$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3623f9-e31d-3729-a809-5872892927f0.roa File: 4e3623f9-e31d-3729-a809-5872892927f0.roa (raw, json) Hash identifier: Db2cqzdDcyNOlGs5DoimAbVKVhulr794zSnGA+RYmHI= Subject key identifier: 65:31:8C:32:8F:DE:C3:3F:0C:3C:A6:31:FF:10:DF:D8:7E:50:E2:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB3C658C1C27B2F5C0EB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3623f9-e31d-3729-a809-5872892927f0.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.34.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:3c:65:8c:1c:27:b2:f5:c0:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=8b7b69ae-a840-461e-b815-9cba210d04ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:27:90:2e:ae:7d:a7:17:4a:5b:f4:21:28:b9: a8:c0:f6:e0:73:0d:36:c6:29:72:9f:39:14:d1:a5: e2:e3:de:86:85:96:12:1e:00:25:a7:6d:53:76:f3: 05:42:1a:30:63:83:2f:37:d6:64:5f:94:b6:a4:84: ed:27:a7:f2:cb:c4:1d:f9:35:fd:6c:b7:1c:b9:7a: d6:1c:65:35:cd:f6:fe:99:2e:33:a0:ad:db:d6:b4: df:af:dd:02:40:ea:22:2c:06:67:e7:dd:11:4f:fb: 63:30:cf:4d:21:83:ba:4d:eb:d9:10:00:12:b7:57: af:13:ad:46:22:49:29:16:50:d9:54:a1:b7:50:ec: 57:71:21:d8:28:66:fe:db:6b:c7:6d:e5:9e:fc:bf: 29:7b:0f:6e:42:9f:02:7e:d5:be:52:95:b2:4e:9c: 93:0a:be:bc:86:88:a6:a5:fa:3f:93:90:00:7f:59: e3:b3:23:2d:71:81:0e:fc:1a:2e:02:b6:54:30:db: 48:f6:28:55:d3:54:62:9e:98:b3:60:6c:9e:bc:30: 4a:eb:53:33:ee:6c:98:18:64:db:d7:7f:5d:fa:f6: 85:73:c9:d8:3b:47:10:e9:bc:27:8c:74:ef:ce:f4: ca:7b:e1:1d:74:03:90:56:20:06:e7:de:3b:26:64: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:31:8C:32:8F:DE:C3:3F:0C:3C:A6:31:FF:10:DF:D8:7E:50:E2:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e3623f9-e31d-3729-a809-5872892927f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e8:b5:9b:93:64:34:44:63:b0:ad:af:0c:c7:fa:c8:1c:29: cd:d0:6a:d4:0a:31:11:8d:6d:42:db:80:08:ab:17:5f:1f:91: e1:cb:ef:65:d1:44:89:a7:71:f7:36:f6:6a:bf:c1:ab:7a:5f: ae:32:0c:d0:89:fc:0c:3d:d7:8c:14:4d:eb:a2:58:3b:9b:21: f4:26:33:18:eb:06:cb:59:4c:82:90:33:f7:a5:f6:ce:8d:b1: 29:9e:9f:52:87:6e:ca:22:12:97:51:d9:d1:3e:1f:6c:82:c3: 06:d7:ed:4b:aa:d2:43:0f:f8:47:2c:14:93:8c:3c:1c:28:72: 79:63:fc:eb:9c:cd:87:6b:eb:2f:07:19:c8:7b:23:74:49:fd: 06:c5:eb:f8:7a:14:a6:78:08:87:49:c3:64:ef:2f:21:b0:3c: fc:43:0f:f7:72:5b:95:c9:cc:b7:17:d7:df:f4:9b:bc:49:64: 27:23:ff:bd:97:e8:57:2a:f8:88:f2:81:76:e5:64:e6:7e:52: b6:56:d4:be:ae:a4:6f:89:d1:01:63:ca:61:84:0d:00:60:4d: 6c:28:3d:41:e2:2f:03:c3:ff:62:64:62:36:a4:23:39:92:19: 91:a3:d9:ca:1c:df:59:cd:d0:43:fe:0d:25:33:ab:f5:f6:36: 95:cb:c5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zxljBwnsvXA64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OGI3YjY5YWUtYTg0MC00NjFlLWI4MTUtOWNiYTIxMGQwNGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCeQLq59pxdKW/QhKLmowPbgcw02xilynzkU 0aXi496GhZYSHgAlp21TdvMFQhowY4MvN9ZkX5S2pITtJ6fyy8Qd+TX9bLccuXrW HGU1zfb+mS4zoK3b1rTfr90CQOoiLAZn590RT/tjMM9NIYO6TevZEAASt1evE61G IkkpFlDZVKG3UOxXcSHYKGb+22vHbeWe/L8pew9uQp8CftW+UpWyTpyTCr68hoim pfo/k5AAf1njsyMtcYEO/BouArZUMNtI9ihV01RinpizYGyevDBK61Mz7myYGGTb 139d+vaFc8nYO0cQ6bwnjHTvzvTKe+EddAOQViAG5947JmTdawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUxjDKP3sM/DDymMf8Q39h+UOJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGUzNjIzZjktZTMxZC0z NzI5LWE4MDktNTg3Mjg5MjkyN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCLRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbotZuTZDREY7CtrwzH+sgcKc3QatQKMRGNbULbgAirF18fkeHL72XR RImncfc29mq/wat6X64yDNCJ/Aw914wUTeuiWDubIfQmMxjrBstZTIKQM/el9s6N sSmen1KHbsoiEpdR2dE+H2yCwwbX7Uuq0kMP+EcsFJOMPBwocnlj/OuczYdr6y8H Gch7I3RJ/QbF6/h6FKZ4CIdJw2TvLyGwPPxDD/dyW5XJzLcX19/0m7xJZCcj/72X 6Fcq+IjygXblZOZ+UrZW1L6upG+J0QFjymGEDQBgTWwoPUHiLwPD/2JkYjakIzmS GZGj2coc31nN0EP+DSUzq/X2NpXLxcc= -----END CERTIFICATE-----Generated at Sun Jul 20 17:17:29 2025 by rpki-client