$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cafaee-de4e-3b9b-84a3-7c2585b1244b.roa File: 60cafaee-de4e-3b9b-84a3-7c2585b1244b.roa (raw, json) Hash identifier: nlLsJSfgvrUauZlugUQDjWJC3xF7OY/KCMkbPRvTwj0= Subject key identifier: FA:54:C0:58:4D:7E:67:22:C0:34:C3:B8:11:56:C7:0E:93:85:79:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F63077EAA6AD7C91F7A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cafaee-de4e-3b9b-84a3-7c2585b1244b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.41.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f6:30:77:ea:a6:ad:7c:91:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5e7d57c0-fc4c-4bbf-b9ed-78ba04fb3bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:12:c8:31:0b:79:9d:62:53:53:8a:aa:49:e2: fe:7e:2a:a4:56:20:c4:98:e1:d9:ef:e5:a4:12:0f: e2:0e:97:ab:99:4f:27:94:f6:59:95:11:72:9d:d0: 1e:39:5c:1a:e4:e7:c6:a9:46:1b:7b:96:6c:70:d5: 75:d9:03:cd:23:d5:5d:63:80:0b:26:c1:ef:2a:d5: 8e:e1:54:38:fd:56:63:c2:c8:51:45:e8:ed:1a:db: f5:e8:99:71:6f:88:f4:85:81:16:0a:24:bb:57:b3: ca:78:45:16:13:24:be:6b:fb:c8:71:a2:77:6c:5d: 22:39:95:d1:06:bf:0f:64:19:01:bd:bf:79:1c:c0: 32:97:76:eb:31:c9:b1:73:da:93:6f:91:f9:e4:89: d9:be:50:89:8c:a6:6f:c2:a4:b0:be:b3:bc:7e:4c: dc:35:00:97:18:86:a0:16:29:a3:ea:63:65:25:d3: 29:ba:f4:8d:a2:ca:7a:bc:4a:48:97:2d:9a:5f:9b: 98:c5:2e:6b:90:11:e5:79:57:71:a2:6d:4c:70:60: 85:96:32:85:99:83:ab:10:5a:c1:cf:34:b3:b4:5a: 65:df:c6:ad:a4:32:ab:00:79:8a:ad:8f:9e:76:15: 22:4e:9a:8b:ea:59:8f:c0:64:6f:cc:e8:42:d9:06: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:C0:58:4D:7E:67:22:C0:34:C3:B8:11:56:C7:0E:93:85:79:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60cafaee-de4e-3b9b-84a3-7c2585b1244b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:16:15:1e:35:2d:5a:53:24:e3:e2:9f:22:95:21:a0:bf:df: 78:4b:7c:f3:e1:0b:1d:80:54:8d:87:58:69:03:1d:16:bd:af: bb:f0:e5:d1:2e:47:cf:76:7a:2f:a6:ec:1e:1f:f1:e6:5d:0f: 4f:fd:8e:7f:b1:7e:ce:c5:c8:98:20:d5:b5:d4:8f:36:08:a8: 39:d5:1f:35:90:80:57:11:7f:34:78:c7:34:b2:6d:00:31:51: 80:f4:39:af:9b:5e:e5:c2:99:45:ad:d4:aa:bb:11:24:ec:be: ca:62:78:94:7b:fd:9b:e8:d7:7a:b8:23:da:46:e9:ee:90:3e: 34:03:a3:6d:b5:c9:d3:f5:98:06:b9:67:be:dc:2f:8b:14:84: f6:38:5d:1b:ba:7f:ee:26:d6:5d:4d:55:34:e0:64:e3:0d:79: 74:c6:cc:de:51:e4:c9:b6:b8:d9:25:90:3d:d3:08:58:c6:e5: 8d:69:ff:86:b3:30:03:db:55:d6:4f:e5:5a:fa:f2:6d:a7:cc: cc:00:8c:01:99:74:75:d2:ec:e9:6d:50:60:b7:bf:f4:3a:fd: da:c1:e2:72:ce:78:53:ec:2b:f0:d1:f3:e0:ce:cb:4d:ee:9d: 13:1e:70:9c:50:bc:99:7f:fe:e8:12:2c:a3:4d:dd:6f:55:30: d7:4d:a3:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfYwd+qmrXyR96AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWU3ZDU3YzAtZmM0Yy00YmJmLWI5ZWQtNzhiYTA0ZmIzYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBLIMQt5nWJTU4qqSeL+fiqkViDEmOHZ7+Wk Eg/iDpermU8nlPZZlRFyndAeOVwa5OfGqUYbe5ZscNV12QPNI9VdY4ALJsHvKtWO 4VQ4/VZjwshRRejtGtv16Jlxb4j0hYEWCiS7V7PKeEUWEyS+a/vIcaJ3bF0iOZXR Br8PZBkBvb95HMAyl3brMcmxc9qTb5H55InZvlCJjKZvwqSwvrO8fkzcNQCXGIag Fimj6mNlJdMpuvSNosp6vEpIly2aX5uYxS5rkBHleVdxom1McGCFljKFmYOrEFrB zzSztFpl38atpDKrAHmKrY+edhUiTpqL6lmPwGRvzOhC2QZTMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpUwFhNfmciwDTDuBFWxw6ThXkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBjYWZhZWUtZGU0ZS0z YjliLTg0YTMtN2MyNTg1YjEyNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMWFR41LVpTJOPinyKVIaC/33hLfPPhCx2AVI2HWGkDHRa9r7vw5dEu R892ei+m7B4f8eZdD0/9jn+xfs7FyJgg1bXUjzYIqDnVHzWQgFcRfzR4xzSybQAx UYD0Oa+bXuXCmUWt1Kq7ESTsvspieJR7/Zvo13q4I9pG6e6QPjQDo221ydP1mAa5 Z77cL4sUhPY4XRu6f+4m1l1NVTTgZOMNeXTGzN5R5Mm2uNklkD3TCFjG5Y1p/4az MAPbVdZP5Vr68m2nzMwAjAGZdHXS7OltUGC3v/Q6/drB4nLOeFPsK/DR8+DOy03u nRMecJxQvJl//ugSLKNN3W9VMNdNox4= -----END CERTIFICATE-----Generated at Wed Jun 4 23:45:49 2025 by rpki-client