$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6894c5ae-f17c-342b-9216-71bb13a91366.roa File: 6894c5ae-f17c-342b-9216-71bb13a91366.roa (raw, json) Hash identifier: mrVhCgRT5DqdTx/vTAvJZfnd6dsO1BVhw384pLxEqNU= Subject key identifier: 0D:C5:63:EB:DB:CA:A8:8A:28:F0:CB:C1:8A:11:E6:09:18:FF:4D:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBA346790DF36F2408DC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6894c5ae-f17c-342b-9216-71bb13a91366.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22258 IP address blocks: 68.86.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:a3:46:79:0d:f3:6f:24:08:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=2a41e3ef-956a-412c-bd50-25f42d2d7466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:a5:37:6b:c2:0a:21:7f:90:6c:76:31:c2: fe:6c:64:8b:09:96:fb:58:5e:4e:fd:4b:4c:80:03: d7:27:0f:a1:d8:77:3b:e7:9a:63:37:19:02:d6:a4: 2d:e6:a6:87:ee:08:43:81:5f:c2:a3:88:e7:35:07: 33:76:d8:a0:f1:47:b6:58:29:be:61:e2:ea:4f:2d: 99:e8:76:7b:fa:5a:07:32:e9:3f:00:dc:fa:22:ab: 4c:46:04:25:60:05:ed:72:47:ee:74:42:4d:ad:f2: 79:1e:a4:ae:92:65:69:5a:f2:0d:2c:f0:87:12:1c: fa:3c:ab:53:e8:48:6d:01:73:ed:45:b1:00:09:84: 7c:fb:b1:21:4c:87:00:9c:9c:b8:e5:6f:45:76:ec: b5:36:9e:4f:b8:cb:01:f5:54:f0:ef:2f:96:ad:5e: 9b:34:ce:b9:9e:99:21:9b:37:14:f3:30:df:0a:be: 6c:87:11:c2:eb:e3:d4:b1:a7:c0:02:6e:90:f3:a8: 1a:34:46:62:a2:47:59:20:be:2d:e3:5e:c9:74:23: 5b:ea:1d:af:a2:3e:0a:69:a9:b8:eb:3f:52:f3:08: fb:65:92:e6:f4:ca:8c:51:81:cc:de:7e:d1:bc:c5: f6:7a:1e:ad:49:d3:ea:f2:e4:ac:41:9f:32:24:e5: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:63:EB:DB:CA:A8:8A:28:F0:CB:C1:8A:11:E6:09:18:FF:4D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6894c5ae-f17c-342b-9216-71bb13a91366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:42:9e:bc:59:e4:c7:d0:83:d1:71:cf:0d:11:03:e2:e5:09: 3f:b7:c1:8d:80:59:73:a0:c4:ad:e7:f6:24:80:6d:1b:fd:2e: 0b:f3:bf:10:b6:4f:82:f8:a9:da:26:cf:f8:c4:d2:75:38:c6: c4:e1:3e:f2:cd:a7:6f:5a:e0:95:e7:bb:91:b9:4c:aa:45:70: ec:cc:89:98:23:a8:fa:0c:a0:02:0b:5d:21:10:f0:9c:8e:b3: 2f:61:bc:31:df:d2:73:5f:15:16:8a:51:85:aa:d4:11:eb:65: ab:9d:63:3f:a1:52:15:d6:3c:f8:27:15:b8:d5:8e:8d:f2:5d: e9:e9:29:6a:5a:79:24:d9:89:27:f5:c3:2b:67:ee:eb:52:eb: f2:d7:78:af:04:9a:c6:9e:bf:da:f6:54:4b:4d:34:89:23:7d: 18:8c:9f:e0:52:53:28:f7:5f:89:19:3b:f7:5f:9f:0c:76:6e: a1:17:90:3b:6e:9c:5a:8e:28:e6:ab:e1:82:78:2b:93:bc:c5: 1c:39:2b:a4:13:a5:7d:6a:b3:94:7b:6f:82:e4:43:1c:5e:5d: 52:fa:a3:cf:e3:ec:cf:70:ae:41:5d:80:a4:27:88:d7:66:a1: 05:e0:4c:e1:4e:3e:6e:e3:c8:80:92:13:f0:f2:a8:95:5b:1e: ee:66:ae:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+6NGeQ3zbyQI3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MmE0MWUzZWYtOTU2YS00MTJjLWJkNTAtMjVmNDJkMmQ3NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslClN2vCCiF/kGx2McL+bGSLCZb7WF5O/UtM gAPXJw+h2Hc755pjNxkC1qQt5qaH7ghDgV/Co4jnNQczdtig8Ue2WCm+YeLqTy2Z 6HZ7+loHMuk/ANz6IqtMRgQlYAXtckfudEJNrfJ5HqSukmVpWvINLPCHEhz6PKtT 6EhtAXPtRbEACYR8+7EhTIcAnJy45W9Fduy1Np5PuMsB9VTw7y+WrV6bNM65npkh mzcU8zDfCr5shxHC6+PUsafAAm6Q86gaNEZiokdZIL4t417JdCNb6h2voj4Kaam4 6z9S8wj7ZZLm9MqMUYHM3n7RvMX2eh6tSdPq8uSsQZ8yJOV37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3FY+vbyqiKKPDLwYoR5gkY/01HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjg5NGM1YWUtZjE3Yy0z NDJiLTkyMTYtNzFiYjEzYTkxMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhCnrxZ5MfQg9Fxzw0RA+LlCT+3wY2AWXOgxK3n9iSAbRv9LgvzvxC2 T4L4qdomz/jE0nU4xsThPvLNp29a4JXnu5G5TKpFcOzMiZgjqPoMoAILXSEQ8JyO sy9hvDHf0nNfFRaKUYWq1BHrZaudYz+hUhXWPPgnFbjVjo3yXenpKWpaeSTZiSf1 wytn7utS6/LXeK8Emsaev9r2VEtNNIkjfRiMn+BSUyj3X4kZO/dfnwx2bqEXkDtu nFqOKOar4YJ4K5O8xRw5K6QTpX1qs5R7b4LkQxxeXVL6o8/j7M9wrkFdgKQniNdm oQXgTOFOPm7jyICSE/DyqJVbHu5mrtM= -----END CERTIFICATE-----Generated at Sun Jul 20 17:28:55 2025 by rpki-client