$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa File: c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa (raw, json) Hash identifier: lTw5HCOKIOpccDcxSqeFtTztVKh5+xvp4gZ+hOwimMg= Subject key identifier: E5:1A:8E:21:5D:3D:B0:7E:C5:B8:7C:EC:74:9C:45:91:EF:B6:40:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB471A645837C7CED0C9D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.63.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:47:1a:64:58:37:c7:ce:d0:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=4aec005e-cc5b-4611-97b0-f7de6f6e9774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:48:07:df:04:3f:cb:d6:13:10:52:d2:af: 19:ee:53:6f:9a:70:88:a2:b0:08:36:2b:25:df:ca: 3e:17:76:9c:67:01:ff:d8:3c:7e:b3:90:d5:76:27: 8e:e4:bd:56:37:f1:ff:0e:57:f0:a5:ad:46:8a:a8: 45:22:60:ed:e7:fa:e0:7a:9a:87:99:1d:52:6c:6c: ca:f9:0e:f8:2a:ea:11:a1:38:76:2b:12:08:22:d1: a2:c9:24:a8:db:c3:6c:60:bf:38:5d:7d:35:20:66: a3:56:c0:05:47:40:19:85:59:14:96:1b:00:81:5f: 58:64:bf:d0:f4:15:0a:8c:02:6f:b8:8e:30:ae:be: 47:24:fa:d9:95:6a:57:ce:4e:93:26:e7:88:46:ba: 18:f5:82:37:c8:1b:2d:64:83:91:71:bb:37:1f:ec: 46:d0:22:ad:01:45:91:b5:f0:fa:99:bf:1b:36:3c: f3:25:fb:19:dc:12:51:55:aa:ee:74:bb:82:ac:d8: a8:53:62:56:22:4e:63:e3:f6:01:04:2d:28:21:c4: 79:1f:42:db:97:0f:17:cc:9f:94:57:e9:51:dc:47: e4:d3:23:8a:e5:7a:94:5b:ab:5a:70:fc:4b:48:29: ad:f9:ba:0a:ec:ab:cb:24:c1:51:f1:40:e8:8b:f5: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1A:8E:21:5D:3D:B0:7E:C5:B8:7C:EC:74:9C:45:91:EF:B6:40:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.63.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e3:4b:0d:3a:47:06:74:53:c1:6c:78:43:a7:9f:88:5a:73: 03:e6:6f:ae:ff:74:89:1b:a8:89:2d:c8:c5:84:d3:cc:89:d6: 87:18:8d:60:e7:40:9d:fe:c4:f2:f4:f5:4f:8a:14:5f:93:09: 5a:fe:c9:f9:29:a1:cc:0c:27:fc:e6:ff:53:35:f6:d7:88:2c: d3:f5:90:3b:63:d5:9a:6e:5e:ea:c7:32:b1:52:65:09:72:51: d2:b2:48:f2:86:78:e4:73:04:fa:95:f3:5e:99:6e:2e:dc:b0: c3:af:20:7e:d6:cb:11:0c:91:b5:f4:cb:0d:8f:4b:ae:91:8d: 8f:49:36:6c:d4:76:53:6b:74:8c:e1:d7:40:5c:7b:41:b3:12: 08:34:92:7e:4c:f9:74:23:e6:cf:6a:40:0d:47:02:0e:0a:a9: 2e:97:02:ab:f9:64:d0:ef:23:76:83:61:5a:8b:e3:a4:03:07: db:6e:06:7c:a2:e3:4f:dc:ca:be:42:e2:cc:c3:01:7a:8f:9f: 18:bf:07:35:b1:ef:b0:87:04:b5:c4:1c:8a:72:86:58:de:ad: 25:08:a2:45:53:25:77:af:42:2e:a1:b6:cb:49:85:5f:95:22: e4:a9:6b:bc:a3:4f:1e:ed:df:74:bc:f4:e4:bc:d1:80:54:a2: 54:c1:fc:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+0caZFg3x87QydAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NGFlYzAwNWUtY2M1Yi00NjExLTk3YjAtZjdkZTZmNmU5Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuhIB98EP8vWExBS0q8Z7lNvmnCIorAINisl 38o+F3acZwH/2Dx+s5DVdieO5L1WN/H/Dlfwpa1GiqhFImDt5/rgepqHmR1SbGzK +Q74KuoRoTh2KxIIItGiySSo28NsYL84XX01IGajVsAFR0AZhVkUlhsAgV9YZL/Q 9BUKjAJvuI4wrr5HJPrZlWpXzk6TJueIRroY9YI3yBstZIORcbs3H+xG0CKtAUWR tfD6mb8bNjzzJfsZ3BJRVarudLuCrNioU2JWIk5j4/YBBC0oIcR5H0Lblw8XzJ+U V+lR3Efk0yOK5XqUW6tacPxLSCmt+boK7KvLJMFR8UDoi/W5ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUajiFdPbB+xbh87HScRZHvtkBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzlhZDM0NDctMThjNy0z OGVmLWFjOWMtZTQ0ZDMyODU4NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDjSw06RwZ0U8FseEOnn4hacwPmb67/dIkbqIktyMWE08yJ1ocYjWDn QJ3+xPL09U+KFF+TCVr+yfkpocwMJ/zm/1M19teILNP1kDtj1ZpuXurHMrFSZQly UdKySPKGeORzBPqV816Zbi7csMOvIH7WyxEMkbX0yw2PS66RjY9JNmzUdlNrdIzh 10Bce0GzEgg0kn5M+XQj5s9qQA1HAg4KqS6XAqv5ZNDvI3aDYVqL46QDB9tuBnyi 40/cyr5C4szDAXqPnxi/BzWx77CHBLXEHIpyhljerSUIokVTJXevQi6htstJhV+V IuSpa7yjTx7t33S89OS80YBUolTB/Bk= -----END CERTIFICATE-----Generated at Sun Jul 20 17:11:28 2025 by rpki-client