$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e8d8fa-d851-3e83-b8de-deb728f4d6f7.roa File: 40e8d8fa-d851-3e83-b8de-deb728f4d6f7.roa (raw, json) Hash identifier: C1iGWivoJ6GHX1wx96uaY1AgEkvt7Iw4bR/AF3uYgzs= Subject key identifier: 50:1E:E3:A7:28:13:58:25:4B:B8:90:CC:06:6E:A3:69:A0:BE:3D:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDA36C4CFA53B04B789640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e8d8fa-d851-3e83-b8de-deb728f4d6f7.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33491 IP address blocks: 68.58.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:a3:6c:4c:fa:53:b0:4b:78:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7b8fa94b-b3ae-4cd2-aabd-7e5300fac478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:d6:03:bd:2f:16:cd:4c:dd:b9:c1:50:12: 1c:55:b0:b2:dc:a9:58:7e:00:6e:8c:23:6e:7c:9b: 0b:5f:c2:59:68:91:2c:12:84:c2:a0:10:d9:bf:58: 3e:e7:21:45:d5:db:15:65:e0:64:e6:84:c3:83:12: c9:83:27:cd:a1:99:0d:48:92:f3:16:19:b8:40:85: 59:fb:a7:97:9c:8f:0f:96:6b:be:62:92:22:84:b3: 3a:b1:83:ae:bc:18:18:cb:88:d3:fd:82:55:e1:20: 48:83:5c:b6:59:f3:81:65:6c:db:ff:6b:38:21:6f: 12:b5:38:d4:0b:7a:46:74:57:0e:14:16:c3:6c:8c: ae:19:24:8d:63:90:f5:33:2f:81:11:7b:eb:0c:ae: c0:57:a0:16:d4:38:f8:b7:dc:02:91:ef:27:34:44: 44:56:2d:7e:46:24:ca:df:1c:f3:64:5b:dd:cc:07: 44:05:8f:36:ea:7f:69:e5:61:db:3a:3b:8b:ab:db: 1a:2d:ad:91:3a:50:72:65:46:8b:fa:29:0f:1b:dc: 6f:51:aa:ed:3b:7f:68:8b:0f:f6:90:37:64:e4:ba: e6:c9:fa:61:90:45:a2:41:68:4e:00:0b:ca:82:1e: c3:ca:3c:0d:2a:9e:ca:e6:a1:2f:91:ea:3e:17:4c: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1E:E3:A7:28:13:58:25:4B:B8:90:CC:06:6E:A3:69:A0:BE:3D:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e8d8fa-d851-3e83-b8de-deb728f4d6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:77:91:22:79:f1:0e:df:34:bd:a1:55:73:a2:62:0d:89:43: b1:02:3e:60:dc:c3:dd:82:c5:41:d1:cd:36:3e:25:5c:07:25: 84:b1:aa:a0:01:4c:08:bc:f1:e1:d8:40:2d:b5:8b:5f:aa:04: 79:ce:ec:c4:de:cf:9d:44:03:4c:70:c8:5f:f4:4a:47:d2:3e: ac:e0:55:ec:c7:6c:07:db:ae:3f:e3:e6:ac:a7:b8:4a:d4:a0: 01:f2:33:17:6e:ed:55:8b:b6:46:fd:6e:c2:d3:70:ae:e0:f2: b8:6e:01:0e:79:a1:fa:90:8a:a1:30:51:84:c4:a5:06:fe:59: 72:8e:6a:fc:a0:eb:b5:a1:27:b8:02:2d:63:06:88:f4:d1:22: d4:af:4f:a2:34:7a:42:51:8f:5a:76:f6:4f:68:90:35:fc:ab: 8c:ea:e5:09:db:37:be:9e:fc:5c:3a:87:fa:00:e8:6e:3e:63: f0:68:88:6d:90:f1:dd:06:84:b6:cc:79:34:80:6d:ea:1e:04: 4d:6c:f1:72:b8:e5:35:67:06:dc:e9:e4:4f:01:b5:09:63:d1: a5:8b:2a:3a:4c:cf:57:58:db:36:f7:7f:44:60:b2:f9:6a:18: c7:c8:53:98:8f:58:90:18:cf:4f:4e:67:54:06:75:eb:94:76: bc:1f:2a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/aNsTPpTsEt4lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk N2I4ZmE5NGItYjNhZS00Y2QyLWFhYmQtN2U1MzAwZmFjNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthzWA70vFs1M3bnBUBIcVbCy3KlYfgBujCNu fJsLX8JZaJEsEoTCoBDZv1g+5yFF1dsVZeBk5oTDgxLJgyfNoZkNSJLzFhm4QIVZ +6eXnI8Plmu+YpIihLM6sYOuvBgYy4jT/YJV4SBIg1y2WfOBZWzb/2s4IW8StTjU C3pGdFcOFBbDbIyuGSSNY5D1My+BEXvrDK7AV6AW1Dj4t9wCke8nNEREVi1+RiTK 3xzzZFvdzAdEBY826n9p5WHbOjuLq9saLa2ROlByZUaL+ikPG9xvUartO39oiw/2 kDdk5LrmyfphkEWiQWhOAAvKgh7DyjwNKp7K5qEvkeo+F0zzAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAe46coE1glS7iQzAZuo2mgvj3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBlOGQ4ZmEtZDg1MS0z ZTgzLWI4ZGUtZGViNzI4ZjRkNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN3kSJ58Q7fNL2hVXOiYg2JQ7ECPmDcw92CxUHRzTY+JVwHJYSxqqAB TAi88eHYQC21i1+qBHnO7MTez51EA0xwyF/0SkfSPqzgVezHbAfbrj/j5qynuErU oAHyMxdu7VWLtkb9bsLTcK7g8rhuAQ55ofqQiqEwUYTEpQb+WXKOavyg67WhJ7gC LWMGiPTRItSvT6I0ekJRj1p29k9okDX8q4zq5QnbN76e/Fw6h/oA6G4+Y/BoiG2Q 8d0GhLbMeTSAbeoeBE1s8XK45TVnBtzp5E8BtQlj0aWLKjpMz1dY2zb3f0Rgsvlq GMfIU5iPWJAYz09OZ1QGdeuUdrwfKvw= -----END CERTIFICATE-----Generated at Sun Jul 20 17:34:28 2025 by rpki-client