$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02170697-e02e-31da-841e-f8b7adba1eb3.roa File: 02170697-e02e-31da-841e-f8b7adba1eb3.roa (raw, json) Hash identifier: /INwgK2mrqWpxaRm3Jcs55Ai+6SbR8fhpHGdfJGHPA0= Subject key identifier: 8E:C9:79:80:E7:08:02:E2:3A:E1:C5:C1:92:E9:B5:E0:23:C9:83:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBD9F14DB9905377FA5F34 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02170697-e02e-31da-841e-f8b7adba1eb3.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33668 IP address blocks: 68.54.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:d9:f1:4d:b9:90:53:77:fa:5f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=3fbadc0e-abac-4200-9f3c-5ea30ba74365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:93:89:df:9b:cd:c1:77:f3:9b:b1:be:6a: 39:31:aa:d5:98:e8:48:f1:d6:87:78:f2:17:08:e0: a8:95:87:8d:f5:7d:fe:34:09:49:cb:71:27:86:25: ad:29:c8:72:fa:aa:94:76:83:00:88:f3:58:d4:d2: d9:48:1f:26:bb:22:4b:01:c3:77:17:26:43:8d:94: 16:c0:23:88:fa:61:02:25:81:ed:5f:9c:68:7f:07: 6a:c4:7a:88:ba:83:8c:ba:81:e4:47:e5:2c:6d:85: 75:c0:7c:af:29:80:b5:f6:37:3c:80:63:d9:8a:67: 09:ee:fe:55:18:e0:1a:84:e9:b2:8a:6b:90:53:64: cc:0e:f7:b7:00:83:23:7f:fe:da:94:ff:d6:2a:b4: 7e:3f:4e:7f:c5:eb:a2:f7:44:50:85:36:b2:4e:eb: 0d:ec:f1:ae:6e:88:17:58:a6:53:ad:57:93:3a:98: 13:43:bc:37:e2:ec:e2:97:95:be:ea:95:76:79:6e: 77:0b:86:04:36:af:ae:0e:a1:84:2e:bc:cd:58:81: 71:ba:ff:0f:2b:5e:a0:71:2f:94:3a:27:a9:df:65: 3a:30:c2:e3:fd:d2:98:b4:11:07:f9:d5:c4:15:24: be:c1:04:e3:e1:ff:6f:c3:7d:ca:e0:6b:a8:96:17: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C9:79:80:E7:08:02:E2:3A:E1:C5:C1:92:E9:B5:E0:23:C9:83:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02170697-e02e-31da-841e-f8b7adba1eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ef:83:d2:59:09:7a:1a:fa:1f:8a:e6:e2:12:37:69:07:20: 6b:a0:25:80:6e:b5:b7:af:3f:e7:ab:34:12:19:fc:27:9d:d1: 8a:97:99:a9:38:23:ad:6b:ee:33:6f:5a:9d:b0:e1:11:b1:6d: af:e9:ab:34:3e:c7:3a:69:8b:87:35:24:0b:07:aa:17:dd:67: 51:e0:86:c6:fd:76:8a:18:db:59:9b:30:bb:cf:17:0b:23:36: 60:a7:10:76:ba:04:a2:0b:5f:77:ba:dc:e1:d2:00:be:63:fd: 6f:45:bf:08:4f:78:75:8d:61:58:36:e3:d4:b0:d0:92:d6:93: b4:7f:cb:d8:e4:ba:9f:b4:41:c3:66:76:12:5d:a2:e6:f7:27: a6:6f:50:1e:6a:b7:b2:42:22:68:63:3d:77:c6:45:0b:eb:1e: 1d:78:42:bb:5f:07:14:d8:18:55:54:e1:46:8b:3c:09:db:b8: 63:34:33:f1:33:ab:74:74:2e:a0:37:4e:87:e2:89:55:cd:b2: bc:14:45:d3:7e:b5:13:e1:27:54:cd:81:7e:11:43:93:d2:31: c3:de:92:81:35:63:67:1f:66:f1:e1:fe:e3:39:50:2a:69:32: 31:96:4b:4d:e9:2a:a9:f5:97:da:1a:8a:95:2d:5a:5f:ed:45: 64:31:1c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+9nxTbmQU3f6XzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk M2ZiYWRjMGUtYWJhYy00MjAwLTlmM2MtNWVhMzBiYTc0MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA232Tid+bzcF385uxvmo5MarVmOhI8daHePIX COColYeN9X3+NAlJy3EnhiWtKchy+qqUdoMAiPNY1NLZSB8muyJLAcN3FyZDjZQW wCOI+mECJYHtX5xofwdqxHqIuoOMuoHkR+UsbYV1wHyvKYC19jc8gGPZimcJ7v5V GOAahOmyimuQU2TMDve3AIMjf/7alP/WKrR+P05/xeui90RQhTayTusN7PGubogX WKZTrVeTOpgTQ7w34uzil5W+6pV2eW53C4YENq+uDqGELrzNWIFxuv8PK16gcS+U Oiep32U6MMLj/dKYtBEH+dXEFSS+wQTj4f9vw33K4GuolhdYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7JeYDnCALiOuHFwZLpteAjyYP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIxNzA2OTctZTAyZS0z MWRhLTg0MWUtZjhiN2FkYmExZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERDZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHvg9JZCXoa+h+K5uISN2kHIGugJYButbevP+erNBIZ/Ced0YqXmak4 I61r7jNvWp2w4RGxba/pqzQ+xzppi4c1JAsHqhfdZ1Hghsb9dooY21mbMLvPFwsj NmCnEHa6BKILX3e63OHSAL5j/W9FvwhPeHWNYVg249Sw0JLWk7R/y9jkup+0QcNm dhJdoub3J6ZvUB5qt7JCImhjPXfGRQvrHh14QrtfBxTYGFVU4UaLPAnbuGM0M/Ez q3R0LqA3TofiiVXNsrwURdN+tRPhJ1TNgX4RQ5PSMcPekoE1Y2cfZvHh/uM5UCpp MjGWS03pKqn1l9oaipUtWl/tRWQxHNU= -----END CERTIFICATE-----Generated at Sun Jul 20 17:39:41 2025 by rpki-client