$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b1ef17-fb5f-3692-9e44-36afee296da7.roa File: d0b1ef17-fb5f-3692-9e44-36afee296da7.roa (raw, json) Hash identifier: dnl17MG9CkVF8CbUxRZhmXsJqZxd0z02F6P6RCSZ+1Y= Subject key identifier: 0A:6F:C5:63:50:01:33:0F:86:D9:48:90:FE:EE:AE:38:FF:43:76:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A71EB6C84A1E598C9470C0380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b1ef17-fb5f-3692-9e44-36afee296da7.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 33491 IP address blocks: 68.44.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:6c:84:a1:e5:98:c9:47:0c:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=d3addd31-7d4b-408f-b401-a9f4401d3ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:14:14:44:ed:9a:6c:31:1e:61:9b:e0:c7: bd:0b:ee:fc:d7:12:34:df:01:74:99:b8:03:bb:9c: dd:89:b5:03:c3:c8:f3:af:e6:f3:5f:59:a8:45:a6: 57:69:e1:40:6f:9b:0f:1e:be:83:33:21:6e:70:19: ea:ef:37:d4:7f:e8:ee:09:2c:10:16:26:2d:60:bb: 21:1f:70:a3:15:0d:a1:df:4f:c7:c7:7c:56:3b:cb: 32:c9:7d:0d:4f:ae:74:02:4f:0e:3a:5c:68:d6:56: 04:5e:34:dc:9e:d4:53:be:8f:be:41:c0:e4:f2:b3: de:5b:c6:0e:fa:9b:62:89:fe:4d:2a:a4:12:58:71: 73:f1:1c:3c:e9:21:a0:3b:16:18:16:a7:4a:5d:c2: 1b:1f:5b:b0:94:6f:97:23:c7:e4:05:db:dd:33:68: 3f:88:57:2f:ca:a5:98:42:40:40:41:ab:c2:3f:b8: 36:98:fb:3d:f8:2b:d8:76:ef:f6:2d:e0:b1:82:ac: 1e:4c:6d:ad:13:49:b8:5f:72:6a:2b:01:12:a7:9b: d6:08:17:fa:78:34:93:cc:b2:51:0e:8a:97:a9:30: 0c:13:3d:ed:33:fd:9a:78:40:5a:8d:a2:23:57:28: 4e:68:6f:de:ad:8a:4d:44:f0:50:31:c1:62:8e:85: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6F:C5:63:50:01:33:0F:86:D9:48:90:FE:EE:AE:38:FF:43:76:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b1ef17-fb5f-3692-9e44-36afee296da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:04:53:0f:ff:45:7d:41:43:96:3d:6d:06:b6:bc:d2:da:bc: 90:c9:af:58:8b:56:ff:8d:f3:0e:bf:dc:67:56:e4:60:39:de: a8:a4:81:71:f3:04:73:c9:ad:da:9b:86:c8:58:5b:c4:75:46: 0c:b0:e8:5e:12:3d:15:d2:c8:9a:40:4f:8a:06:4e:ca:d8:8f: 6b:1f:8e:b8:6c:9a:69:ec:02:9d:43:4d:22:d9:89:b4:6e:bd: 4e:1d:6b:1d:fd:5f:a7:39:c4:8d:33:7f:82:31:4e:39:92:dc: 70:70:5d:28:7b:d1:cf:ae:e6:b1:34:05:fb:9b:55:86:37:50: 04:5b:96:15:62:ad:1f:a0:1f:33:d5:98:c0:6b:b4:0b:b9:18: 58:b5:92:fe:3d:f4:12:a4:29:3b:1c:b4:af:85:40:60:ab:f2: b7:22:12:a8:9b:19:f1:fd:2b:2e:98:bf:c6:62:1f:ff:7b:cf: a6:d6:74:7a:21:71:d6:b1:98:c6:7e:59:cb:ad:5c:62:1b:2b: 56:d4:1b:7c:3d:81:82:83:80:db:94:34:90:1e:80:f8:67:68: 85:68:f4:d9:67:e5:ba:4c:34:73:f3:14:03:83:d7:a7:43:2b: 3b:db:52:18:03:a8:27:4a:93:26:74:f8:11:23:cc:45:e2:47: 4d:01:4b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx62yEoeWYyUcMA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZDNhZGRkMzEtN2Q0Yi00MDhmLWI0MDEtYTlmNDQwMWQzYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFYUFETtmmwxHmGb4Me9C+781xI03wF0mbgD u5zdibUDw8jzr+bzX1moRaZXaeFAb5sPHr6DMyFucBnq7zfUf+juCSwQFiYtYLsh H3CjFQ2h30/Hx3xWO8syyX0NT650Ak8OOlxo1lYEXjTcntRTvo++QcDk8rPeW8YO +ptiif5NKqQSWHFz8Rw86SGgOxYYFqdKXcIbH1uwlG+XI8fkBdvdM2g/iFcvyqWY QkBAQavCP7g2mPs9+CvYdu/2LeCxgqweTG2tE0m4X3JqKwESp5vWCBf6eDSTzLJR DoqXqTAMEz3tM/2aeEBajaIjVyhOaG/erYpNRPBQMcFijoXsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApvxWNQATMPhtlIkP7urjj/Q3amMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBiMWVmMTctZmI1Zi0z NjkyLTllNDQtMzZhZmVlMjk2ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN4EUw//RX1BQ5Y9bQa2vNLavJDJr1iLVv+N8w6/3GdW5GA53qikgXHz BHPJrdqbhshYW8R1Rgyw6F4SPRXSyJpAT4oGTsrYj2sfjrhsmmnsAp1DTSLZibRu vU4dax39X6c5xI0zf4IxTjmS3HBwXSh70c+u5rE0BfubVYY3UARblhVirR+gHzPV mMBrtAu5GFi1kv499BKkKTsctK+FQGCr8rciEqibGfH9Ky6Yv8ZiH/97z6bWdHoh cdaxmMZ+WcutXGIbK1bUG3w9gYKDgNuUNJAegPhnaIVo9Nln5bpMNHPzFAOD16dD KzvbUhgDqCdKkyZ0+BEjzEXiR00BS04= -----END CERTIFICATE-----Generated at Sun Jul 20 22:30:41 2025 by rpki-client