$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd5a3e7-363e-34a0-a38c-89e6e80b72f5.roa File: 0fd5a3e7-363e-34a0-a38c-89e6e80b72f5.roa (raw, json) Hash identifier: zu4FVIVn2kiG1n6zWQmDzqURfD8w2thBupMpZbi0dq8= Subject key identifier: 00:AA:8E:A0:17:19:74:9D:DF:20:6F:CA:66:84:A5:F5:B2:88:E3:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F6CAF4E0B1F5E9F181BC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd5a3e7-363e-34a0-a38c-89e6e80b72f5.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.41.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f6:ca:f4:e0:b1:f5:e9:f1:81:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=79adfbd5-e8af-40b0-b5ce-09fcb8c4fa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:36:76:b3:9a:9f:90:bb:e4:28:ce:be:65: 4a:2b:c3:93:2f:da:aa:98:27:20:f8:70:d6:00:83: 39:49:b8:d9:f2:7b:73:bd:de:1b:94:bd:9f:21:06: 1b:a7:6e:b8:9e:20:d9:f2:72:a2:6b:90:ac:51:52: 65:80:3d:12:e6:9f:2d:45:2c:60:00:3c:4d:33:e8: 9d:95:a5:4f:dc:33:53:3e:59:f4:24:af:f4:d0:fc: 9e:ba:db:b5:bd:ae:3b:9e:85:be:eb:29:0a:20:da: 06:24:f0:16:60:9a:be:c4:b8:12:95:29:42:ad:20: 22:56:ec:33:44:aa:ab:3e:80:ee:df:a5:9a:d0:a0: 57:ac:39:a8:90:f0:15:13:50:1f:51:af:fd:09:db: 1f:36:63:af:2c:5c:87:61:f8:7b:e6:a0:1e:68:0f: a8:10:4a:b3:91:a9:13:e5:a5:16:cf:cc:71:f9:ad: 64:0c:a1:b6:92:5b:1c:58:d4:41:19:5e:39:11:20: d6:8b:8a:44:75:d1:21:c2:39:f4:0a:0b:f6:1d:be: 4a:e6:12:9a:b0:36:55:d0:d2:47:4d:4c:8d:73:58: 60:a3:19:19:95:cb:a6:78:a0:bf:b2:a6:8f:24:3e: 1c:ea:29:be:42:a7:c2:ea:ef:76:21:60:ca:c8:df: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AA:8E:A0:17:19:74:9D:DF:20:6F:CA:66:84:A5:F5:B2:88:E3:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fd5a3e7-363e-34a0-a38c-89e6e80b72f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b7:40:37:11:d9:fd:ee:3c:84:fa:36:a6:c2:4c:21:93:0c: 52:09:22:b6:8f:ab:7f:f7:7e:16:4a:9a:50:a0:14:39:85:cc: d7:f4:e4:6f:15:23:8d:64:8e:8e:89:af:2e:4b:26:2c:88:12: 47:b5:76:2e:fc:d1:d9:28:84:5a:bc:6e:21:1d:43:3b:9a:2f: dd:d0:9f:d1:c3:f2:61:cf:84:69:3d:1c:79:1f:f5:b7:5a:c1: 22:99:3d:fe:99:45:7a:99:1f:80:a5:a4:06:93:f9:55:65:fa: db:09:5c:14:34:00:9b:b0:af:39:a8:83:26:52:f8:75:f9:41: 06:1a:1b:30:b4:5e:7e:ae:5c:5a:cf:c9:39:21:5d:60:44:b1: 37:f3:7d:f9:40:27:00:fc:31:5c:ad:d1:19:d3:37:c5:11:cc: 34:9c:6e:ab:27:11:76:e4:73:71:ef:c6:7e:b8:4e:dc:c6:1f: 8d:c6:d7:43:9b:69:b6:70:a1:b6:53:29:0b:ea:d6:b9:73:33: 04:2f:68:34:32:42:f9:1e:42:f4:8d:67:71:fc:b0:b4:c8:65: 8e:f2:69:41:c8:43:24:a7:1b:8d:06:0d:8e:36:e8:52:a5:e6: fc:f4:de:8e:c1:be:80:37:75:36:bc:59:11:5d:1b:96:d7:5d: 94:b9:4c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfbK9OCx9enxgbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzlhZGZiZDUtZThhZi00MGIwLWI1Y2UtMDlmY2I4YzRmYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+I2drOan5C75CjOvmVKK8OTL9qqmCcg+HDW AIM5SbjZ8ntzvd4blL2fIQYbp264niDZ8nKia5CsUVJlgD0S5p8tRSxgADxNM+id laVP3DNTPln0JK/00Pyeutu1va47noW+6ykKINoGJPAWYJq+xLgSlSlCrSAiVuwz RKqrPoDu36Wa0KBXrDmokPAVE1AfUa/9CdsfNmOvLFyHYfh75qAeaA+oEEqzkakT 5aUWz8xx+a1kDKG2klscWNRBGV45ESDWi4pEddEhwjn0Cgv2Hb5K5hKasDZV0NJH TUyNc1hgoxkZlcumeKC/sqaPJD4c6im+QqfC6u92IWDKyN9lPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACqjqAXGXSd3yBvymaEpfWyiOMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZkNWEzZTctMzYzZS0z NGEwLWEzOGMtODllNmU4MGI3MmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS3QDcR2f3uPIT6NqbCTCGTDFIJIraPq3/3fhZKmlCgFDmFzNf05G8V I41kjo6Jry5LJiyIEke1di780dkohFq8biEdQzuaL93Qn9HD8mHPhGk9HHkf9bda wSKZPf6ZRXqZH4ClpAaT+VVl+tsJXBQ0AJuwrzmogyZS+HX5QQYaGzC0Xn6uXFrP yTkhXWBEsTfzfflAJwD8MVyt0RnTN8URzDScbqsnEXbkc3Hvxn64TtzGH43G10Ob abZwobZTKQvq1rlzMwQvaDQyQvkeQvSNZ3H8sLTIZY7yaUHIQySnG40GDY426FKl 5vz03o7BvoA3dTa8WRFdG5bXXZS5TA8= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:58 2025 by rpki-client