$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c17bde1-4f2e-3875-a373-da649ced418e.roa File: 4c17bde1-4f2e-3875-a373-da649ced418e.roa (raw, json) Hash identifier: NTwrZHc+fzdc2KRB2bSFr1Uj2h6zRjFmRDv/h3HIqyQ= Subject key identifier: B9:AF:1A:82:CE:7C:A9:79:A6:FE:A4:B6:0E:13:A1:5E:D9:16:89:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4308AD4D7A47DCFC88E3780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c17bde1-4f2e-3875-a373-da649ced418e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.32.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:8a:d4:d7:a4:7d:cf:c8:8e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=cc1c33ac-c09b-4e86-99ae-e2b2b3f9a32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:37:ad:4c:9d:dc:d6:52:6f:d9:4c:3a:bb:f0: 3d:26:15:4d:6d:a9:fe:02:95:b8:fe:0c:cc:3b:e6: ca:66:4c:7f:b8:7a:0a:8b:b4:5c:24:36:23:f2:d0: b7:c1:dc:d6:5d:aa:df:37:9b:e1:8e:05:a6:c9:01: 5d:88:b7:c6:fb:a4:21:30:a9:ed:f7:7a:c3:2b:37: 9d:17:c0:57:7e:e6:24:e1:a4:be:01:bd:a3:4e:d1: e3:16:f4:03:c6:0d:24:45:75:44:62:26:d0:af:7c: e9:90:d7:86:a2:1f:81:e2:94:c0:a8:d4:06:e9:c0: fa:5e:16:4e:2e:7f:d6:17:ff:72:dc:7e:3d:e6:a5: 73:0c:74:28:43:91:1c:8d:4d:b7:af:df:0f:23:7e: c5:2f:50:98:6e:76:2b:0f:ea:06:61:3e:5f:77:4b: 28:bd:6e:80:d9:98:e3:1e:3c:62:cb:e9:2d:3a:36: 13:7e:d6:13:f5:3f:28:a7:e4:98:61:da:75:68:46: 8d:4c:56:53:2a:5b:44:00:3a:2c:ea:2b:82:8f:9e: a5:5a:f5:43:79:55:f1:18:e5:00:63:ac:7e:6c:22: 0d:9e:a7:45:88:26:9d:c1:4c:34:07:c9:8c:f9:aa: 67:84:a6:02:9a:d6:04:8b:7c:57:12:da:2c:a4:0e: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AF:1A:82:CE:7C:A9:79:A6:FE:A4:B6:0E:13:A1:5E:D9:16:89:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c17bde1-4f2e-3875-a373-da649ced418e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ab:c8:04:e4:f0:b1:e5:48:aa:82:4f:22:1b:57:85:21:cc: 64:b7:31:e7:24:22:0f:f6:29:e6:55:37:3c:89:a0:8e:8c:a2: 05:16:dd:76:5e:42:ee:88:71:2d:05:67:16:9a:50:9b:2d:e2: c5:17:06:4f:1d:67:46:54:56:72:5f:bf:1c:f8:84:b7:15:6c: b2:06:ef:e9:86:23:7a:23:12:51:7e:c6:ba:82:b1:4e:da:63: cb:71:ab:5e:b8:89:27:52:4b:14:57:7a:ed:02:88:c5:63:60: f3:b2:1f:db:1f:f5:67:a7:3c:53:c6:6f:93:24:ee:5c:f9:9d: 53:15:7b:a9:c2:09:f8:4c:67:2b:c4:8d:74:95:0a:38:3e:af: 52:ed:2b:a3:6f:f1:53:b4:43:18:74:12:8e:31:ae:98:2d:c4: eb:ae:26:73:7f:23:ed:9c:66:c5:f8:7d:10:20:88:80:74:f4: 5c:7c:4f:87:14:8f:99:4c:cb:6d:dd:2c:ac:94:f0:02:c7:24: 56:99:06:17:b9:e5:c9:37:4e:bc:f7:9a:4b:a8:ce:be:6c:dc: 1f:af:2c:e9:0e:f0:bd:a6:98:88:53:92:22:0d:ce:4b:d3:cc: 0c:45:e5:ae:97:3e:e3:62:42:45:75:8f:8c:dd:80:68:d8:e1: 38:51:b5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMIrU16R9z8iON4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2MxYzMzYWMtYzA5Yi00ZTg2LTk5YWUtZTJiMmIzZjlhMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/DetTJ3c1lJv2Uw6u/A9JhVNban+ApW4/gzM O+bKZkx/uHoKi7RcJDYj8tC3wdzWXarfN5vhjgWmyQFdiLfG+6QhMKnt93rDKzed F8BXfuYk4aS+Ab2jTtHjFvQDxg0kRXVEYibQr3zpkNeGoh+B4pTAqNQG6cD6XhZO Ln/WF/9y3H495qVzDHQoQ5EcjU23r98PI37FL1CYbnYrD+oGYT5fd0sovW6A2Zjj Hjxiy+ktOjYTftYT9T8op+SYYdp1aEaNTFZTKltEADos6iuCj56lWvVDeVXxGOUA Y6x+bCINnqdFiCadwUw0B8mM+apnhKYCmtYEi3xXEtospA7zmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmvGoLOfKl5pv6ktg4ToV7ZFokxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGMxN2JkZTEtNGYyZS0z ODc1LWEzNzMtZGE2NDljZWQ0MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaryATk8LHlSKqCTyIbV4UhzGS3MeckIg/2KeZVNzyJoI6MogUW3XZe Qu6IcS0FZxaaUJst4sUXBk8dZ0ZUVnJfvxz4hLcVbLIG7+mGI3ojElF+xrqCsU7a Y8txq164iSdSSxRXeu0CiMVjYPOyH9sf9WenPFPGb5Mk7lz5nVMVe6nCCfhMZyvE jXSVCjg+r1LtK6Nv8VO0Qxh0Eo4xrpgtxOuuJnN/I+2cZsX4fRAgiIB09Fx8T4cU j5lMy23dLKyU8ALHJFaZBhe55ck3Trz3mkuozr5s3B+vLOkO8L2mmIhTkiINzkvT zAxF5a6XPuNiQkV1j4zdgGjY4ThRtVc= -----END CERTIFICATE-----Generated at Tue Jun 3 06:22:28 2025 by rpki-client