$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2413ecf9-2004-3bc7-aadc-29d9a1d10923.roa File: 2413ecf9-2004-3bc7-aadc-29d9a1d10923.roa (raw, json) Hash identifier: 4z7NXSUYvjmaxikM0Lr/CsPvHTOFoIQTNYTLjWvd0qU= Subject key identifier: 57:69:17:A5:78:AC:49:36:4D:EF:F7:17:D7:10:81:FA:15:0D:8E:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB4542CC1BB6D9F524F380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2413ecf9-2004-3bc7-aadc-29d9a1d10923.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.54.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:45:42:cc:1b:b6:d9:f5:24:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=a43d8afd-f770-4cef-bd13-a4b0663b52d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:53:22:e9:60:bb:f1:0f:5e:7d:0b:4a:3f:b4: d1:69:6e:c0:e1:97:9f:a4:55:bc:56:1e:f4:d3:1e: c9:5e:f2:2d:b1:a8:a5:8a:40:26:99:a2:1d:c5:74: 47:80:80:a0:09:e0:82:9b:db:6d:d8:6e:b7:a4:40: f2:dd:c4:5c:a1:02:9f:48:4c:e6:79:3a:ed:e1:32: 1d:dd:0b:04:63:e4:3c:97:91:e4:10:39:26:07:bd: b2:10:32:8f:b7:c4:8a:dc:46:88:f5:f9:4d:19:a2: eb:0d:aa:39:2f:1b:36:e5:97:fa:53:7d:be:55:e9: 05:1a:5e:6b:db:5d:ba:b3:8e:a7:8c:58:12:c6:02: 71:0f:77:ea:2b:1e:94:46:27:69:69:15:e5:14:19: e0:e1:0e:21:df:b7:59:77:a7:73:2c:3f:55:9d:91: f4:8d:16:27:64:9f:9d:10:ce:0e:49:64:94:75:d0: c5:cb:f2:8d:59:2b:57:be:de:49:7c:f4:2d:92:8c: 7e:31:07:3d:de:82:07:c2:17:65:dd:a8:81:68:75: 4c:91:d0:bf:a5:70:4f:d3:36:b3:b4:ce:6a:e1:5a: 65:13:d2:f9:23:79:3d:08:68:c8:63:3d:5a:3b:19: 11:3d:cf:1b:2a:67:d0:24:83:ec:7a:19:8f:c1:31: 6d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:17:A5:78:AC:49:36:4D:EF:F7:17:D7:10:81:FA:15:0D:8E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2413ecf9-2004-3bc7-aadc-29d9a1d10923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d0:b8:f9:8e:b9:02:30:b4:c8:f4:f6:26:88:4a:9b:fe:98: 41:44:46:51:fc:21:8f:de:ae:ec:f0:cc:61:4d:99:df:99:6d: fe:fb:8c:ce:88:03:e5:14:a5:a1:69:f2:7a:29:88:8d:7a:73: 13:4f:03:d5:07:2b:21:53:65:1b:d8:ed:ad:6b:5e:11:52:cd: 8d:20:69:39:0b:c4:e6:b4:62:8d:c1:d4:89:f4:d6:40:5e:05: 93:64:e4:ee:91:e0:17:72:68:eb:b5:d4:2a:9a:73:c7:55:62: b5:e8:6b:df:81:42:bb:14:c4:b4:f5:6a:5f:98:a4:8a:2f:20: 18:c5:d0:8a:b4:74:15:9e:6e:6f:56:ce:fc:ec:3a:27:dd:8c: 25:21:56:78:fb:f5:9a:f5:f7:5e:4e:7a:5b:43:9c:ca:ff:c4: 59:44:58:68:00:b0:51:63:2c:13:86:31:19:e7:45:48:69:a6: 78:d0:de:72:55:50:33:a0:16:f1:7d:a8:b7:a2:9a:e3:13:55: 91:ba:46:fd:38:79:52:78:23:20:b0:da:65:f2:42:c6:fe:a3: 76:3d:26:91:38:8a:d1:60:89:24:a3:f6:15:07:fc:60:b7:a2: 81:56:f3:dd:6c:87:68:ac:89:76:b4:fe:d0:dc:9d:cf:99:5e: a1:1e:42:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+0VCzBu22fUk84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YTQzZDhhZmQtZjc3MC00Y2VmLWJkMTMtYTRiMDY2M2I1MmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lMi6WC78Q9efQtKP7TRaW7A4ZefpFW8Vh70 0x7JXvItsailikAmmaIdxXRHgICgCeCCm9tt2G63pEDy3cRcoQKfSEzmeTrt4TId 3QsEY+Q8l5HkEDkmB72yEDKPt8SK3EaI9flNGaLrDao5Lxs25Zf6U32+VekFGl5r 2126s46njFgSxgJxD3fqKx6URidpaRXlFBng4Q4h37dZd6dzLD9VnZH0jRYnZJ+d EM4OSWSUddDFy/KNWStXvt5JfPQtkox+MQc93oIHwhdl3aiBaHVMkdC/pXBP0zaz tM5q4VplE9L5I3k9CGjIYz1aOxkRPc8bKmfQJIPsehmPwTFt9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdpF6V4rEk2Te/3F9cQgfoVDY4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQxM2VjZjktMjAwNC0z YmM3LWFhZGMtMjlkOWExZDEwOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbQuPmOuQIwtMj09iaISpv+mEFERlH8IY/eruzwzGFNmd+Zbf77jM6I A+UUpaFp8nopiI16cxNPA9UHKyFTZRvY7a1rXhFSzY0gaTkLxOa0Yo3B1In01kBe BZNk5O6R4BdyaOu11Cqac8dVYrXoa9+BQrsUxLT1al+YpIovIBjF0Iq0dBWebm9W zvzsOifdjCUhVnj79Zr1915OeltDnMr/xFlEWGgAsFFjLBOGMRnnRUhppnjQ3nJV UDOgFvF9qLeimuMTVZG6Rv04eVJ4IyCw2mXyQsb+o3Y9JpE4itFgiSSj9hUH/GC3 ooFW891sh2isiXa0/tDcnc+ZXqEeQr8= -----END CERTIFICATE-----Generated at Sun Jul 20 17:21:53 2025 by rpki-client