$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8fe797c-3498-3f44-8239-ce4bebfd8d56.roa File: e8fe797c-3498-3f44-8239-ce4bebfd8d56.roa (raw, json) Hash identifier: cbOQPTBPgrwZ2O9icPH5fkaCPb0K4Uu3OUpXD2MLwG4= Subject key identifier: DC:2C:32:34:BB:7B:D8:F8:8A:20:D1:9F:9A:DF:BD:0D:0B:D3:84:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCA1F09B74CF76815CF980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8fe797c-3498-3f44-8239-ce4bebfd8d56.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.54.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:a1:f0:9b:74:cf:76:81:5c:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=0b9de6f5-3c7f-418d-892b-f9d617dcb468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:cc:72:a2:18:46:4e:1c:d8:fa:92:54:96: 5e:8a:37:b7:e3:c3:be:37:22:53:70:d1:6c:8c:da: a1:44:ba:88:fa:23:6d:08:59:d1:ad:40:ba:4e:f7: 07:6c:98:03:05:e8:5f:97:37:29:d7:17:37:8e:7b: ea:d8:22:68:e4:c0:e7:1e:9d:27:12:73:76:30:36: bf:84:0d:d1:f3:1a:0b:41:06:21:e4:58:f4:2b:8b: 52:8c:20:4c:dc:e7:45:33:99:58:74:24:87:a7:42: 2e:73:cd:3d:66:2a:d5:9f:a7:76:36:54:a2:fb:72: da:6e:13:27:cd:92:52:64:76:e2:fe:f3:b8:3a:33: 2b:7b:4b:78:79:8c:bb:ab:40:e0:d9:84:91:d2:c4: f9:5f:f4:1c:f9:bf:ab:09:c0:58:fc:95:8a:82:e0: 38:c7:2f:eb:04:3a:04:2a:a7:bc:d8:d4:22:fb:18: 77:62:02:10:32:05:4d:e9:a1:bd:52:5d:30:9d:a1: 57:76:37:c5:69:c4:94:fa:03:67:31:5c:5c:67:7a: 29:67:73:8f:40:bd:22:90:9c:24:4f:3b:47:b6:a0: 84:b2:ac:b9:bc:35:de:96:11:ab:57:ee:f5:e1:34: 2a:70:1d:04:00:b2:59:17:68:4d:b9:e1:93:36:c6: 3f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2C:32:34:BB:7B:D8:F8:8A:20:D1:9F:9A:DF:BD:0D:0B:D3:84:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8fe797c-3498-3f44-8239-ce4bebfd8d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fb:20:fc:cf:9e:13:57:7a:0f:38:37:cc:3a:36:93:86:d4: b3:8c:8e:ac:9d:12:59:a1:2a:7a:1c:0c:64:f8:f6:0d:24:02: a3:7f:d3:6a:a5:69:7c:16:47:d9:70:88:d2:2e:00:49:19:e4: e8:cb:91:e9:79:3d:15:09:75:8d:1d:a4:ec:89:09:c2:fc:a8: 8c:b6:3d:30:78:9b:9a:e5:b9:f1:42:7a:97:9e:53:07:ef:2a: b9:7c:bf:ee:27:00:b2:95:33:19:30:0c:95:e7:92:32:e9:51: 11:7a:36:20:f0:52:90:b9:4d:fe:31:76:13:0f:79:2e:43:42: d0:b1:ac:52:3f:19:87:d5:d7:02:71:1c:46:ff:c8:21:e2:3d: 4f:37:96:ea:d8:27:5e:bc:19:1c:aa:06:7a:fa:70:b2:56:ab: 7b:13:f2:77:45:97:1b:91:c3:a7:8c:3e:0c:0c:4a:ca:7c:17: 23:70:cf:8f:e6:31:00:e9:1a:7b:09:bf:78:10:05:82:80:52: ca:2f:b0:68:4d:8e:71:f0:8d:30:25:7c:e8:a6:81:8f:0e:1e: 3a:e0:e7:b0:35:5e:23:bb:a0:1b:ec:7a:b7:9a:3c:bb:a5:6a: 2c:f3:85:01:f0:ea:62:35:37:e4:a8:60:b9:dd:31:f4:67:ad: 91:2a:8c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/KHwm3TPdoFc+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MGI5ZGU2ZjUtM2M3Zi00MThkLTg5MmItZjlkNjE3ZGNiNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbDMcqIYRk4c2PqSVJZeije348O+NyJTcNFs jNqhRLqI+iNtCFnRrUC6TvcHbJgDBehflzcp1xc3jnvq2CJo5MDnHp0nEnN2MDa/ hA3R8xoLQQYh5Fj0K4tSjCBM3OdFM5lYdCSHp0Iuc809ZirVn6d2NlSi+3LabhMn zZJSZHbi/vO4OjMre0t4eYy7q0Dg2YSR0sT5X/Qc+b+rCcBY/JWKguA4xy/rBDoE Kqe82NQi+xh3YgIQMgVN6aG9Ul0wnaFXdjfFacSU+gNnMVxcZ3opZ3OPQL0ikJwk TztHtqCEsqy5vDXelhGrV+714TQqcB0EALJZF2hNueGTNsY/RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwsMjS7e9j4iiDRn5rfvQ0L04T5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZThmZTc5N2MtMzQ5OC0z ZjQ0LTgyMzktY2U0YmViZmQ4ZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERDbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX7IPzPnhNXeg84N8w6NpOG1LOMjqydElmhKnocDGT49g0kAqN/02ql aXwWR9lwiNIuAEkZ5OjLkel5PRUJdY0dpOyJCcL8qIy2PTB4m5rlufFCepeeUwfv Krl8v+4nALKVMxkwDJXnkjLpURF6NiDwUpC5Tf4xdhMPeS5DQtCxrFI/GYfV1wJx HEb/yCHiPU83lurYJ168GRyqBnr6cLJWq3sT8ndFlxuRw6eMPgwMSsp8FyNwz4/m MQDpGnsJv3gQBYKAUsovsGhNjnHwjTAlfOimgY8OHjrg57A1XiO7oBvsereaPLul aizzhQHw6mI1N+SoYLndMfRnrZEqjAI= -----END CERTIFICATE-----Generated at Sun Jul 20 17:22:33 2025 by rpki-client