$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3659bae8-2e25-341c-aa14-eb4333f43e25.roa File: 3659bae8-2e25-341c-aa14-eb4333f43e25.roa (raw, json) Hash identifier: 3/A8sZHJdjVyICkhTZXnzkaTcfqX5vrMb0gH+3E2erA= Subject key identifier: EF:44:AE:6A:4A:2A:7B:F8:3D:7C:F0:01:CA:9C:F5:03:EA:42:F0:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4308E49893857F19568A300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3659bae8-2e25-341c-aa14-eb4333f43e25.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.36.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:8e:49:89:38:57:f1:95:68:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d8fd2449-a321-469a-9c02-13228f3f7f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:fc:87:c9:c5:0a:dc:1a:0d:d2:bd:18:54: ea:31:2f:4a:11:bd:cf:06:d0:2a:61:eb:5c:a8:b9: 04:8c:12:cc:09:20:15:92:96:1d:57:72:37:dc:75: f3:fc:f3:5a:ce:46:83:d8:47:c2:fe:17:00:33:3a: 36:73:4e:7f:63:5a:27:b7:2c:94:c9:de:3c:54:56: 4e:3e:7f:c0:17:d3:f9:bc:65:24:56:b5:97:1c:a3: e0:87:51:b3:42:2a:3f:6d:8b:2c:ca:33:6b:e9:06: 28:ed:b3:be:e4:0a:be:72:17:de:c2:50:e8:5e:a0: cb:04:84:5e:09:d7:53:4b:30:93:cf:24:4f:a9:e1: cf:da:66:df:69:8d:31:d1:ab:59:ad:00:8b:68:26: ee:70:69:27:7b:02:aa:29:d3:1c:87:22:ad:1e:bf: df:68:4a:46:1a:4e:32:9f:73:bc:3d:87:47:9d:b1: 6b:a0:94:ef:b8:52:25:91:1c:bf:f6:70:ad:01:e1: 93:8b:9f:7b:1b:1c:49:55:71:b3:f9:46:19:9f:63: b9:a3:2e:4d:ea:24:e3:11:f4:9f:5f:f3:84:0d:1c: b2:e3:51:81:cb:a4:e5:82:83:dd:2a:a4:bd:5e:b7: d6:4e:d8:1f:c0:87:17:35:64:ff:43:af:0f:fa:13: 12:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:AE:6A:4A:2A:7B:F8:3D:7C:F0:01:CA:9C:F5:03:EA:42:F0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3659bae8-2e25-341c-aa14-eb4333f43e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b2:54:c8:bd:e7:e8:ce:86:18:6f:b7:3e:99:8d:72:52:25: a7:f9:a6:61:2d:ae:6d:11:cd:cc:e8:6c:b1:44:f2:15:42:c7: c0:e0:a2:65:43:e1:76:10:72:32:3e:bb:b7:5d:69:db:95:35: e8:90:c5:cc:69:84:ce:c1:e3:5f:0c:40:ad:c9:72:a1:1a:07: 53:5a:3e:82:98:03:8f:f3:61:16:2a:3f:73:be:a2:5e:66:98: d5:3d:00:17:d1:85:92:ed:45:2d:d2:67:53:5c:9d:50:64:7b: 66:8b:6f:22:09:dd:34:5f:3a:ab:36:42:8e:69:87:42:df:30: 1e:64:76:20:ab:dc:c2:30:90:d6:0b:9d:98:49:a6:d9:c7:20: 15:61:14:41:ef:ca:cf:62:19:91:ae:1f:25:45:45:9a:4d:3e: 26:ff:cc:8d:78:e6:24:97:8f:75:b4:b1:b3:9a:77:02:64:e4: 05:16:65:3f:a8:b1:61:fc:fa:58:bf:c2:88:50:24:54:8f:dd: 9b:f0:80:2a:d0:00:d3:c4:04:34:a1:d1:53:bd:c0:73:b4:c4: 0d:82:23:94:64:ed:64:fb:c7:5f:5d:60:6c:42:ff:ed:3b:36: 13:88:f3:21:4d:4a:ba:73:be:9b:f3:57:36:29:5a:5c:bf:98: 93:da:b1:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMI5JiThX8ZVoowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDhmZDI0NDktYTMyMS00NjlhLTljMDItMTMyMjhmM2Y3ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5X8h8nFCtwaDdK9GFTqMS9KEb3PBtAqYetc qLkEjBLMCSAVkpYdV3I33HXz/PNazkaD2EfC/hcAMzo2c05/Y1ontyyUyd48VFZO Pn/AF9P5vGUkVrWXHKPgh1GzQio/bYssyjNr6QYo7bO+5Aq+chfewlDoXqDLBIRe CddTSzCTzyRPqeHP2mbfaY0x0atZrQCLaCbucGknewKqKdMchyKtHr/faEpGGk4y n3O8PYdHnbFroJTvuFIlkRy/9nCtAeGTi597GxxJVXGz+UYZn2O5oy5N6iTjEfSf X/OEDRyy41GBy6TlgoPdKqS9XrfWTtgfwIcXNWT/Q68P+hMSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9ErmpKKnv4PXzwAcqc9QPqQvBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY1OWJhZTgtMmUyNS0z NDFjLWFhMTQtZWI0MzMzZjQzZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCyVMi95+jOhhhvtz6ZjXJSJaf5pmEtrm0RzczobLFE8hVCx8DgomVD 4XYQcjI+u7ddaduVNeiQxcxphM7B418MQK3JcqEaB1NaPoKYA4/zYRYqP3O+ol5m mNU9ABfRhZLtRS3SZ1NcnVBke2aLbyIJ3TRfOqs2Qo5ph0LfMB5kdiCr3MIwkNYL nZhJptnHIBVhFEHvys9iGZGuHyVFRZpNPib/zI145iSXj3W0sbOadwJk5AUWZT+o sWH8+li/wohQJFSP3ZvwgCrQANPEBDSh0VO9wHO0xA2CI5Rk7WT7x19dYGxC/+07 NhOI8yFNSrpzvpvzVzYpWly/mJPascM= -----END CERTIFICATE-----Generated at Tue Jun 3 06:08:26 2025 by rpki-client