$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/231435d4-7d84-34c0-b10a-a62a97121b57.roa File: 231435d4-7d84-34c0-b10a-a62a97121b57.roa (raw, json) Hash identifier: FrrHMSJS5rWpv41bojuqRab9Fwvoiefhh24U9gK6mYs= Subject key identifier: 79:22:99:C6:4C:41:B4:22:90:48:44:F1:3A:DB:EF:37:33:52:99:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431EFC2A872957639EAF540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/231435d4-7d84-34c0-b10a-a62a97121b57.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.36.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:ef:c2:a8:72:95:76:39:ea:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=250de2d2-a277-42a6-a2aa-60025e606b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:e4:ad:08:27:f6:ff:af:25:25:06:c9:48: 36:a3:f1:40:7c:4e:17:c0:7c:36:91:b3:7f:91:dc: 24:38:7f:67:e1:0d:16:60:eb:96:dc:21:24:e7:00: 15:c3:2c:d2:2f:89:06:ec:3e:39:d9:6f:ea:33:7e: 2a:59:6d:eb:27:e2:6e:5a:43:14:63:c7:04:54:43: 06:bf:77:60:7c:10:9b:0c:3a:93:a9:b4:b2:fa:f1: e8:49:df:01:19:0f:f9:62:d0:a8:af:52:c4:86:56: df:d3:c4:28:2d:3e:e6:9b:97:9f:0f:7b:c8:f8:89: f0:97:a5:cf:4d:f5:94:dd:59:0e:4a:d4:0b:3b:57: 88:e7:61:a7:cf:d6:3a:64:c7:4c:94:a0:89:f2:a0: ea:cd:d1:ad:f6:5d:05:3c:6b:ab:65:e3:65:f2:f5: e8:a9:66:13:27:7a:c8:c1:d9:e5:e7:c5:d3:9a:6e: f3:91:dd:34:94:6c:52:14:33:30:15:6c:24:b8:0c: 0c:9b:48:70:07:3c:c2:3f:11:95:7c:d0:eb:f4:f5: 66:17:fb:ff:66:86:6f:dd:3e:66:79:83:a7:f9:40: 98:1e:ba:18:70:e0:bf:6c:37:92:b0:8c:66:9e:16: 5c:e4:fc:f5:e2:fc:1e:aa:a6:aa:c5:ac:d1:b5:6b: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:99:C6:4C:41:B4:22:90:48:44:F1:3A:DB:EF:37:33:52:99:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/231435d4-7d84-34c0-b10a-a62a97121b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a1:66:ff:b2:3e:18:fc:d8:0b:5b:60:02:cf:34:dd:6c:68: fd:54:f6:f1:aa:60:19:58:7d:06:80:62:3b:77:74:57:4e:04: fc:0b:cb:08:c0:8e:39:34:70:46:26:65:e5:ca:a2:aa:b2:91: 97:b7:5f:03:d1:27:37:9f:89:67:2a:c6:3a:78:5b:11:22:1e: 4c:85:b4:98:11:73:a7:e3:ba:d6:0d:ae:d4:8f:55:29:b1:b1: 00:fa:b6:ad:02:1e:05:84:e6:5d:1c:e7:60:f8:ff:42:62:57: 1d:50:f2:5f:ba:ab:3a:05:24:32:3e:99:b1:21:ab:be:54:14: 3c:ae:9d:22:57:ef:49:b4:31:a5:61:6a:85:fb:ac:e3:cf:03: c1:94:57:2b:f1:9a:9e:c0:30:c1:91:91:3b:26:b1:2c:45:e9: f2:e7:c4:7f:60:57:5c:f2:24:88:01:72:05:af:18:b8:cc:c2: cc:2c:0e:c1:d3:d8:87:3f:36:b7:0f:ec:8e:b0:c9:f9:64:70: 43:2c:3a:91:22:49:ab:4e:f1:24:07:76:18:37:91:5a:05:94: fc:d3:ee:d8:a8:d0:a4:de:48:7f:70:16:7a:62:d6:0e:ae:42: 17:83:9a:4a:c7:05:f2:50:fe:41:90:2a:52:f1:5c:19:f2:30: 9e:f6:92:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMe/CqHKVdjnq9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjUwZGUyZDItYTI3Ny00MmE2LWEyYWEtNjAwMjVlNjA2YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XLkrQgn9v+vJSUGyUg2o/FAfE4XwHw2kbN/ kdwkOH9n4Q0WYOuW3CEk5wAVwyzSL4kG7D452W/qM34qWW3rJ+JuWkMUY8cEVEMG v3dgfBCbDDqTqbSy+vHoSd8BGQ/5YtCor1LEhlbf08QoLT7mm5efD3vI+Inwl6XP TfWU3VkOStQLO1eI52Gnz9Y6ZMdMlKCJ8qDqzdGt9l0FPGurZeNl8vXoqWYTJ3rI wdnl58XTmm7zkd00lGxSFDMwFWwkuAwMm0hwBzzCPxGVfNDr9PVmF/v/ZoZv3T5m eYOn+UCYHroYcOC/bDeSsIxmnhZc5Pz14vweqqaqxazRtWvAnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkimcZMQbQikEhE8Trb7zczUpl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjMxNDM1ZDQtN2Q4NC0z NGMwLWIxMGEtYTYyYTk3MTIxYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKShZv+yPhj82AtbYALPNN1saP1U9vGqYBlYfQaAYjt3dFdOBPwLywjA jjk0cEYmZeXKoqqykZe3XwPRJzefiWcqxjp4WxEiHkyFtJgRc6fjutYNrtSPVSmx sQD6tq0CHgWE5l0c52D4/0JiVx1Q8l+6qzoFJDI+mbEhq75UFDyunSJX70m0MaVh aoX7rOPPA8GUVyvxmp7AMMGRkTsmsSxF6fLnxH9gV1zyJIgBcgWvGLjMwswsDsHT 2Ic/NrcP7I6wyflkcEMsOpEiSatO8SQHdhg3kVoFlPzT7tio0KTeSH9wFnpi1g6u QheDmkrHBfJQ/kGQKlLxXBnyMJ72kio= -----END CERTIFICATE-----Generated at Wed Jun 4 23:20:49 2025 by rpki-client