$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71551a3a-05cc-3dce-b130-17478f1a507c.roa File: 71551a3a-05cc-3dce-b130-17478f1a507c.roa (raw, json) Hash identifier: n6Z3vw821T8Vx+HLSiQUA3Wx8TXPxXE56Kk7fSunEe8= Subject key identifier: 3E:2F:C8:4B:ED:85:3D:18:98:AB:EE:7E:74:DC:B2:A2:1A:01:93:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC999465537D905D6D1B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71551a3a-05cc-3dce-b130-17478f1a507c.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.52.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:99:94:65:53:7d:90:5d:6d:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=2c9ceff3-c8d4-4c6c-94fd-9cb4c42676b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:b2:e9:33:49:08:20:a5:1e:59:5d:0e:6a: 08:0f:e0:ad:99:6d:8e:9a:17:e4:0f:62:f7:4c:49: 2d:ce:8f:e5:e8:11:a0:c7:01:fb:17:3f:d3:3f:3c: 96:5e:c0:13:93:a4:02:b6:71:4f:a7:f3:24:a6:44: b5:75:74:c8:3c:91:67:ae:3d:ca:8a:c6:d5:41:bf: ed:61:b3:49:5b:7f:86:ee:96:64:24:bd:18:4c:38: fe:c5:64:e4:44:a8:0c:64:f1:85:af:06:fd:3e:77: b2:7d:24:ad:6e:c1:8a:cc:21:44:ec:ac:f7:a4:df: e6:42:07:8f:64:6f:1e:6f:58:3d:f1:41:23:18:3d: a1:ba:6a:e7:25:93:6d:20:e4:66:67:03:b2:47:19: d9:a2:f4:de:cb:cd:c9:65:93:93:b3:17:cb:e6:5d: 3d:0b:45:1a:5b:c0:39:ae:12:83:9d:13:12:65:d7: 2c:30:74:40:03:29:83:76:54:cf:48:37:df:e5:94: 16:25:94:aa:a5:6c:01:96:84:62:d4:36:f5:dd:1d: 17:24:bb:84:ea:0d:62:bb:3b:bd:ea:b6:30:71:52: 08:96:f4:4d:ac:e9:4a:11:b1:2f:45:d1:76:f9:39: 90:18:93:5c:5a:92:23:89:61:03:0c:19:22:be:20: 80:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2F:C8:4B:ED:85:3D:18:98:AB:EE:7E:74:DC:B2:A2:1A:01:93:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71551a3a-05cc-3dce-b130-17478f1a507c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:bb:f4:a3:73:9f:6e:d0:f6:5a:6d:37:8b:02:2f:87:6c:81: 1a:25:28:ad:af:e8:7f:cc:4a:e0:d2:95:62:45:ae:27:c5:ea: c7:8a:5d:a6:2c:9d:43:8d:36:3f:2e:2e:01:17:44:24:ea:cc: 55:b9:46:47:a4:cd:5b:4b:01:16:d2:61:82:f2:06:a6:fd:0c: ca:ef:3c:9f:7d:6a:40:2b:37:06:91:d9:d0:0f:7c:32:42:38: fd:b6:95:e1:38:05:c8:d3:f4:3e:ea:d5:40:2b:29:81:5a:31: 79:57:72:14:de:ef:3d:79:84:d3:7a:8d:5a:39:07:af:ff:0e: 9f:82:7c:40:d7:2b:24:ee:d4:22:46:f6:0f:ac:d4:f8:5e:d0: d6:d4:91:ad:ce:8d:36:2d:f4:e9:7d:5a:f4:86:1e:b1:ba:a9: 36:c6:0d:16:fa:5f:04:40:8c:c0:ce:7b:61:cd:23:e0:be:57: 77:20:6c:b6:91:86:15:5f:5f:07:35:fb:3b:14:81:5f:f1:8f: 64:5d:fd:9b:f8:cf:b5:74:9f:d9:bc:24:0a:f0:f8:b0:aa:4e: c1:37:c0:41:a4:07:54:c3:30:39:0f:14:6d:3b:7b:fa:dc:0b: 54:d6:59:8f:14:2b:ef:86:1b:24:a1:d5:93:91:f7:25:99:a0: 99:7e:ca:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/JmUZVN9kF1tG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MmM5Y2VmZjMtYzhkNC00YzZjLTk0ZmQtOWNiNGM0MjY3NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdiy6TNJCCClHlldDmoID+CtmW2OmhfkD2L3 TEktzo/l6BGgxwH7Fz/TPzyWXsATk6QCtnFPp/MkpkS1dXTIPJFnrj3KisbVQb/t YbNJW3+G7pZkJL0YTDj+xWTkRKgMZPGFrwb9PneyfSStbsGKzCFE7Kz3pN/mQgeP ZG8eb1g98UEjGD2humrnJZNtIORmZwOyRxnZovTey83JZZOTsxfL5l09C0UaW8A5 rhKDnRMSZdcsMHRAAymDdlTPSDff5ZQWJZSqpWwBloRi1Db13R0XJLuE6g1iuzu9 6rYwcVIIlvRNrOlKEbEvRdF2+TmQGJNcWpIjiWEDDBkiviCAxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4vyEvthT0YmKvufnTcsqIaAZNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzE1NTFhM2EtMDVjYy0z ZGNlLWIxMzAtMTc0NzhmMWE1MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANa79KNzn27Q9lptN4sCL4dsgRolKK2v6H/MSuDSlWJFrifF6seKXaYs nUONNj8uLgEXRCTqzFW5RkekzVtLARbSYYLyBqb9DMrvPJ99akArNwaR2dAPfDJC OP22leE4BcjT9D7q1UArKYFaMXlXchTe7z15hNN6jVo5B6//Dp+CfEDXKyTu1CJG 9g+s1Phe0NbUka3OjTYt9Ol9WvSGHrG6qTbGDRb6XwRAjMDOe2HNI+C+V3cgbLaR hhVfXwc1+zsUgV/xj2Rd/Zv4z7V0n9m8JArw+LCqTsE3wEGkB1TDMDkPFG07e/rc C1TWWY8UK++GGySh1ZOR9yWZoJl+ys0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:42:56 2025 by rpki-client