$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16923928-4c6f-3913-9b7e-9fc451a9e286.roa File: 16923928-4c6f-3913-9b7e-9fc451a9e286.roa (raw, json) Hash identifier: Caw+GZBVRnT/nGKU/JkBoMO+CxYMFCvsnd9uDsdgeUU= Subject key identifier: 2C:0A:06:6D:02:1C:E3:7A:EA:1F:BC:7A:DE:A7:AE:5A:8E:D3:30:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4320275F9936E69CC73B200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16923928-4c6f-3913-9b7e-9fc451a9e286.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.56.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:02:75:f9:93:6e:69:cc:73:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=ce4ba156-177b-4d71-8078-aca572c2a3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:52:33:21:f4:02:f5:b1:18:0e:8d:ec:47:f9: 86:eb:97:11:d1:d8:0f:5c:bb:9d:fc:32:5a:51:3a: 54:f9:80:26:06:bd:0b:39:2b:38:8e:75:4f:05:d6: 4e:0c:82:ab:42:bc:d3:0c:dc:a5:cf:10:86:8c:0b: 73:82:59:44:e8:af:b6:0d:d8:8f:91:87:f2:7f:77: a4:45:04:9c:85:89:eb:10:51:e8:6d:50:75:b2:ed: 0f:61:d8:ca:d6:b9:d9:b9:a1:3f:6d:3d:59:4d:6c: ec:83:01:4c:f4:4a:1c:49:77:fd:ce:a7:4c:6c:80: 79:1d:f7:94:fc:64:55:60:cb:8a:a8:b9:8b:47:67: dd:06:bc:63:f0:55:f3:33:a7:8b:90:d9:cb:8a:a2: 8b:f1:55:3e:12:c5:59:89:09:14:9c:c6:8a:d5:9a: 60:ed:7b:62:c5:41:bd:0c:f2:f0:37:ae:58:ed:09: fd:0d:48:bc:65:ee:92:76:d5:b4:5b:aa:b5:c9:ce: 25:8c:54:06:0a:e6:61:b7:53:36:61:0a:8f:51:ba: fd:e9:11:5c:a1:17:e1:ad:14:26:55:46:fd:b7:69: 74:d9:7c:69:62:4f:fc:1e:a6:2f:3c:3b:7a:42:a2: c3:aa:48:77:8c:51:6b:41:b1:6c:aa:c3:12:2f:13: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:06:6D:02:1C:E3:7A:EA:1F:BC:7A:DE:A7:AE:5A:8E:D3:30:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16923928-4c6f-3913-9b7e-9fc451a9e286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d4:ba:b0:ba:26:55:ab:28:20:db:38:bb:14:ea:7f:07:ae: 22:31:6e:72:3b:90:94:d7:8f:56:86:b8:4e:a0:57:05:59:4d: 13:2d:ed:8c:e0:95:aa:0e:8e:3e:0f:cb:5a:6a:0e:50:94:cc: cf:de:2e:71:e6:6c:59:b1:9a:ee:55:ed:2a:03:5c:f7:2c:d0: f2:62:64:88:80:8b:1b:19:be:a4:97:d1:9e:87:68:28:de:65: 42:81:5e:b5:75:74:90:a0:ff:3f:6d:25:e4:f4:ae:86:a1:35: d9:e5:e7:7e:98:25:f3:d9:f6:d8:d9:69:1d:66:6c:ca:4d:6a: 07:5a:85:51:9d:82:27:a8:75:58:2a:81:49:c1:e3:02:5d:03: bd:04:2f:83:19:ae:ea:8a:de:ae:0c:d7:56:e0:ea:5e:13:4f: 31:82:9a:65:04:9b:2a:f2:6a:dc:11:df:12:e5:81:87:46:95: 47:18:2b:44:2a:03:d5:88:05:96:86:ed:7b:cd:36:84:0f:15: 93:57:23:c7:38:92:4f:36:9f:b7:1d:07:da:26:96:a3:d7:42: 88:2f:ab:59:99:9b:e0:6d:75:69:fb:3e:33:d2:a9:52:4d:e1: fc:ea:1e:45:5c:a6:9c:83:4b:36:a4:34:3c:74:6b:db:b4:6d: 3e:65:b9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMgJ1+ZNuacxzsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2U0YmExNTYtMTc3Yi00ZDcxLTgwNzgtYWNhNTcyYzJhM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVIzIfQC9bEYDo3sR/mG65cR0dgPXLud/DJa UTpU+YAmBr0LOSs4jnVPBdZODIKrQrzTDNylzxCGjAtzgllE6K+2DdiPkYfyf3ek RQSchYnrEFHobVB1su0PYdjK1rnZuaE/bT1ZTWzsgwFM9EocSXf9zqdMbIB5HfeU /GRVYMuKqLmLR2fdBrxj8FXzM6eLkNnLiqKL8VU+EsVZiQkUnMaK1Zpg7XtixUG9 DPLwN65Y7Qn9DUi8Ze6SdtW0W6q1yc4ljFQGCuZht1M2YQqPUbr96RFcoRfhrRQm VUb9t2l02XxpYk/8HqYvPDt6QqLDqkh3jFFrQbFsqsMSLxNvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwKBm0CHON66h+8et6nrlqO0zBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTY5MjM5MjgtNGM2Zi0z OTEzLTliN2UtOWZjNDUxYTllMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPUurC6JlWrKCDbOLsU6n8HriIxbnI7kJTXj1aGuE6gVwVZTRMt7Yzg laoOjj4Py1pqDlCUzM/eLnHmbFmxmu5V7SoDXPcs0PJiZIiAixsZvqSX0Z6HaCje ZUKBXrV1dJCg/z9tJeT0roahNdnl536YJfPZ9tjZaR1mbMpNagdahVGdgieodVgq gUnB4wJdA70EL4MZruqK3q4M11bg6l4TTzGCmmUEmyryatwR3xLlgYdGlUcYK0Qq A9WIBZaG7XvNNoQPFZNXI8c4kk82n7cdB9omlqPXQogvq1mZm+BtdWn7PjPSqVJN 4fzqHkVcppyDSzakNDx0a9u0bT5ludM= -----END CERTIFICATE-----Generated at Tue Jun 3 06:04:04 2025 by rpki-client