$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ac9110-3df7-3c60-a34d-358809fa095a.roa File: e2ac9110-3df7-3c60-a34d-358809fa095a.roa (raw, json) Hash identifier: ZOt6pQvtpX+K+MkN0EqN4WJ1WiR1rM+ZmmAGQyyHgug= Subject key identifier: F7:B7:F0:84:D0:72:B0:C7:7A:F0:66:42:B7:D8:E6:97:7C:05:29:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC9B6721A16C5898B95900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ac9110-3df7-3c60-a34d-358809fa095a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.52.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:9b:67:21:a1:6c:58:98:b9:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=42a25592-1c27-4fa9-9f9c-b0b9532ca915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:23:e1:7b:44:3c:d2:d1:83:e8:cb:af:ae: 59:71:3c:6e:4b:af:0d:3c:c8:32:04:2f:96:38:5d: 78:ab:29:a8:7c:1c:6e:22:e3:60:78:72:0e:9a:b0: b3:da:7e:1a:75:ee:80:64:a0:90:46:e9:c9:f6:81: 19:af:bc:2d:90:d6:23:39:d0:42:4d:56:f0:94:ee: 45:30:43:ea:66:fc:cf:c6:7b:b3:82:3f:57:bc:68: 73:80:ae:4d:f4:39:0d:16:ee:5f:1e:5e:14:02:7b: 1b:3c:ca:9a:9b:ac:03:99:c1:16:09:a3:2c:85:56: e5:05:62:67:02:a8:aa:e2:fc:4a:9e:17:44:99:41: c6:bb:eb:22:22:59:79:f0:90:7a:b1:c3:6c:37:c8: b3:ba:9e:83:a0:b3:2d:fa:bf:15:e2:9e:cb:9d:a3: 7a:6c:b7:33:bc:be:33:a4:de:b5:30:59:63:e2:b2: f4:77:23:1e:94:b1:9f:fe:1e:6d:3c:39:2b:45:b4: da:0e:b3:60:cf:d1:29:eb:e7:8b:eb:10:20:e0:62: 49:a2:94:cf:90:db:8d:a8:ea:26:44:28:f5:61:19: 5c:5c:4e:f2:d2:8b:d2:29:4b:69:b7:f4:04:2c:72: b6:2b:de:16:2c:4d:4d:03:5d:7f:dd:74:97:a3:77: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:F0:84:D0:72:B0:C7:7A:F0:66:42:B7:D8:E6:97:7C:05:29:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ac9110-3df7-3c60-a34d-358809fa095a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:7e:a0:93:e9:a4:14:13:d7:a7:ad:71:7c:0c:02:fb:22:9b: 9c:9e:4d:fe:73:2f:42:1d:84:43:98:fb:69:26:80:a6:17:ec: 79:ec:c1:bd:a2:09:d2:65:d3:ce:a7:ad:4d:eb:71:1d:70:e5: f1:10:ee:b4:48:8d:80:64:94:27:a8:24:34:83:b8:2d:ac:ec: 56:48:4e:9f:e5:4d:44:87:74:eb:42:74:47:66:d2:b2:43:97: ad:22:22:e2:7b:61:b0:81:a1:5c:74:a3:3c:25:91:e5:3d:fe: c9:23:34:48:15:cf:a3:38:25:d6:af:f7:ec:f8:5b:60:1b:54: d6:af:6a:84:c3:ba:99:97:89:86:b7:c1:5b:16:d2:1d:70:d5: 54:09:a5:59:4f:40:c9:4b:ed:0d:10:a2:c3:f0:2e:13:f9:52: 6e:9c:9b:77:05:81:46:5f:8a:33:88:77:d5:0c:74:21:c1:f1: 10:76:f6:05:f5:3c:fa:74:ac:7f:d0:ca:97:ad:66:74:88:a9: a5:21:27:07:f9:8e:b3:cc:5e:0c:c7:3f:18:fa:8c:5b:65:e2: 46:34:99:da:f9:79:4a:ec:97:04:a2:f0:9f:b5:11:47:4e:ea: 14:08:1e:08:fe:f3:e0:7f:69:9c:be:f0:36:d6:f8:c0:06:a6: ce:27:e9:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/JtnIaFsWJi5WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDJhMjU1OTItMWMyNy00ZmE5LTlmOWMtYjBiOTUzMmNhOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysUj4XtEPNLRg+jLr65ZcTxuS68NPMgyBC+W OF14qymofBxuIuNgeHIOmrCz2n4ade6AZKCQRunJ9oEZr7wtkNYjOdBCTVbwlO5F MEPqZvzPxnuzgj9XvGhzgK5N9DkNFu5fHl4UAnsbPMqam6wDmcEWCaMshVblBWJn Aqiq4vxKnhdEmUHGu+siIll58JB6scNsN8izup6DoLMt+r8V4p7LnaN6bLczvL4z pN61MFlj4rL0dyMelLGf/h5tPDkrRbTaDrNgz9Ep6+eL6xAg4GJJopTPkNuNqOom RCj1YRlcXE7y0ovSKUtpt/QELHK2K94WLE1NA11/3XSXo3d9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe38ITQcrDHevBmQrfY5pd8BSklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTJhYzkxMTAtM2RmNy0z YzYwLWEzNGQtMzU4ODA5ZmEwOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMd+oJPppBQT16etcXwMAvsim5yeTf5zL0IdhEOY+2kmgKYX7Hnswb2i CdJl086nrU3rcR1w5fEQ7rRIjYBklCeoJDSDuC2s7FZITp/lTUSHdOtCdEdm0rJD l60iIuJ7YbCBoVx0ozwlkeU9/skjNEgVz6M4Jdav9+z4W2AbVNavaoTDupmXiYa3 wVsW0h1w1VQJpVlPQMlL7Q0QosPwLhP5Um6cm3cFgUZfijOId9UMdCHB8RB29gX1 PPp0rH/QypetZnSIqaUhJwf5jrPMXgzHPxj6jFtl4kY0mdr5eUrslwSi8J+1EUdO 6hQIHgj+8+B/aZy+8DbW+MAGps4n6bI= -----END CERTIFICATE-----Generated at Sun Jul 20 17:14:23 2025 by rpki-client