$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b28d0ce-f4b8-326c-959d-0f97d00d8894.roa File: 1b28d0ce-f4b8-326c-959d-0f97d00d8894.roa (raw, json) Hash identifier: ZzSh5lR3U6avlw8BtdSDu69VOUSwb2MBTv8v7SmbqC8= Subject key identifier: F9:F2:16:3A:B7:C7:D0:50:B5:9D:21:2D:7A:1F:5A:AB:EA:2F:5A:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4309F24A40BE5DD7B0DF980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b28d0ce-f4b8-326c-959d-0f97d00d8894.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.42.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:9f:24:a4:0b:e5:dd:7b:0d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=569b25c1-74bc-47f2-b867-f3bade0b8da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:6d:2c:7d:9c:48:9a:bc:a8:d7:ec:74:f8: be:55:22:e8:22:41:dc:b8:5b:af:0d:8d:7e:78:e7: 0a:7b:72:8e:18:20:ae:13:eb:f6:6c:04:a5:57:ea: ca:35:37:c6:e0:c1:54:2b:a9:8a:b1:de:9c:1d:ab: 01:d7:31:5c:b6:22:54:33:a6:d0:d3:85:df:bd:31: 7c:85:20:14:18:92:08:63:96:ba:81:03:6d:9a:bf: c3:43:e8:97:7d:25:8c:cf:e7:94:d1:f6:d1:f9:9b: 6d:3e:9b:a1:fc:9e:f8:92:60:06:c9:c6:e2:41:60: 63:78:e5:e5:8e:bf:a2:93:6c:85:55:71:9a:1e:31: 24:75:a1:aa:b8:bb:e7:74:ee:37:6b:51:2b:e6:32: 29:a4:07:90:3c:18:d2:fd:7b:8c:38:9e:6f:77:b6: 97:8d:50:78:9a:04:cb:c3:4e:ae:f7:ce:8e:21:a8: d5:c9:1d:42:83:27:e3:b4:15:98:73:0a:dd:3a:b2: 18:45:9a:98:cd:b2:f9:1d:84:c8:61:ff:ee:7f:2c: 2b:37:09:a1:5b:55:53:cf:a6:07:81:fb:3f:2f:01: 87:72:02:0c:60:8f:0c:31:92:a2:70:fd:69:a6:9d: 21:4f:30:b1:bb:40:e6:52:2c:7b:e1:79:54:b2:95: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F2:16:3A:B7:C7:D0:50:B5:9D:21:2D:7A:1F:5A:AB:EA:2F:5A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b28d0ce-f4b8-326c-959d-0f97d00d8894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:aa:a7:94:d3:97:c3:35:dd:e6:71:4a:73:6f:13:11:b1:75: 27:b2:ec:2f:92:96:49:ab:e8:2c:42:e7:27:e1:b9:03:29:f4: 63:b2:fa:8e:0f:fc:fb:b7:4f:57:cb:17:f0:c4:bb:28:2f:69: 4e:54:b4:64:b1:f5:d6:60:7a:4c:70:42:ce:bd:88:3c:09:a6: 82:ae:27:46:0e:3b:e8:e7:97:a9:79:ec:4b:ba:6e:f6:00:28: 70:18:e0:e3:7f:76:f7:9a:e9:c6:af:94:71:94:f1:e3:70:a2: 18:84:e8:25:67:38:72:3e:8f:3c:75:d8:54:e5:6b:e1:68:5c: 5f:da:9b:95:04:f7:88:4f:45:b1:54:3a:e3:d3:b8:00:65:a4: 3a:21:0b:3f:f2:66:62:58:70:3c:27:01:78:1a:8c:b4:3d:27: 6e:3f:09:43:1b:f6:c1:f1:24:b3:0a:da:98:7b:49:db:f5:e0: 64:38:33:9f:1e:58:3e:c1:58:96:8e:a2:97:80:2a:c7:4c:4c: 39:73:bf:a5:93:66:7a:f4:38:4e:d3:f2:fb:9c:91:63:94:05: 09:b0:8a:e7:79:03:00:4c:09:fa:8f:00:f9:88:57:5f:a5:a8: 27:38:23:ae:96:1f:6d:15:10:f7:0c:d4:25:de:45:07:5d:ba: f0:e5:68:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMJ8kpAvl3XsN+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTY5YjI1YzEtNzRiYy00N2YyLWI4NjctZjNiYWRlMGI4ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeRtLH2cSJq8qNfsdPi+VSLoIkHcuFuvDY1+ eOcKe3KOGCCuE+v2bASlV+rKNTfG4MFUK6mKsd6cHasB1zFctiJUM6bQ04XfvTF8 hSAUGJIIY5a6gQNtmr/DQ+iXfSWMz+eU0fbR+ZttPpuh/J74kmAGycbiQWBjeOXl jr+ik2yFVXGaHjEkdaGquLvndO43a1Er5jIppAeQPBjS/XuMOJ5vd7aXjVB4mgTL w06u986OIajVyR1CgyfjtBWYcwrdOrIYRZqYzbL5HYTIYf/ufywrNwmhW1VTz6YH gfs/LwGHcgIMYI8MMZKicP1ppp0hTzCxu0DmUix74XlUspVzgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnyFjq3x9BQtZ0hLXofWqvqL1qhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWIyOGQwY2UtZjRiOC0z MjZjLTk1OWQtMGY5N2QwMGQ4ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaqp5TTl8M13eZxSnNvExGxdSey7C+Slkmr6CxC5yfhuQMp9GOy+o4P /Pu3T1fLF/DEuygvaU5UtGSx9dZgekxwQs69iDwJpoKuJ0YOO+jnl6l57Eu6bvYA KHAY4ON/dvea6cavlHGU8eNwohiE6CVnOHI+jzx12FTla+FoXF/am5UE94hPRbFU OuPTuABlpDohCz/yZmJYcDwnAXgajLQ9J24/CUMb9sHxJLMK2ph7Sdv14GQ4M58e WD7BWJaOopeAKsdMTDlzv6WTZnr0OE7T8vuckWOUBQmwiud5AwBMCfqPAPmIV1+l qCc4I66WH20VEPcM1CXeRQdduvDlaCo= -----END CERTIFICATE-----Generated at Tue Jun 3 04:52:35 2025 by rpki-client