$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa File: 3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa (raw, json) Hash identifier: fJQfJdsmPs/LvCYqikfv5ILPWgzxCX3wIFhdoeSLY0o= Subject key identifier: A3:09:E6:CC:C7:9F:E3:46:17:CC:F5:F1:66:54:2B:35:53:AB:D8:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F6EEC437017C53400E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.41.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f6:ee:c4:37:01:7c:53:40:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=b2dc0524-1493-4242-acd3-1ed460de87d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:37:fd:e7:2c:04:5a:ca:a0:13:ff:91:ff: 9a:c6:62:a9:da:ef:8b:82:80:66:5e:af:01:21:f2: 93:a0:6c:a1:82:34:79:d6:57:d6:ce:4c:ec:cb:74: 4c:7f:7c:7c:7b:66:bb:3f:cf:80:ac:6c:1c:20:97: 47:2b:40:6e:88:7d:0c:a8:b7:e1:b6:77:ac:75:d4: a6:43:4a:94:88:f2:b3:45:b4:24:13:fe:db:9f:69: f0:12:d8:27:ce:c5:28:bd:07:32:f7:33:22:30:dd: 05:de:be:10:67:86:78:4f:88:f2:cd:37:dd:2a:89: 4e:88:51:21:13:d2:18:41:7d:ba:5c:5d:8e:4f:59: 3d:84:01:de:5f:55:f2:86:9a:c3:5e:55:5e:bb:ab: e8:2a:7a:8b:b9:a2:cb:db:bd:76:60:4f:c6:93:a5: 67:cb:eb:e1:e7:e8:2b:1f:a5:20:ae:03:f8:63:44: 7f:35:1d:82:8f:4a:3f:aa:68:68:24:cf:21:8e:bd: b1:1c:3f:95:bb:e6:6e:80:65:6c:76:79:24:65:73: 84:b7:0e:5e:3f:e9:ac:50:24:cb:05:02:87:4f:a9: 1a:62:ce:ca:d0:c1:27:1e:52:ee:15:cf:a5:0e:74: df:41:92:4a:ff:22:8c:50:0b:77:5f:79:23:ca:b1: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:09:E6:CC:C7:9F:E3:46:17:CC:F5:F1:66:54:2B:35:53:AB:D8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:09:ca:cc:bd:9e:eb:a6:48:78:06:63:dd:58:b0:b1:ca:5a: 34:57:b7:44:f9:0c:e0:07:58:bc:a7:7f:b2:f8:c8:98:3c:a6: a6:d1:9f:80:79:21:c7:8d:1d:72:3b:ff:7d:a2:86:ba:5a:f6: d8:bb:74:92:75:00:d4:4a:05:e0:ee:73:0f:1d:11:5b:84:1d: 2b:8a:f3:df:95:60:35:33:32:2a:f0:6d:25:7e:04:b5:ca:06: 3d:06:6c:97:eb:b6:a3:72:2b:fa:36:69:72:2b:99:a7:11:a0: cd:86:e4:82:00:f3:80:67:d4:97:99:ec:f4:40:f1:59:c2:b1: 0e:4c:12:12:e7:a1:90:b4:62:26:13:49:52:e7:27:e8:0c:5e: f6:8a:79:5a:5d:cb:06:85:8b:8f:33:88:0e:96:19:33:9b:13: 8a:36:f1:a4:ad:d9:d4:2f:67:58:a6:f0:4e:59:82:63:e7:b4: 8e:c6:63:74:99:de:88:33:fb:0b:d1:9b:a0:31:26:81:ff:d6: 8e:49:1d:24:3b:00:1b:c6:ce:84:f7:f5:5f:4c:05:ce:d4:c1: 20:78:2d:d2:45:87:f4:dd:9b:bd:a4:38:f0:68:d6:b7:a7:27: 47:d8:fa:83:f2:51:dd:eb:8d:28:47:5c:4b:2d:a5:7f:09:d7: f2:9e:8f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfbuxDcBfFNADoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjJkYzA1MjQtMTQ5My00MjQyLWFjZDMtMWVkNDYwZGU4N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhU3/ecsBFrKoBP/kf+axmKp2u+LgoBmXq8B IfKToGyhgjR51lfWzkzsy3RMf3x8e2a7P8+ArGwcIJdHK0BuiH0MqLfhtnesddSm Q0qUiPKzRbQkE/7bn2nwEtgnzsUovQcy9zMiMN0F3r4QZ4Z4T4jyzTfdKolOiFEh E9IYQX26XF2OT1k9hAHeX1XyhprDXlVeu6voKnqLuaLL2712YE/Gk6Vny+vh5+gr H6UgrgP4Y0R/NR2Cj0o/qmhoJM8hjr2xHD+Vu+ZugGVsdnkkZXOEtw5eP+msUCTL BQKHT6kaYs7K0MEnHlLuFc+lDnTfQZJK/yKMUAt3X3kjyrHLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMJ5szHn+NGF8z18WZUKzVTq9jwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y3YmI3OTAtOTJhNy0z ZThjLWE1MWMtZjgxMzdkMThmMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwJysy9nuumSHgGY91YsLHKWjRXt0T5DOAHWLynf7L4yJg8pqbRn4B5 IceNHXI7/32ihrpa9ti7dJJ1ANRKBeDucw8dEVuEHSuK89+VYDUzMirwbSV+BLXK Bj0GbJfrtqNyK/o2aXIrmacRoM2G5IIA84Bn1JeZ7PRA8VnCsQ5MEhLnoZC0YiYT SVLnJ+gMXvaKeVpdywaFi48ziA6WGTObE4o28aSt2dQvZ1im8E5ZgmPntI7GY3SZ 3ogz+wvRm6AxJoH/1o5JHSQ7ABvGzoT39V9MBc7UwSB4LdJFh/Tdm72kOPBo1ren J0fY+oPyUd3rjShHXEstpX8J1/Kej+Y= -----END CERTIFICATE-----Generated at Tue Jun 3 04:49:04 2025 by rpki-client