$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0be028c-ae11-3f0e-93b2-b128d025f391.roa File: d0be028c-ae11-3f0e-93b2-b128d025f391.roa (raw, json) Hash identifier: TWI31ZKMmGRrAMAav2fipsCUdw2NrbvftjCPa20R0hQ= Subject key identifier: D2:59:09:20:72:4A:2F:12:D3:F7:31:4D:31:6E:4C:40:42:75:77:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC9E0CC9E7E6DEA63D0980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0be028c-ae11-3f0e-93b2-b128d025f391.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.53.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:9e:0c:c9:e7:e6:de:a6:3d:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=8bcef503-d896-4485-8a87-cbf04caad0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:04:3b:ec:22:c9:df:11:9c:ad:7a:3a:cb: 01:2d:34:ba:7b:b6:f9:68:6b:e5:9c:6a:18:a7:fc: 22:cd:aa:8d:a2:d6:27:37:6a:ff:52:cd:3d:a0:89: 38:71:9c:7a:6c:12:75:f4:6b:9a:83:bf:cf:68:b3: cf:bd:4d:90:50:b3:de:eb:e7:6f:b9:62:69:8c:9a: 29:54:97:97:be:6c:1d:92:bb:fa:61:0d:f8:07:76: 03:05:d7:de:96:f2:39:83:fd:42:fb:2c:54:89:2e: 34:f7:fb:3f:53:cb:a7:a5:15:c7:93:59:b0:19:3a: 22:d7:7a:f4:f1:f7:26:7b:3b:d4:47:68:f5:bb:7a: 49:cf:84:05:61:ef:e3:da:af:df:ff:7c:41:0b:ca: 2c:90:98:94:f2:d3:57:17:b6:2e:54:86:24:e9:df: 31:04:70:b4:85:b0:d1:59:c5:77:5e:1b:9d:ac:13: 5d:fd:22:af:17:4a:3f:a5:3c:f4:18:b8:cf:64:53: b1:72:1f:01:ea:f6:c8:e2:bf:e0:ed:1c:cd:57:31: 36:47:e7:4d:65:61:f7:3a:5b:2e:46:14:42:ef:a8: fb:09:9d:ab:1e:4a:02:dd:80:bd:d4:bb:e0:bb:25: 48:89:1f:c5:2d:3a:ac:18:ff:7b:23:44:5a:96:a8: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:59:09:20:72:4A:2F:12:D3:F7:31:4D:31:6E:4C:40:42:75:77:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0be028c-ae11-3f0e-93b2-b128d025f391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c1:1c:07:58:3a:03:fe:75:38:36:ca:e0:c6:b8:79:9d:78: ea:1b:d5:ff:26:a1:8d:cd:a4:d9:e5:09:8d:52:c2:d0:80:ae: c9:7c:29:c3:d9:1e:29:9d:8a:3f:4e:6f:a9:21:2d:5b:d2:25: f8:25:ee:05:90:06:c8:00:64:8b:df:99:d8:5f:52:88:2f:92: d3:36:6b:4a:b7:ad:e5:2d:e3:57:7d:9b:65:b7:b6:e3:87:76: 80:44:0a:af:af:67:07:92:41:69:88:ae:f3:4f:e0:47:bd:7b: 92:e9:24:3f:88:cf:44:7a:07:d8:8b:9d:bc:72:39:ad:ca:83: 03:ae:26:2c:e3:ac:c7:0e:8b:91:75:8b:c7:cf:fd:0b:40:73: e3:06:a9:6b:25:32:eb:65:ec:a3:6e:6e:74:22:df:ea:d9:02: 6e:95:13:66:bb:46:99:4b:1e:57:6f:76:9d:d0:bd:c4:3e:26: a8:c4:42:61:1c:78:99:4a:cf:08:5f:45:1c:3a:fc:fd:83:04: 17:51:b6:a0:76:9e:1a:46:17:13:96:3b:7a:9e:0d:47:71:84: ac:70:85:cc:51:ae:de:7d:f5:a5:37:9d:ae:12:33:ad:72:8e: 2b:11:9a:d7:4d:cd:c8:14:4a:9a:f0:7a:27:1a:fe:ad:8a:46: 20:2b:9a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/J4Myefm3qY9CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OGJjZWY1MDMtZDg5Ni00NDg1LThhODctY2JmMDRjYWFkMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNkEO+wiyd8RnK16OssBLTS6e7b5aGvlnGoY p/wizaqNotYnN2r/Us09oIk4cZx6bBJ19Guag7/PaLPPvU2QULPe6+dvuWJpjJop VJeXvmwdkrv6YQ34B3YDBdfelvI5g/1C+yxUiS409/s/U8unpRXHk1mwGToi13r0 8fcmezvUR2j1u3pJz4QFYe/j2q/f/3xBC8oskJiU8tNXF7YuVIYk6d8xBHC0hbDR WcV3XhudrBNd/SKvF0o/pTz0GLjPZFOxch8B6vbI4r/g7RzNVzE2R+dNZWH3Olsu RhRC76j7CZ2rHkoC3YC91LvguyVIiR/FLTqsGP97I0Ralqj8CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJZCSBySi8S0/cxTTFuTEBCdXfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBiZTAyOGMtYWUxMS0z ZjBlLTkzYjItYjEyOGQwMjVmMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3BHAdYOgP+dTg2yuDGuHmdeOob1f8moY3NpNnlCY1SwtCArsl8KcPZ Himdij9Ob6khLVvSJfgl7gWQBsgAZIvfmdhfUogvktM2a0q3reUt41d9m2W3tuOH doBECq+vZweSQWmIrvNP4Ee9e5LpJD+Iz0R6B9iLnbxyOa3KgwOuJizjrMcOi5F1 i8fP/QtAc+MGqWslMutl7KNubnQi3+rZAm6VE2a7RplLHldvdp3QvcQ+JqjEQmEc eJlKzwhfRRw6/P2DBBdRtqB2nhpGFxOWO3qeDUdxhKxwhcxRrt599aU3na4SM61y jisRmtdNzcgUSprweica/q2KRiArmt0= -----END CERTIFICATE-----Generated at Sun Jul 20 17:32:34 2025 by rpki-client