$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5be27a36-70f4-3a65-8a4b-e0af65933e92.roa File: 5be27a36-70f4-3a65-8a4b-e0af65933e92.roa (raw, json) Hash identifier: k9d0keR263j59JkfMpAFIJ3gI8rI7O8luvIl8Jjnr2g= Subject key identifier: 2E:D3:F3:C0:77:29:02:5F:3B:1F:AE:DF:3B:BB:84:EA:33:DE:69:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F57E208686C0FA84B180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5be27a36-70f4-3a65-8a4b-e0af65933e92.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.40.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f5:7e:20:86:86:c0:fa:84:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=834766df-c645-4007-8d9d-ed3d6bef73f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:7d:5e:77:bd:9e:6c:27:45:1b:82:a9:e1: 92:63:fe:ea:79:10:88:26:f1:24:5d:04:fb:6a:ef: df:8a:db:4d:0d:3f:21:4b:ec:f9:a4:b7:23:41:e6: 05:b8:5d:dc:2f:cb:b2:9e:a1:c7:4e:da:62:c6:a3: 0a:f9:bd:7f:d0:ee:87:b4:e9:36:f6:26:4b:e7:b2: bd:94:c7:c6:74:d9:e4:0e:1e:dd:50:e3:88:1c:41: 52:23:58:7f:1f:c5:68:b2:67:4a:43:c1:01:3b:23: f7:8f:3e:6d:58:b6:05:9a:84:10:f3:a0:35:a6:51: 8c:2d:a5:cc:6b:46:b8:1a:0e:9e:c2:0b:2c:b4:05: 3d:89:ed:ec:41:c4:62:65:6e:10:bb:95:16:68:ac: d8:2b:e4:89:fe:b8:e3:6e:c6:43:97:97:4a:91:76: 50:b5:81:46:88:98:b7:9a:34:44:d7:85:8a:38:ad: 99:b5:c7:17:20:3a:93:b0:b0:50:ef:29:2c:ac:72: 9e:65:e8:f6:4f:4e:fd:b0:dd:34:56:68:9d:5f:f6: c3:da:c2:24:e4:7f:ce:de:7b:98:7a:1a:2c:87:6b: bb:52:9c:07:92:3c:19:3a:4f:5b:1e:25:d4:a0:51: 1a:28:9a:54:0c:30:ea:6c:78:6d:43:f6:ff:52:5d: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D3:F3:C0:77:29:02:5F:3B:1F:AE:DF:3B:BB:84:EA:33:DE:69:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5be27a36-70f4-3a65-8a4b-e0af65933e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ae:66:f6:a6:f4:22:24:94:1a:52:9b:0c:97:b9:9d:71:2f: c9:e6:e4:65:be:da:4a:76:85:69:da:6e:74:e6:70:8c:26:c9: 89:5f:22:3a:72:d0:20:20:a2:1b:fc:34:9a:b7:3d:34:f1:b1: 0a:42:7f:c7:b2:89:54:4c:44:62:e6:b1:b2:40:cb:91:1b:09: 87:cf:70:5f:ac:68:89:23:86:00:b4:3a:ee:a0:dd:64:90:0a: 2c:2a:2b:36:f6:50:ec:1f:7e:6c:65:32:2f:59:a1:52:2c:ed: 28:33:7c:b6:49:5d:41:2d:c1:84:12:d6:ec:5c:dc:0c:83:c2: fa:9f:4c:b2:8d:5b:18:06:5d:df:86:cf:46:dc:dc:0f:72:63: 3c:f7:56:21:d9:d7:0a:f2:7b:ad:2a:92:79:e3:2f:5b:e2:6f: 57:d9:50:ba:c5:66:6d:78:18:08:b9:5f:78:35:e9:08:73:e8: ca:6e:79:17:94:6c:2c:92:62:3f:fc:55:d1:67:6a:be:c3:81: a5:ce:30:1c:34:a8:4f:e7:0c:29:9d:8d:de:b0:dd:a1:29:77: 69:a5:1f:96:50:89:74:b2:52:98:e9:63:0d:28:e5:87:1e:d7: e1:ad:1b:ed:ed:99:59:81:0b:98:64:79:8d:7e:87:20:9e:65: c3:e1:d6:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfV+IIaGwPqEsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODM0NzY2ZGYtYzY0NS00MDA3LThkOWQtZWQzZDZiZWY3M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHJ9Xne9nmwnRRuCqeGSY/7qeRCIJvEkXQT7 au/fittNDT8hS+z5pLcjQeYFuF3cL8uynqHHTtpixqMK+b1/0O6HtOk29iZL57K9 lMfGdNnkDh7dUOOIHEFSI1h/H8VosmdKQ8EBOyP3jz5tWLYFmoQQ86A1plGMLaXM a0a4Gg6ewgsstAU9ie3sQcRiZW4Qu5UWaKzYK+SJ/rjjbsZDl5dKkXZQtYFGiJi3 mjRE14WKOK2ZtccXIDqTsLBQ7yksrHKeZej2T079sN00VmidX/bD2sIk5H/O3nuY ehosh2u7UpwHkjwZOk9bHiXUoFEaKJpUDDDqbHhtQ/b/Ul2m3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7T88B3KQJfOx+u3zu7hOoz3mlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJlMjdhMzYtNzBmNC0z YTY1LThhNGItZTBhZjY1OTMzZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6uZvam9CIklBpSmwyXuZ1xL8nm5GW+2kp2hWnabnTmcIwmyYlfIjpy 0CAgohv8NJq3PTTxsQpCf8eyiVRMRGLmsbJAy5EbCYfPcF+saIkjhgC0Ou6g3WSQ CiwqKzb2UOwffmxlMi9ZoVIs7SgzfLZJXUEtwYQS1uxc3AyDwvqfTLKNWxgGXd+G z0bc3A9yYzz3ViHZ1wrye60qknnjL1vib1fZULrFZm14GAi5X3g16Qhz6MpueReU bCySYj/8VdFnar7DgaXOMBw0qE/nDCmdjd6w3aEpd2mlH5ZQiXSyUpjpYw0o5Yce 1+GtG+3tmVmBC5hkeY1+hyCeZcPh1q8= -----END CERTIFICATE-----Generated at Tue Jun 3 07:06:18 2025 by rpki-client