$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4c22c8f-83bc-3b54-a869-992d2fd222a3.roa File: c4c22c8f-83bc-3b54-a869-992d2fd222a3.roa (raw, json) Hash identifier: kdCmkZzdpNW4lXvb/D8YtvzV7R+BuyKyU/PKfT1J09M= Subject key identifier: 05:A7:57:E7:07:4A:96:7D:1E:3F:A5:7F:93:8D:71:E0:71:00:F5:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A6DBB4B50EC9D7A68CA756394 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4c22c8f-83bc-3b54-a869-992d2fd222a3.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 33661 IP address blocks: 68.85.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:4b:50:ec:9d:7a:68:ca:75:63:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=433ecf6a-3e06-4c68-a77c-d95cf0473e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:be:9d:ef:c4:ca:19:ec:10:40:8e:ef:eb: 01:94:49:c6:53:ed:10:e6:ff:6e:69:d6:8d:8f:6b: 8b:18:b4:9b:b6:23:33:59:eb:b6:73:4f:60:f8:9b: 8f:99:c1:31:22:b2:ac:39:ba:27:85:06:4b:ea:9a: 62:1c:d7:a6:34:f7:b7:0b:6c:b3:0e:6b:67:14:42: a9:49:a7:95:74:f1:44:e7:ac:c7:e2:68:d8:c6:33: 8b:ec:42:1d:85:56:f3:5d:51:0f:e6:3a:f9:ae:c1: 86:38:01:b0:16:e2:50:bc:3c:5d:93:52:88:06:78: e4:8a:04:4c:d9:96:c4:22:41:a7:1d:82:a5:c8:53: eb:e2:61:80:69:f0:57:b8:4e:2b:fb:4f:41:46:77: 74:c4:0f:4e:ff:80:82:58:96:fe:d6:62:e0:20:1b: 12:d2:72:90:fc:01:58:8e:fb:78:64:71:ae:81:1f: 7d:3c:a9:9f:bf:c9:bd:ef:60:e7:b9:1a:66:f3:51: c0:71:13:0d:fe:30:af:53:47:3e:ca:c6:5b:a9:96: a1:c1:77:e2:bf:20:ce:86:7f:95:87:80:94:28:2e: dd:8f:8d:ba:70:50:2c:e0:54:0f:b8:09:7a:cb:58: 80:c8:f5:31:8b:dd:65:8c:a0:82:bf:4d:08:68:92: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A7:57:E7:07:4A:96:7D:1E:3F:A5:7F:93:8D:71:E0:71:00:F5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4c22c8f-83bc-3b54-a869-992d2fd222a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c8:7a:7c:e0:35:fc:b9:4d:8b:5d:38:ab:67:1c:2f:43:f9: a0:b2:ec:21:3d:1f:e7:74:dd:f7:9f:8b:b1:30:6f:0b:8e:ab: 46:af:25:2b:9e:6e:d2:a2:a3:74:c5:4c:76:0a:3f:bc:90:79: 08:6b:ee:c1:48:c4:93:9b:3a:25:ab:55:ef:7e:19:6c:90:7f: 63:a6:6d:a4:07:4a:4a:65:19:92:3f:61:8a:ef:6e:dd:76:15: 47:4c:e9:27:85:bf:71:2a:88:7a:8e:91:b7:f4:1f:57:7a:01: 47:68:aa:23:71:c9:13:49:13:0c:f4:9f:98:00:f5:5e:fe:d1: 45:c0:57:12:6e:9a:13:30:16:25:78:b7:e6:1c:ee:2e:8d:db: e5:21:51:8c:33:af:14:bc:ab:ae:3b:47:c4:5b:07:26:81:de: 47:30:bf:c5:ba:2c:ed:d3:cc:b5:6c:af:6a:05:87:58:4c:e9: 08:18:fa:52:15:cb:48:90:85:0a:eb:04:85:b2:13:0a:54:80: 7f:9a:59:2f:79:c2:58:ad:86:92:01:eb:0b:2e:4b:23:03:f0: 40:0b:6b:cf:a0:67:91:a8:28:55:df:50:f5:2f:bc:f9:e2:05: 39:ba:b7:2d:e9:a9:ed:ce:22:64:16:aa:82:b2:2e:f0:95:d2: e7:fc:f1:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0tQ7J16aMp1Y5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NDMzZWNmNmEtM2UwNi00YzY4LWE3N2MtZDk1Y2YwNDczZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHq+ne/EyhnsEECO7+sBlEnGU+0Q5v9uadaN j2uLGLSbtiMzWeu2c09g+JuPmcExIrKsObonhQZL6ppiHNemNPe3C2yzDmtnFEKp SaeVdPFE56zH4mjYxjOL7EIdhVbzXVEP5jr5rsGGOAGwFuJQvDxdk1KIBnjkigRM 2ZbEIkGnHYKlyFPr4mGAafBXuE4r+09BRnd0xA9O/4CCWJb+1mLgIBsS0nKQ/AFY jvt4ZHGugR99PKmfv8m972DnuRpm81HAcRMN/jCvU0c+ysZbqZahwXfivyDOhn+V h4CUKC7dj426cFAs4FQPuAl6y1iAyPUxi91ljKCCv00IaJJgmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWnV+cHSpZ9Hj+lf5ONceBxAPVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzRjMjJjOGYtODNiYy0z YjU0LWE4NjktOTkyZDJmZDIyMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnIenzgNfy5TYtdOKtnHC9D+aCy7CE9H+d03fefi7EwbwuOq0avJSue btKio3TFTHYKP7yQeQhr7sFIxJObOiWrVe9+GWyQf2OmbaQHSkplGZI/YYrvbt12 FUdM6SeFv3EqiHqOkbf0H1d6AUdoqiNxyRNJEwz0n5gA9V7+0UXAVxJumhMwFiV4 t+Yc7i6N2+UhUYwzrxS8q647R8RbByaB3kcwv8W6LO3TzLVsr2oFh1hM6QgY+lIV y0iQhQrrBIWyEwpUgH+aWS95wlithpIB6wsuSyMD8EALa8+gZ5GoKFXfUPUvvPni BTm6ty3pqe3OImQWqoKyLvCV0uf88dM= -----END CERTIFICATE-----Generated at Sun Jul 20 17:11:36 2025 by rpki-client