$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2d32f4-a007-378c-8b2b-503bf56fcef3.roa File: 4a2d32f4-a007-378c-8b2b-503bf56fcef3.roa (raw, json) Hash identifier: rPcQo9aVDb08XOUy8vCE6GuoB9ZMWTmMwa7wJnqwdDg= Subject key identifier: 0E:AF:7B:B0:71:C9:7F:64:61:4F:7B:BA:34:0B:3B:56:58:31:6E:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4320653D3F244E553E86580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2d32f4-a007-378c-8b2b-503bf56fcef3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.61.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:06:53:d3:f2:44:e5:53:e8:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=0158ed85-373c-4dde-88c5-b18c9c18b612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b5:ad:d5:96:90:3a:20:22:95:42:fd:b9:3e: a2:86:69:e8:78:33:81:72:42:ed:9f:77:6b:d8:29: 4e:02:9c:f9:c8:85:9b:32:51:cf:b0:03:b3:43:ce: 1b:c3:8e:d5:88:74:41:16:52:3d:18:a7:b6:6a:1f: c3:df:00:00:de:fb:88:71:a8:4b:9a:51:2f:0e:1d: 91:a2:22:48:c1:e1:4e:c7:ac:13:46:23:c0:30:97: 01:c3:24:6f:5b:0f:12:de:9d:3f:13:cf:63:56:2c: 6e:dd:29:61:18:6c:aa:01:5d:4e:b5:69:76:e7:6c: 25:57:c3:88:d3:be:52:4b:89:9a:5b:4e:30:c7:ad: b5:f9:e8:25:05:99:ae:35:ce:b6:6f:90:06:18:e0: da:58:d4:32:df:8a:5a:c2:1b:ec:97:5a:d6:df:ee: 45:f3:09:6f:ad:4d:6c:5e:a7:3d:42:ab:6e:f1:a3: 3b:01:be:2d:a6:ad:f4:5c:e8:5f:8e:1e:b8:ec:23: ff:fc:53:d5:0f:83:13:0f:ad:1d:f9:89:9c:bf:18: 90:32:bd:be:f4:ff:52:f3:94:1d:f8:5c:fd:49:55: 3e:16:8d:13:a4:65:e1:ee:5a:52:c3:50:05:43:5f: cc:06:cf:a8:37:5c:21:1e:78:9c:16:a4:f7:c7:cb: 2d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:7B:B0:71:C9:7F:64:61:4F:7B:BA:34:0B:3B:56:58:31:6E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2d32f4-a007-378c-8b2b-503bf56fcef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:48:a0:b8:94:6d:2c:a8:b4:07:d5:22:4d:c9:c9:65:8d:be: e2:33:76:84:c4:d8:8c:24:04:09:7f:17:ee:09:5e:83:95:75: 29:29:bd:e2:a8:68:9b:44:b1:8c:87:d8:ac:e2:b5:04:3c:b0: 19:50:e5:a8:a2:a1:d1:97:5c:54:2c:63:18:88:8c:bc:14:44: 4c:11:5a:a0:20:ca:60:c0:d2:c2:17:55:67:d3:61:a7:4b:35: 05:7c:f1:ba:25:9f:8f:38:f4:18:52:36:b3:9b:78:5c:b8:e6: db:5c:4c:54:9d:51:52:85:4a:9b:2a:ce:bf:c2:3f:b4:47:bb: 69:1f:99:ee:89:39:e1:96:f4:24:d9:04:88:4a:62:6d:b7:0a: 57:ad:19:49:dc:a8:64:1c:79:70:e6:45:fb:58:cf:6c:8b:13: 1a:49:6b:9a:0c:26:36:df:60:4f:3e:bb:17:9b:64:b8:a0:9e: 3c:68:05:a2:67:d6:dc:a1:58:62:c2:ad:7b:a2:11:38:74:4d: df:0c:12:5f:50:c2:c2:bc:36:47:44:bc:f9:ac:51:47:59:b3: 8a:49:32:fc:2b:31:28:bb:d4:7f:09:8c:4c:dc:cc:79:ef:8f: 62:97:bb:1c:c5:65:f5:ba:0d:a7:97:ce:15:25:bd:81:1a:42: 31:c7:5f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMgZT0/JE5VPoZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDE1OGVkODUtMzczYy00ZGRlLTg4YzUtYjE4YzljMThiNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57Wt1ZaQOiAilUL9uT6ihmnoeDOBckLtn3dr 2ClOApz5yIWbMlHPsAOzQ84bw47ViHRBFlI9GKe2ah/D3wAA3vuIcahLmlEvDh2R oiJIweFOx6wTRiPAMJcBwyRvWw8S3p0/E89jVixu3SlhGGyqAV1OtWl252wlV8OI 075SS4maW04wx621+eglBZmuNc62b5AGGODaWNQy34pawhvsl1rW3+5F8wlvrU1s Xqc9Qqtu8aM7Ab4tpq30XOhfjh647CP//FPVD4MTD60d+YmcvxiQMr2+9P9S85Qd +Fz9SVU+Fo0TpGXh7lpSw1AFQ1/MBs+oN1whHnicFqT3x8stEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6ve7BxyX9kYU97ujQLO1ZYMW53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGEyZDMyZjQtYTAwNy0z NzhjLThiMmItNTAzYmY1NmZjZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRIoLiUbSyotAfVIk3JyWWNvuIzdoTE2IwkBAl/F+4JXoOVdSkpveKo aJtEsYyH2KzitQQ8sBlQ5aiiodGXXFQsYxiIjLwUREwRWqAgymDA0sIXVWfTYadL NQV88boln4849BhSNrObeFy45ttcTFSdUVKFSpsqzr/CP7RHu2kfme6JOeGW9CTZ BIhKYm23CletGUncqGQceXDmRftYz2yLExpJa5oMJjbfYE8+uxebZLignjxoBaJn 1tyhWGLCrXuiETh0Td8MEl9QwsK8NkdEvPmsUUdZs4pJMvwrMSi71H8JjEzczHnv j2KXuxzFZfW6DaeXzhUlvYEaQjHHX4k= -----END CERTIFICATE-----Generated at Tue Jun 3 05:11:14 2025 by rpki-client