$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa File: de93d752-61fa-35d1-89fe-de1c540126f7.roa (raw, json) Hash identifier: P3JBBzZEYujSWRJpkWxG5CZKnWvcj+m9nIEWAJv4VS4= Subject key identifier: 09:40:07:A3:41:48:0E:4C:94:5F:04:EB:F0:2F:09:58:B8:42:03:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB46E5CEE636496D1438F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.60.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:46:e5:ce:e6:36:49:6d:14:38:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=c5388f97-232a-40e9-b6a2-e7ee50ca2497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:d5:28:6c:ec:0a:60:c1:d2:9d:24:dd:07: 2b:0b:31:f7:e8:1a:b5:0b:78:c0:9e:9e:1b:55:31: df:e5:fd:fa:d9:48:5c:19:2d:a5:1f:f7:0e:db:b0: ae:73:6e:9e:e3:b5:8a:7d:77:8e:85:58:62:e8:19: 9b:a7:f1:f7:23:44:96:cc:d3:5f:bf:30:24:a4:05: 91:07:48:98:db:46:db:5e:5d:bb:9d:34:84:80:18: 64:9b:9c:ee:64:58:91:dc:6c:fe:57:0c:1d:4f:41: 01:f0:2e:c7:74:5e:0f:c0:63:b6:7b:fe:02:47:41: 67:d6:46:00:c9:17:6d:bb:f7:69:21:7d:be:67:9b: 72:51:b9:20:b0:6d:56:09:ff:67:c5:26:b0:36:1b: f1:37:ca:41:24:8e:71:d8:ab:3a:91:2d:ea:5a:9e: 0f:19:50:19:b7:c0:ae:77:53:d5:d9:1b:bb:e8:be: 4f:95:c8:53:ab:15:06:9f:12:c4:d4:1a:7c:e9:67: 5f:d7:c6:2e:0f:d0:29:6e:55:4d:20:e1:ee:2b:b1: f4:d8:e8:d9:db:32:79:10:6b:88:e5:cd:2c:ef:e1: 7a:11:4d:41:a2:de:37:e2:cd:62:ce:f9:53:c5:f0: b7:1c:ef:c0:f6:bd:9b:e1:be:87:5b:7b:32:c1:1a: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:07:A3:41:48:0E:4C:94:5F:04:EB:F0:2F:09:58:B8:42:03:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8d:33:53:9b:df:79:f8:c9:4f:39:61:50:62:1a:ee:ad:3c: 8a:f2:32:5a:78:61:46:be:43:ef:65:85:2f:e6:84:fc:3b:10: 66:63:77:f9:16:ab:33:b1:95:f9:46:7a:fe:0f:83:06:9f:7a: e4:f4:f3:4b:6d:87:ec:b8:71:f9:82:a0:ab:36:32:69:23:b1: bf:ca:0a:3e:54:8d:c9:c5:9a:19:69:6f:45:56:5a:f9:b8:1a: eb:83:07:82:5c:df:a7:cd:41:2c:7b:93:6f:50:e0:58:a5:5e: 3b:98:97:f0:02:99:b8:22:b9:5f:d1:00:9e:48:ce:67:ff:92: b7:66:c8:b0:fd:8f:e2:0c:ed:d9:3d:89:d9:c8:da:f8:61:94: e4:99:60:81:8c:01:d3:2d:56:eb:66:35:5c:c2:0e:4b:70:d2: 79:ed:62:ac:ea:79:8a:36:27:96:79:14:3f:b4:fc:b2:eb:4e: 18:f9:b5:a4:20:b3:92:d6:70:b6:a7:0e:52:2f:59:f7:d6:8c: ca:0b:a5:f3:30:fe:cd:12:4c:09:87:f4:48:f9:84:18:b8:15: 29:f2:12:9b:d2:44:79:e8:ad:17:95:3d:26:79:4d:90:be:ab: a8:04:ae:16:f7:18:9e:e2:60:16:7b:30:42:ed:26:2c:e6:7b: f6:69:26:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+0blzuY2SW0UOPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YzUzODhmOTctMjMyYS00MGU5LWI2YTItZTdlZTUwY2EyNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC/VKGzsCmDB0p0k3QcrCzH36Bq1C3jAnp4b VTHf5f362UhcGS2lH/cO27Cuc26e47WKfXeOhVhi6Bmbp/H3I0SWzNNfvzAkpAWR B0iY20bbXl27nTSEgBhkm5zuZFiR3Gz+VwwdT0EB8C7HdF4PwGO2e/4CR0Fn1kYA yRdtu/dpIX2+Z5tyUbkgsG1WCf9nxSawNhvxN8pBJI5x2Ks6kS3qWp4PGVAZt8Cu d1PV2Ru76L5PlchTqxUGnxLE1Bp86Wdf18YuD9ApblVNIOHuK7H02OjZ2zJ5EGuI 5c0s7+F6EU1Bot434s1izvlTxfC3HO/A9r2b4b6HW3sywRpyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlAB6NBSA5MlF8E6/AvCVi4QgOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGU5M2Q3NTItNjFmYS0z NWQxLTg5ZmUtZGUxYzU0MDEyNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiNM1Ob33n4yU85YVBiGu6tPIryMlp4YUa+Q+9lhS/mhPw7EGZjd/kW qzOxlflGev4PgwafeuT080tth+y4cfmCoKs2Mmkjsb/KCj5UjcnFmhlpb0VWWvm4 GuuDB4Jc36fNQSx7k29Q4FilXjuYl/ACmbgiuV/RAJ5Izmf/krdmyLD9j+IM7dk9 idnI2vhhlOSZYIGMAdMtVutmNVzCDktw0nntYqzqeYo2J5Z5FD+0/LLrThj5taQg s5LWcLanDlIvWffWjMoLpfMw/s0STAmH9Ej5hBi4FSnyEpvSRHnorReVPSZ5TZC+ q6gErhb3GJ7iYBZ7MELtJizme/ZpJiU= -----END CERTIFICATE-----Generated at Sun Jul 20 17:32:07 2025 by rpki-client