$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa File: 3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa (raw, json) Hash identifier: V+Wt+Ifa8a7qNiiEItSQx5ISzbpQ8iuduL92HLm+yYA= Subject key identifier: 61:29:7A:89:39:5A:B3:F1:8D:94:9B:20:3D:83:B9:01:09:24:B1:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43207EC95AF458EA0815C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.62.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:07:ec:95:af:45:8e:a0:81:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=3b8f3520-0af9-411e-a9c5-e632194b8ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:e0:89:09:84:8e:fa:a0:17:31:72:b4:d4: 88:db:97:d4:18:ac:6b:d0:dd:c2:c2:53:01:b0:57: a5:21:6c:07:c3:a4:52:94:56:29:d3:4e:6c:fb:6d: 49:bc:10:4a:6a:a8:06:93:86:96:c8:dd:b0:c4:d3: ee:e4:01:a2:e5:6b:52:34:08:68:86:8f:5f:77:c9: 0d:90:b4:13:1b:cb:2c:1b:6f:b7:91:df:fd:c3:29: 93:17:f0:36:fd:5d:65:0b:72:01:55:b3:1f:16:b4: 2b:d3:cb:2b:b5:5d:73:53:0b:35:fd:9a:ea:11:d1: d7:7d:12:d3:b3:bf:23:75:3c:43:24:0f:99:04:00: 85:34:54:ce:1e:c0:f2:74:20:2b:8e:56:45:fe:17: da:a8:c2:f5:41:5d:d3:7d:15:fb:45:02:9a:b1:cd: b2:f2:ad:32:10:65:d3:2c:a1:4d:e1:d9:ce:82:c7: d3:94:0a:6d:41:44:b0:a7:a2:76:f9:7f:7a:c8:09: 37:12:33:57:7d:1c:a7:be:67:8e:5c:bb:fc:94:ee: 27:ae:55:ec:3a:d8:c4:53:7a:a3:91:5a:8f:de:8a: 59:b8:1d:f3:79:35:39:d2:19:10:6d:28:af:ed:ce: 82:53:a2:ec:34:00:98:18:fc:c5:a9:e3:d1:62:8b: 9c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:29:7A:89:39:5A:B3:F1:8D:94:9B:20:3D:83:B9:01:09:24:B1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.62.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0d:0d:38:ce:46:6e:61:5a:e7:54:17:86:11:aa:2b:a4:79: 2e:4a:86:82:39:6f:76:6a:ab:d6:fe:5b:e5:78:cf:f4:80:9a: 17:97:ec:32:d2:f7:c6:9e:4e:26:6a:09:81:66:08:13:ce:b9: c7:c2:89:cc:44:77:9b:ee:b0:d2:89:b4:75:3c:b2:a9:44:f8: ee:80:ae:d2:2a:6d:42:20:e8:04:90:84:55:49:93:45:d0:2b: 65:e9:8c:30:fb:93:9c:0d:78:9d:fa:4b:bc:82:09:10:f7:92: 09:c8:9d:16:d5:88:ea:f4:46:bf:63:8f:ff:7d:c4:c3:5a:c4: a2:df:94:a1:a7:fe:02:13:85:49:62:20:35:1d:39:2c:85:45: a0:6e:f3:97:d3:b8:a3:cc:81:12:ec:99:ea:ab:2d:52:57:98: 0e:90:fe:7c:ae:f7:ec:94:b7:62:f4:52:5f:45:ed:d9:89:1f: e1:3b:1d:7d:ea:67:17:fd:d2:be:14:78:1b:17:5c:22:9a:3f: 01:ef:21:6c:4f:e3:14:be:34:5e:e5:71:60:b3:9d:bb:cf:82: 48:fe:35:85:5e:0f:3c:17:ea:4a:68:a4:44:ee:1d:15:a8:ec: bb:e2:30:55:d3:42:8a:78:ee:52:76:bd:b0:89:5d:d0:29:ab: 1e:ed:88:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMgfsla9FjqCBXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk M2I4ZjM1MjAtMGFmOS00MTFlLWE5YzUtZTYzMjE5NGI4Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIjgiQmEjvqgFzFytNSI25fUGKxr0N3CwlMB sFelIWwHw6RSlFYp005s+21JvBBKaqgGk4aWyN2wxNPu5AGi5WtSNAhoho9fd8kN kLQTG8ssG2+3kd/9wymTF/A2/V1lC3IBVbMfFrQr08srtV1zUws1/ZrqEdHXfRLT s78jdTxDJA+ZBACFNFTOHsDydCArjlZF/hfaqML1QV3TfRX7RQKasc2y8q0yEGXT LKFN4dnOgsfTlAptQUSwp6J2+X96yAk3EjNXfRynvmeOXLv8lO4nrlXsOtjEU3qj kVqP3opZuB3zeTU50hkQbSiv7c6CU6LsNACYGPzFqePRYoucxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEpeok5WrPxjZSbID2DuQEJJLEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FhYWI1YzItYTZiOC0z ZThhLWFiMmMtNmE1NTFjZWM1MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4NDTjORm5hWudUF4YRqiukeS5KhoI5b3Zqq9b+W+V4z/SAmheX7DLS 98aeTiZqCYFmCBPOucfCicxEd5vusNKJtHU8sqlE+O6ArtIqbUIg6ASQhFVJk0XQ K2XpjDD7k5wNeJ36S7yCCRD3kgnInRbViOr0Rr9jj/99xMNaxKLflKGn/gIThUli IDUdOSyFRaBu85fTuKPMgRLsmeqrLVJXmA6Q/nyu9+yUt2L0Ul9F7dmJH+E7HX3q Zxf90r4UeBsXXCKaPwHvIWxP4xS+NF7lcWCznbvPgkj+NYVeDzwX6kpopETuHRWo 7LviMFXTQop47lJ2vbCJXdApqx7tiPA= -----END CERTIFICATE-----Generated at Tue Jun 3 04:58:56 2025 by rpki-client