCO3rBHrf0wlk= Subject key identifier: BE:CB:39:F0:EB:47:4D:B6:6D:1F:04:A2:B0:71:65:A5:A6:66:08:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD295D9EB5642033345A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33662 IP address blocks: 68.85.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:29:5d:9e:b5:64:20:33:34:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=27be73ae-19e2-429d-bdc6-8e7afd34a2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:47:d3:99:92:d0:d1:2e:9f:a6:da:cf:97: 17:a7:7a:7e:8e:ed:fd:4e:44:22:d6:ed:64:cb:39: b3:a0:75:b6:99:f0:f3:56:8f:e9:7c:1a:91:5a:9b: c7:de:af:b3:aa:bb:e0:a7:e1:c1:7f:64:fa:8f:0a: 1e:aa:ef:69:08:a2:9a:df:f7:32:3b:0a:80:e4:7b: 34:5b:da:65:16:61:03:26:df:8e:d3:5a:b6:04:f8: f2:90:36:eb:29:11:fb:a9:15:14:25:f5:38:19:4a: a0:02:37:c2:80:dd:70:b9:2d:f8:f8:28:7a:35:3a: dd:5f:08:63:8a:66:a7:dc:05:a4:be:6b:11:e5:9f: 85:a5:0e:7a:08:1a:58:60:10:c3:c0:ff:dd:fe:59: bc:2e:8b:8b:4e:e8:06:60:85:f8:2f:ef:31:78:0c: 56:02:71:61:25:19:98:d9:33:af:1e:32:fa:00:8e: 70:d7:ea:00:f2:bc:81:b1:b1:54:de:54:4d:98:ee: ac:f0:40:08:1d:5d:7a:7f:ca:95:9e:8d:ce:7d:26: e6:38:ef:5d:b7:29:77:4e:62:3d:26:eb:5b:09:db: 2a:a3:5b:01:1c:92:f8:53:4e:06:d3:66:ba:45:70: 84:f7:29:1a:22:fe:34:47:a7:9f:ec:64:c7:ad:88: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:39:F0:EB:47:4D:B6:6D:1F:04:A2:B0:71:65:A5:A6:66:08:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0b:03:a4:a2:33:04:f5:30:8e:3e:5d:9b:f3:e4:28:d1:7a: 99:a6:4e:f1:88:1e:c4:0b:4d:0d:28:b2:84:d3:8f:30:85:1e: 3b:ac:37:63:7c:4d:00:45:96:ce:f4:b6:13:0c:11:a3:14:10: 81:e4:30:60:f4:82:79:ba:90:6d:7b:5d:b6:d9:17:d8:b4:e9: fc:c3:52:2b:3d:4a:01:b6:7c:bb:65:5e:1a:12:51:51:69:c3: 99:51:a8:04:4c:12:2d:57:0c:c0:eb:a7:43:af:60:ad:dd:e4: 9f:26:23:3b:a6:e0:5d:78:4a:bf:55:50:01:5b:a0:36:b2:ed: f6:66:51:0e:56:49:e0:4d:9a:20:61:12:24:4e:ea:6f:0e:81: 36:ac:fb:03:04:13:d6:e5:44:67:a8:ba:d9:aa:19:bd:a9:58: c8:1b:d3:6d:9d:10:be:66:3b:17:c7:47:3d:9f:65:68:78:9b: e5:6c:5c:00:76:99:56:1e:0e:b1:71:a5:e6:63:6e:78:21:5d: 5a:ff:62:55:47:54:d3:68:68:e6:44:09:91:a8:de:b9:25:58: 61:df:af:e9:2c:22:f1:18:3c:9a:2e:94:b3:0e:9a:20:6c:ca: 79:0d:ef:4e:b9:4b:04:a9:a2:4b:07:f4:48:e6:6a:e9:72:cb: 57:3e:a8:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/SldnrVkIDM0WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MjdiZTczYWUtMTllMi00MjlkLWJkYzYtOGU3YWZkMzRhMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAhH05mS0NEun6baz5cXp3p+ju39TkQi1u1k yzmzoHW2mfDzVo/pfBqRWpvH3q+zqrvgp+HBf2T6jwoequ9pCKKa3/cyOwqA5Hs0 W9plFmEDJt+O01q2BPjykDbrKRH7qRUUJfU4GUqgAjfCgN1wuS34+Ch6NTrdXwhj iman3AWkvmsR5Z+FpQ56CBpYYBDDwP/d/lm8LouLTugGYIX4L+8xeAxWAnFhJRmY 2TOvHjL6AI5w1+oA8ryBsbFU3lRNmO6s8EAIHV16f8qVno3OfSbmOO9dtyl3TmI9 JutbCdsqo1sBHJL4U04G02a6RXCE9ykaIv40R6ef7GTHrYjSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7LOfDrR022bR8EorBxZaWmZgjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGVmMmQ3YWUtY2VkZS0z M2NmLWFiNTctMjIwZWM2YTlmOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFALA6SiMwT1MI4+XZvz5CjRepmmTvGIHsQLTQ0osoTTjzCFHjusN2N8 TQBFls70thMMEaMUEIHkMGD0gnm6kG17XbbZF9i06fzDUis9SgG2fLtlXhoSUVFp w5lRqARMEi1XDMDrp0OvYK3d5J8mIzum4F14Sr9VUAFboDay7fZmUQ5WSeBNmiBh EiRO6m8OgTas+wMEE9blRGeoutmqGb2pWMgb022dEL5mOxfHRz2fZWh4m+VsXAB2 mVYeDrFxpeZjbnghXVr/YlVHVNNoaOZECZGo3rklWGHfr+ksIvEYPJoulLMOmiBs ynkN7065SwSpoksH9Ejmaulyy1c+qKs= -----END CERTIFICATE-----Generated at Sun Jul 20 17:42:08 2025 by rpki-client