$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d29470b-fe90-3fc1-83be-4b93ac927fc7.roa File: 1d29470b-fe90-3fc1-83be-4b93ac927fc7.roa (raw, json) Hash identifier: Zp+Cc/oBC9bwhRlx5Ev7ZYb4FJ7lwk5XqT+Rkyr05WQ= Subject key identifier: 98:81:06:E0:55:3C:8E:EE:27:23:A9:05:BC:4E:83:A8:D8:58:B9:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB435AE50A7E3FDD371340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d29470b-fe90-3fc1-83be-4b93ac927fc7.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.53.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:43:5a:e5:0a:7e:3f:dd:37:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=cb11f0ac-734a-41d8-a7ab-2610e5f7635d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:d2:14:c9:4e:82:b8:8a:18:3d:2d:2f:48: 38:95:2b:18:be:11:20:04:04:b2:db:17:d0:46:e2: 07:7c:eb:33:33:d7:77:f0:31:74:40:c0:a5:f5:2a: 56:e1:d3:15:fc:61:35:da:3e:21:7c:8c:65:7c:a6: dc:81:cc:f0:f4:de:ce:51:86:7d:7d:3c:fc:26:ba: f7:3c:bd:2a:c2:b8:af:ef:0f:72:ba:7e:07:3f:1e: e1:ba:f9:1c:2e:76:25:bd:84:cf:e8:b7:53:84:9b: a8:b2:00:9c:8a:1d:c4:48:52:2b:c9:f3:fa:4a:a4: 08:9d:3f:2a:07:1c:17:99:a4:31:36:94:c0:56:e9: 68:4a:7a:a3:22:ac:6e:28:70:50:8c:79:f2:47:3b: 21:d2:e3:83:25:04:0d:f1:1c:aa:b6:5c:fa:a0:3e: 05:9c:d7:9e:e0:b4:52:76:b8:33:ba:13:ce:ee:82: 6b:94:ec:ab:c7:70:87:1a:98:1f:56:bc:09:a8:24: aa:51:f4:ab:39:26:67:d0:40:a1:17:8b:23:2a:65: f8:c3:b4:76:ac:6e:60:dc:50:dd:79:df:07:63:89: d2:2b:12:0d:ac:f8:dd:8f:1f:da:3e:07:95:cf:a2: cb:83:0f:9e:c9:3e:18:fc:2c:3f:77:03:8f:6e:d6: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:81:06:E0:55:3C:8E:EE:27:23:A9:05:BC:4E:83:A8:D8:58:B9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d29470b-fe90-3fc1-83be-4b93ac927fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9b:68:75:c2:66:f3:8d:3c:40:6d:5a:06:a2:87:e6:18:43: f0:81:d1:8a:bc:f1:d5:4c:53:9e:82:76:f0:5a:62:ef:76:00: a6:dc:3f:85:09:7b:fc:f2:03:ec:7f:5d:bd:84:5d:8e:fd:d8: 15:39:a9:ec:7b:d8:92:c0:f6:37:5f:b4:06:2d:b4:cd:b7:ea: 43:9d:61:74:a9:6a:47:be:40:e6:41:66:d6:37:f7:8b:26:55: aa:cb:63:46:29:b7:fa:ae:42:04:9d:88:96:cf:48:b2:8b:be: 9b:64:2b:e5:c9:ff:16:ef:28:9b:3a:6e:48:f5:cc:c7:f1:b5: 41:57:07:b7:55:6a:78:ca:ee:f0:53:f2:e3:7b:36:95:37:1f: 3a:e3:00:26:6c:37:77:2b:7e:bc:62:ec:58:76:4c:29:34:a2: 63:f9:db:e5:2f:05:3e:10:14:37:c0:6f:35:97:51:0f:a2:ae: ca:93:e3:d2:b9:a5:63:a0:13:b6:f0:d4:79:31:fb:c5:70:99: 7b:4d:9c:eb:b5:da:a3:4f:02:d4:47:5d:8f:34:66:b2:a2:ba: 73:2f:43:03:2c:89:3e:f5:65:be:7f:59:eb:36:da:b0:2d:d3: 0a:95:ed:57:f8:0b:a7:8d:a5:b8:b2:9f:1b:27:2e:39:c0:68: ac:5c:33:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+0Na5Qp+P903E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Y2IxMWYwYWMtNzM0YS00MWQ4LWE3YWItMjYxMGU1Zjc2MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29PSFMlOgriKGD0tL0g4lSsYvhEgBASy2xfQ RuIHfOszM9d38DF0QMCl9SpW4dMV/GE12j4hfIxlfKbcgczw9N7OUYZ9fTz8Jrr3 PL0qwriv7w9yun4HPx7huvkcLnYlvYTP6LdThJuosgCcih3ESFIryfP6SqQInT8q BxwXmaQxNpTAVuloSnqjIqxuKHBQjHnyRzsh0uODJQQN8Ryqtlz6oD4FnNee4LRS drgzuhPO7oJrlOyrx3CHGpgfVrwJqCSqUfSrOSZn0EChF4sjKmX4w7R2rG5g3FDd ed8HY4nSKxINrPjdjx/aPgeVz6LLgw+eyT4Y/Cw/dwOPbtbFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiBBuBVPI7uJyOpBbxOg6jYWLm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQyOTQ3MGItZmU5MC0z ZmMxLTgzYmUtNGI5M2FjOTI3ZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABObaHXCZvONPEBtWgaih+YYQ/CB0Yq88dVMU56CdvBaYu92AKbcP4UJ e/zyA+x/Xb2EXY792BU5qex72JLA9jdftAYttM236kOdYXSpake+QOZBZtY394sm VarLY0Ypt/quQgSdiJbPSLKLvptkK+XJ/xbvKJs6bkj1zMfxtUFXB7dVanjK7vBT 8uN7NpU3HzrjACZsN3crfrxi7Fh2TCk0omP52+UvBT4QFDfAbzWXUQ+irsqT49K5 pWOgE7bw1Hkx+8VwmXtNnOu12qNPAtRHXY80ZrKiunMvQwMsiT71Zb5/Wes22rAt 0wqV7Vf4C6eNpbiynxsnLjnAaKxcM3U= -----END CERTIFICATE-----Generated at Sun Jul 20 17:39:12 2025 by rpki-client