$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15e94e1b-913e-311d-b52b-ecad96fb4f11.roa File: 15e94e1b-913e-311d-b52b-ecad96fb4f11.roa (raw, json) Hash identifier: kG6Pee0adEwTUcxq7vIoKBLqq5oSNSaKlo8TgpKYRRw= Subject key identifier: EB:4D:64:BD:6F:48:FB:B2:C9:4F:7D:14:3C:25:44:3A:84:01:66:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430C05D1CEDCDC1B711DD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15e94e1b-913e-311d-b52b-ecad96fb4f11.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.61.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:c0:5d:1c:ed:cd:c1:b7:11:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=3e9cef20-04da-4caf-a2a7-58a4cd4807b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6e:2b:48:8a:c2:be:25:62:8b:a8:8e:e6:1c: 8c:53:4f:e6:b4:86:9d:4c:3e:fc:15:dc:78:55:96: 70:1e:da:38:db:f1:27:94:99:15:8b:1d:57:57:d5: 9c:43:72:5f:68:0e:3d:a7:9b:54:28:56:7d:96:20: 31:f6:0a:41:e6:08:cc:fd:14:d6:7b:4d:d3:db:88: f2:ba:1f:54:d7:b4:bd:8b:fa:e8:27:cc:34:87:17: 21:74:a5:e3:1d:50:bb:b6:11:65:63:37:64:90:42: 67:15:2f:17:9b:f5:78:22:25:cc:a7:c7:68:57:51: 3b:36:f9:d2:a9:1b:26:70:01:ba:1b:ef:a2:77:49: 60:3b:31:6b:40:a3:80:64:4d:d5:4d:de:07:19:91: 7a:6a:51:bb:ac:d8:c3:20:ed:da:85:30:61:75:35: e2:df:eb:02:f9:32:b8:a7:07:45:82:0d:5c:2c:5b: f5:95:1f:44:ba:44:a8:54:c4:55:9d:6a:4e:71:42: 80:f8:f8:d6:62:52:5c:8a:78:f5:72:d3:ed:ab:eb: 45:8a:18:ab:3d:46:f2:75:84:f7:de:a4:58:30:e2: b8:4f:81:1e:f3:52:57:f8:ec:a7:ae:c3:48:bc:06: cf:24:0a:c1:63:6a:f6:66:20:23:0c:61:d1:56:5e: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4D:64:BD:6F:48:FB:B2:C9:4F:7D:14:3C:25:44:3A:84:01:66:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15e94e1b-913e-311d-b52b-ecad96fb4f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:11:09:9e:40:83:92:58:ff:40:15:da:fa:d1:47:e9:a0:f5: a5:cc:c1:92:76:65:3f:2d:a6:69:77:9b:a2:41:6b:ed:d3:a2: 94:ea:f2:d3:04:a9:76:ef:b2:dd:13:6b:e6:34:db:80:47:e7: 11:1c:ca:de:aa:d5:b2:52:bc:c7:ad:d7:1c:ea:3d:d2:d0:2d: 34:98:91:83:03:e1:f9:2e:91:90:3c:a1:3c:94:85:ce:67:39: f8:94:55:4c:8e:9c:4c:70:17:dc:53:65:79:a7:38:4c:2c:5d: 51:67:08:47:65:b7:b4:43:84:a9:8c:70:f8:8d:24:60:e7:2b: aa:78:92:67:cf:f1:0f:0f:ff:41:e1:cb:d1:f0:b0:58:97:a3: 0f:b1:47:7b:fe:28:06:c0:3b:52:0b:d7:13:0b:45:c9:bc:e1: a3:03:71:91:89:44:5d:a9:11:51:93:ac:fa:dc:b9:eb:c1:27: b2:5f:2a:5d:df:9f:dc:fd:fb:32:30:99:13:e8:3f:16:3c:0b: 25:5b:e3:84:52:14:63:aa:e8:3f:18:0c:86:07:76:87:c8:d4: 27:72:47:b8:1c:3c:29:43:cc:ef:50:7e:db:80:0f:6d:c5:13: a4:25:0c:e2:b0:d0:bb:12:9f:20:b1:9e:af:da:a6:9e:fa:76: 62:c8:37:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMMBdHO3NwbcR3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk M2U5Y2VmMjAtMDRkYS00Y2FmLWEyYTctNThhNGNkNDgwN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8G4rSIrCviVii6iO5hyMU0/mtIadTD78Fdx4 VZZwHto42/EnlJkVix1XV9WcQ3JfaA49p5tUKFZ9liAx9gpB5gjM/RTWe03T24jy uh9U17S9i/roJ8w0hxchdKXjHVC7thFlYzdkkEJnFS8Xm/V4IiXMp8doV1E7NvnS qRsmcAG6G++id0lgOzFrQKOAZE3VTd4HGZF6alG7rNjDIO3ahTBhdTXi3+sC+TK4 pwdFgg1cLFv1lR9EukSoVMRVnWpOcUKA+PjWYlJcinj1ctPtq+tFihirPUbydYT3 3qRYMOK4T4Ee81JX+OynrsNIvAbPJArBY2r2ZiAjDGHRVl7ZOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtNZL1vSPuyyU99FDwlRDqEAWbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTVlOTRlMWItOTEzZS0z MTFkLWI1MmItZWNhZDk2ZmI0ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQRCZ5Ag5JY/0AV2vrRR+mg9aXMwZJ2ZT8tpml3m6JBa+3TopTq8tME qXbvst0Ta+Y024BH5xEcyt6q1bJSvMet1xzqPdLQLTSYkYMD4fkukZA8oTyUhc5n OfiUVUyOnExwF9xTZXmnOEwsXVFnCEdlt7RDhKmMcPiNJGDnK6p4kmfP8Q8P/0Hh y9HwsFiXow+xR3v+KAbAO1IL1xMLRcm84aMDcZGJRF2pEVGTrPrcuevBJ7JfKl3f n9z9+zIwmRPoPxY8CyVb44RSFGOq6D8YDIYHdofI1CdyR7gcPClDzO9QftuAD23F E6QlDOKw0LsSnyCxnq/app76dmLIN6g= -----END CERTIFICATE-----Generated at Tue Jun 3 04:53:13 2025 by rpki-client