$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1ca871c-be97-3b26-a845-b75529c17fa5.roa File: d1ca871c-be97-3b26-a845-b75529c17fa5.roa (raw, json) Hash identifier: 0h8XXZkfpCBRSl/bxJcTwRvkYP7zx1O3wtrG2CaWlUU= Subject key identifier: 60:04:E0:C6:D8:B6:3B:24:06:67:A2:75:48:6F:E5:D3:01:F5:A4:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD88B8EFC0A523761AA2A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1ca871c-be97-3b26-a845-b75529c17fa5.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 68.86.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:88:b8:ef:c0:a5:23:76:1a:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=0ecb0e93-f312-47d1-aa23-ed00447fad99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:21:e7:67:05:e5:c9:58:57:34:1d:7c:42:53: b6:ff:a0:50:6a:af:a2:0f:5b:eb:cf:60:75:82:74: 19:17:e0:52:96:81:a1:5d:3a:df:8e:ec:ea:57:a8: 07:2c:1a:96:20:a6:2c:a6:9f:19:fc:15:41:35:a4: 50:11:fc:6c:de:bd:1a:5a:61:5d:c7:e9:42:e5:17: dc:4c:01:30:88:0b:62:f8:14:2e:90:b8:80:37:f9: 3b:d5:42:93:19:20:37:30:a7:aa:f5:76:d5:b6:38: 52:22:74:36:e8:4c:7d:db:df:dd:59:5c:c9:7e:07: 59:6b:e8:f9:cd:12:97:b8:be:17:60:15:7b:3f:fa: 67:9f:fb:a3:3c:94:40:a9:2f:50:85:4d:9f:bd:7a: b3:bd:bd:ae:5a:0e:7e:1e:37:31:10:d6:de:50:f0: 9a:e1:92:b2:1f:c9:89:25:df:fc:51:43:7a:c3:f5: 83:f5:37:f8:cb:ac:45:e8:aa:41:1b:83:35:a5:13: b0:3b:e7:14:db:62:59:1e:f3:54:3d:05:73:e7:c6: e4:99:f7:f7:34:fd:d4:eb:ef:e9:ce:a4:7a:b7:54: af:82:29:88:3f:3d:cc:4c:83:a1:73:80:23:c5:24: 56:bc:85:7c:32:94:6f:9d:d4:ca:ab:0a:ac:b3:8b: 64:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:04:E0:C6:D8:B6:3B:24:06:67:A2:75:48:6F:E5:D3:01:F5:A4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1ca871c-be97-3b26-a845-b75529c17fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:38:4e:dd:6a:8c:e9:b4:36:a3:cc:52:b6:bf:e0:5d:15:e7: 8d:f1:65:7d:3f:5c:2c:c3:41:eb:7b:f8:a0:48:f2:20:9a:57: f6:9c:4e:3d:77:e7:6a:a3:ed:c5:8b:dc:e0:a2:96:19:fa:98: ea:3d:9a:12:54:c6:b4:48:1b:61:f6:43:35:55:b0:98:28:25: 15:35:7a:90:eb:9e:b8:80:bd:7f:dc:f5:f1:1c:50:14:e7:00: 21:7c:eb:ef:a7:57:14:ef:2a:c1:52:71:c2:ba:39:88:a7:29: 01:a0:fe:a5:b3:6e:d9:da:18:c3:ed:b4:8b:6a:6b:e8:4a:46: fb:19:9f:43:84:69:6d:f6:4b:dd:99:c4:84:24:f5:22:75:f7: be:99:b1:45:13:93:86:32:0b:b4:91:43:38:18:dd:ff:7a:e3: bf:24:de:cb:a8:e7:4d:e8:c7:45:e6:39:42:0b:6d:1f:f8:c7: 1f:10:b9:f2:65:08:ed:6f:55:de:3b:66:77:bd:2d:44:49:d8: 2b:6c:a0:18:2a:69:92:60:c7:5e:7b:a1:1e:60:fe:2f:31:23: 0c:ef:b4:de:2e:72:1d:ea:d5:43:e7:c2:14:b5:9a:c9:0b:c3: d7:11:fd:d4:07:34:f3:92:2a:c4:7d:9c:7d:1a:45:a2:21:00: c1:26:66:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/Yi478ClI3YaoqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MGVjYjBlOTMtZjMxMi00N2QxLWFhMjMtZWQwMDQ0N2ZhZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SHnZwXlyVhXNB18QlO2/6BQaq+iD1vrz2B1 gnQZF+BSloGhXTrfjuzqV6gHLBqWIKYspp8Z/BVBNaRQEfxs3r0aWmFdx+lC5Rfc TAEwiAti+BQukLiAN/k71UKTGSA3MKeq9XbVtjhSInQ26Ex929/dWVzJfgdZa+j5 zRKXuL4XYBV7P/pnn/ujPJRAqS9QhU2fvXqzvb2uWg5+HjcxENbeUPCa4ZKyH8mJ Jd/8UUN6w/WD9Tf4y6xF6KpBG4M1pROwO+cU22JZHvNUPQVz58bkmff3NP3U6+/p zqR6t1SvgimIPz3MTIOhc4AjxSRWvIV8MpRvndTKqwqss4tknwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAE4MbYtjskBmeidUhv5dMB9aT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFjYTg3MWMtYmU5Ny0z YjI2LWE4NDUtYjc1NTI5YzE3ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALk4Tt1qjOm0NqPMUra/4F0V543xZX0/XCzDQet7+KBI8iCaV/acTj13 52qj7cWL3OCilhn6mOo9mhJUxrRIG2H2QzVVsJgoJRU1epDrnriAvX/c9fEcUBTn ACF86++nVxTvKsFSccK6OYinKQGg/qWzbtnaGMPttItqa+hKRvsZn0OEaW32S92Z xIQk9SJ1976ZsUUTk4YyC7SRQzgY3f96478k3suo503ox0XmOUILbR/4xx8QufJl CO1vVd47Zne9LURJ2CtsoBgqaZJgx157oR5g/i8xIwzvtN4uch3q1UPnwhS1mskL w9cR/dQHNPOSKsR9nH0aRaIhAMEmZhA= -----END CERTIFICATE-----Generated at Sun Jul 20 17:12:23 2025 by rpki-client