$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eae212c-6742-372a-a805-8a6e7f2eee6a.roa File: 0eae212c-6742-372a-a805-8a6e7f2eee6a.roa (raw, json) Hash identifier: vaT+KMMLIhYwh9BPBSlgUQn/XH7SnB/TayIOZA/84rs= Subject key identifier: B3:A6:68:3B:39:54:9A:67:11:AC:3F:78:51:E3:C2:1F:CD:C1:FF:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431EDE6ADA79CF3E70A23F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eae212c-6742-372a-a805-8a6e7f2eee6a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.34.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:ed:e6:ad:a7:9c:f3:e7:0a:23:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=73064e8d-33bb-4145-80a8-1ca6b29a2722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:c1:b4:51:c1:fd:60:8e:e0:12:a0:45:ed: 84:8b:d1:35:ed:6a:b4:fb:36:19:f1:20:80:83:52: 27:e0:ba:31:34:4d:62:47:df:87:a2:fe:7c:fa:2c: d2:70:71:1e:6f:15:19:3a:f3:fa:0a:f9:53:2d:1f: da:69:c4:54:be:28:d0:3f:59:d4:1c:b9:1f:92:8e: 2d:8f:fe:ab:85:ae:c3:d6:08:51:8a:a6:b2:b7:14: 76:60:e3:ca:96:27:88:02:42:80:c5:fb:e9:85:47: a7:70:ca:e0:b7:f4:dc:77:6a:e5:70:27:95:88:17: c4:4a:7d:e0:b7:b7:a5:98:49:7f:27:03:0c:c3:7e: 5f:85:11:f9:13:11:be:52:bd:9a:60:21:ab:bb:dd: 59:8d:6d:84:23:c7:3e:07:79:03:70:5d:e7:5e:f3: e7:da:fc:77:cc:7e:56:7c:4c:d9:99:e0:19:cf:6e: 80:b1:a3:d7:ea:6f:84:c8:f8:87:fb:0c:4c:86:53: 0b:bd:18:83:7a:1a:91:6e:ea:72:f7:f9:4b:17:d9: 9d:1d:2e:bb:31:ae:4d:6f:d3:a7:8a:64:6e:c2:b4: f2:c0:47:31:62:14:69:de:4d:95:0a:39:01:e3:06: ba:d7:20:29:08:e5:4b:f9:1c:13:e5:67:25:40:1c: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:68:3B:39:54:9A:67:11:AC:3F:78:51:E3:C2:1F:CD:C1:FF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eae212c-6742-372a-a805-8a6e7f2eee6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:56:3d:52:21:e2:a2:9e:0f:9d:fe:48:9c:03:22:85:70:55: 0f:c6:3c:90:c5:3e:62:6f:19:de:5b:7d:81:e5:ae:5a:75:08: ef:f4:cb:2c:51:88:6b:72:58:a5:8d:ee:96:06:d7:77:c1:15: 57:89:be:b6:cd:cc:7d:bf:04:4a:32:b5:67:10:b3:08:c3:c6: 3e:77:1d:e8:d6:90:be:fb:e7:67:c6:04:79:28:fc:5e:71:cb: 1e:50:43:f7:2d:de:e8:37:02:52:74:f0:c7:37:a8:10:f0:c1: a5:26:03:18:a9:4b:c7:90:64:eb:78:d3:02:44:25:c6:ee:f0: a0:4e:c9:16:da:bd:4e:95:9b:de:24:c5:c1:11:d8:89:dd:37: 5c:04:b4:f6:a8:6a:a0:41:a4:77:de:70:34:28:06:d7:17:46: 99:a5:04:25:96:0c:43:5f:ff:d3:5b:41:de:7b:9a:8d:41:b3: 77:02:e1:cc:e2:06:9a:a3:eb:1d:b3:17:cb:0d:ba:27:c7:fe: db:e8:cd:f2:dd:89:90:96:11:89:fc:a3:a7:70:41:60:3c:64: ba:76:49:68:75:41:71:df:c4:1e:8d:ea:06:7b:09:77:84:b8: fd:60:9b:01:88:b9:8c:b9:b3:cf:69:dd:bd:9e:e8:79:70:51: ef:42:70:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMe3mraec8+cKI/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzMwNjRlOGQtMzNiYi00MTQ1LTgwYTgtMWNhNmIyOWEyNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPrBtFHB/WCO4BKgRe2Ei9E17Wq0+zYZ8SCA g1In4LoxNE1iR9+Hov58+izScHEebxUZOvP6CvlTLR/aacRUvijQP1nUHLkfko4t j/6rha7D1ghRiqaytxR2YOPKlieIAkKAxfvphUencMrgt/Tcd2rlcCeViBfESn3g t7elmEl/JwMMw35fhRH5ExG+Ur2aYCGru91ZjW2EI8c+B3kDcF3nXvPn2vx3zH5W fEzZmeAZz26AsaPX6m+EyPiH+wxMhlMLvRiDehqRbupy9/lLF9mdHS67Ma5Nb9On imRuwrTywEcxYhRp3k2VCjkB4wa61yApCOVL+RwT5WclQBzopQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOmaDs5VJpnEaw/eFHjwh/Nwf9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGVhZTIxMmMtNjc0Mi0z NzJhLWE4MDUtOGE2ZTdmMmVlZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5WPVIh4qKeD53+SJwDIoVwVQ/GPJDFPmJvGd5bfYHlrlp1CO/0yyxR iGtyWKWN7pYG13fBFVeJvrbNzH2/BEoytWcQswjDxj53HejWkL7752fGBHko/F5x yx5QQ/ct3ug3AlJ08Mc3qBDwwaUmAxipS8eQZOt40wJEJcbu8KBOyRbavU6Vm94k xcER2IndN1wEtPaoaqBBpHfecDQoBtcXRpmlBCWWDENf/9NbQd57mo1Bs3cC4czi Bpqj6x2zF8sNuifH/tvozfLdiZCWEYn8o6dwQWA8ZLp2SWh1QXHfxB6N6gZ7CXeE uP1gmwGIuYy5s89p3b2e6HlwUe9CcCA= -----END CERTIFICATE-----Generated at Wed Jun 4 23:36:30 2025 by rpki-client