$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa File: 4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa (raw, json) Hash identifier: +Jvfe3oQcvNOpzj0Cak1NihIiu1gyWHYhcdJTvRViS8= Subject key identifier: 28:10:09:A5:57:87:08:CA:D8:2B:D0:28:59:CE:DD:09:FF:6B:B6:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430BE41B9BAED97E812F7E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.60.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:be:41:b9:ba:ed:97:e8:12:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9d250248-b2db-4501-8588-18ac7be4fa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:e1:d2:62:cd:7d:9f:ca:cc:93:71:2c:c5: 94:74:94:74:ef:26:72:00:26:ae:a2:d3:c5:5e:52: cd:2e:16:32:d5:5e:c7:78:8a:91:ae:7c:f1:f9:73: ec:31:63:91:07:14:89:00:ad:c7:ef:e5:9e:bb:cc: c8:1a:9e:eb:5c:6e:30:54:a1:64:ef:40:b4:c8:4a: b2:5a:78:63:a7:ee:81:77:24:fb:9b:26:90:ac:e1: 55:c5:f7:3e:f3:d6:4b:6a:e3:a6:e5:e7:53:ba:50: 7e:5c:b4:66:6c:13:ae:2f:01:f7:eb:93:49:f1:49: 35:b8:4f:83:98:d8:45:cf:2a:0e:c8:0c:79:8f:96: 08:47:b2:1d:e8:90:f4:c4:58:a0:4c:13:c3:51:17: d4:38:fc:b3:60:ef:a6:4a:0d:30:01:b9:ab:9c:a4: 96:6d:10:b7:3e:51:6a:65:17:f8:96:ed:ea:a0:13: be:22:e1:67:69:00:eb:05:14:75:91:a5:c7:dd:5d: bc:7b:e7:99:87:b4:bf:06:fc:b9:e4:ee:f1:9a:45: 3f:fc:86:37:b8:41:db:f0:5a:53:eb:9d:6a:45:69: 79:9a:8b:96:db:9e:ad:38:71:14:25:a0:2b:27:22: 10:b2:23:6c:a7:81:9a:6f:7c:42:07:c1:fb:19:8b: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:09:A5:57:87:08:CA:D8:2B:D0:28:59:CE:DD:09:FF:6B:B6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:83:a0:5d:17:7e:1e:85:ea:0a:f0:77:37:bc:7d:59:56:2e: 9e:e6:93:3a:ca:4e:37:3d:03:13:bd:31:65:e0:f8:d2:49:0a: 52:9e:50:e3:0f:b2:ef:91:a3:c9:89:e8:3d:38:f0:af:ce:8b: 3c:00:96:ab:e3:5e:2c:af:b5:45:ef:88:b5:bc:ee:65:31:c2: 16:b9:0b:d4:ff:d0:df:4e:d7:6c:c2:b5:17:84:f1:e1:b5:f5: 82:64:3c:33:3f:7f:58:9c:e8:59:c2:c8:fc:ee:56:1f:54:3e: 65:6d:02:e3:4f:d8:03:37:b9:ab:8f:91:45:de:3d:b4:d6:f9: af:34:d9:b6:17:6b:d6:a9:3d:a0:3e:3c:f3:e1:17:3f:c3:3b: b5:30:87:1a:34:19:a3:66:74:ba:b2:84:75:f5:ca:dd:da:7d: f9:d1:e1:b0:73:9f:bf:b9:1e:89:68:24:3c:ac:89:01:61:fc: 96:f7:20:c6:f5:0f:1b:01:b1:88:eb:a5:e8:60:9e:f7:ef:c2: 50:b7:9a:f2:05:04:5d:a1:bd:ee:2c:3b:d8:37:8e:33:90:6d: 6b:8f:77:7a:08:2a:92:21:b9:d0:8d:18:92:3d:f8:57:4a:b9: dd:f7:dd:df:bc:e9:d9:81:c4:5a:c2:e6:36:79:a0:05:66:be: d9:11:7d:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUML5Bubrtl+gS9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWQyNTAyNDgtYjJkYi00NTAxLTg1ODgtMThhYzdiZTRmYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbDh0mLNfZ/KzJNxLMWUdJR07yZyACauotPF XlLNLhYy1V7HeIqRrnzx+XPsMWORBxSJAK3H7+Weu8zIGp7rXG4wVKFk70C0yEqy Wnhjp+6BdyT7myaQrOFVxfc+89ZLauOm5edTulB+XLRmbBOuLwH365NJ8Uk1uE+D mNhFzyoOyAx5j5YIR7Id6JD0xFigTBPDURfUOPyzYO+mSg0wAbmrnKSWbRC3PlFq ZRf4lu3qoBO+IuFnaQDrBRR1kaXH3V28e+eZh7S/Bvy55O7xmkU//IY3uEHb8FpT 651qRWl5mouW256tOHEUJaArJyIQsiNsp4Gab3xCB8H7GYt8AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgQCaVXhwjK2CvQKFnO3Qn/a7Z0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFjNDJhMmMtZGE5MC0z ZTcwLWEwYzctNmEyZTc5ODllMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMODoF0Xfh6F6grwdze8fVlWLp7mkzrKTjc9AxO9MWXg+NJJClKeUOMP su+Ro8mJ6D048K/OizwAlqvjXiyvtUXviLW87mUxwha5C9T/0N9O12zCtReE8eG1 9YJkPDM/f1ic6FnCyPzuVh9UPmVtAuNP2AM3uauPkUXePbTW+a802bYXa9apPaA+ PPPhFz/DO7Uwhxo0GaNmdLqyhHX1yt3affnR4bBzn7+5HoloJDysiQFh/Jb3IMb1 DxsBsYjrpehgnvfvwlC3mvIFBF2hve4sO9g3jjOQbWuPd3oIKpIhudCNGJI9+FdK ud333d+86dmBxFrC5jZ5oAVmvtkRfRg= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:39 2025 by rpki-client