$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb332-7e2f-36c1-bb71-17edac85fe85.roa File: 667cb332-7e2f-36c1-bb71-17edac85fe85.roa (raw, json) Hash identifier: 5eRt3VjhCSXJ5/QzXR0UnKDIwBCvCahMdl8BTxoWk6Y= Subject key identifier: 17:75:21:16:1A:AE:E9:DF:E1:E2:59:ED:72:2B:88:F1:0C:AC:F1:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C062AAC3D914C3C4F135D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb332-7e2f-36c1-bb71-17edac85fe85.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 68.39.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:2a:ac:3d:91:4c:3c:4f:13:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8d517974-c821-44c4-88f5-606f9b62f4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:71:24:ad:85:a0:9e:da:d1:61:12:73:0d:81: 28:18:c0:62:5b:db:e2:1b:0c:ee:67:2c:d0:df:41: 8a:2d:b7:46:d2:4f:ae:d7:11:88:89:07:d9:f0:81: 3f:df:17:03:64:8f:4e:0f:f4:a6:f5:b6:58:f2:a6: b3:75:ea:44:5b:74:2b:b8:6f:38:af:08:72:1e:35: 13:5b:ac:9d:e3:45:a3:42:70:01:3d:aa:fa:9d:37: bd:b3:72:f5:a1:cd:30:4f:84:3a:33:53:4a:7a:da: d5:1a:6b:05:95:50:2b:3c:4a:2a:5b:21:c9:68:55: bb:ca:a8:40:16:58:6f:f4:92:d1:68:2f:0d:da:d3: 81:64:e4:ac:72:2e:c1:12:be:09:d9:b7:1c:3b:9b: 6e:fc:59:a0:0c:2a:8c:25:18:82:2e:ee:5a:74:74: a5:46:3e:09:7c:3a:35:7b:38:b7:59:5c:7f:05:60: b5:ba:27:f4:62:1a:f3:b3:76:95:5e:77:29:fe:c1: 9c:3e:f9:6b:08:70:4b:5e:bb:80:59:9c:92:e3:92: cb:a7:18:d8:17:de:5b:39:d5:92:d0:4b:45:79:14: 6f:db:7c:c1:4c:50:1b:11:fb:b3:1d:db:e8:c1:a2: 64:ae:c8:80:6d:cb:a4:d3:ea:be:4a:2b:2c:96:ce: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:75:21:16:1A:AE:E9:DF:E1:E2:59:ED:72:2B:88:F1:0C:AC:F1:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb332-7e2f-36c1-bb71-17edac85fe85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a7:51:a3:db:d7:13:4f:38:4c:46:03:2a:d2:c9:67:e1:d5: e8:6b:8f:b5:23:20:11:5d:86:ec:64:64:e1:ce:53:b0:ee:9c: ab:d6:2d:d6:d7:22:86:71:5a:e6:f3:29:36:4f:2e:13:67:82: 02:9b:69:33:fa:20:c3:d8:50:2d:e8:04:70:b1:cc:91:16:68: f8:f8:72:65:a7:bc:3e:14:ea:13:58:98:b7:0f:5b:a3:e3:6b: 5b:a7:71:c5:10:1b:a8:1b:a5:0f:35:f9:2c:ca:9c:f7:7c:ff: a1:cc:98:a7:bb:8c:42:a1:bd:10:b7:46:5a:06:a4:38:58:2e: 4b:1b:d7:0e:5e:85:29:77:f5:8e:3b:94:6d:eb:ae:72:b4:ce: f5:89:80:13:5d:83:bc:79:e4:68:23:9a:a1:d4:c1:70:44:48: d7:61:f1:18:2e:fc:1a:0b:e2:74:bd:d4:7d:a0:7c:04:fd:ff: 80:cd:29:df:20:82:eb:d6:7b:7a:cc:ba:26:3c:fd:8f:50:b9: bb:6b:7e:48:df:45:8c:65:0f:74:5f:72:ea:98:2b:fa:84:bb: e5:2b:99:a6:6d:57:d2:db:d7:f5:eb:27:52:b8:26:f9:c4:f7: 72:17:cb:7a:3e:19:fc:fd:9a:f4:a2:43:41:c5:2c:4a:c7:69: 20:d3:55:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBiqsPZFMPE8TXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGQ1MTc5NzQtYzgyMS00NGM0LTg4ZjUtNjA2ZjliNjJmNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXEkrYWgntrRYRJzDYEoGMBiW9viGwzuZyzQ 30GKLbdG0k+u1xGIiQfZ8IE/3xcDZI9OD/Sm9bZY8qazdepEW3QruG84rwhyHjUT W6yd40WjQnABPar6nTe9s3L1oc0wT4Q6M1NKetrVGmsFlVArPEoqWyHJaFW7yqhA Flhv9JLRaC8N2tOBZOSsci7BEr4J2bccO5tu/FmgDCqMJRiCLu5adHSlRj4JfDo1 ezi3WVx/BWC1uif0Yhrzs3aVXncp/sGcPvlrCHBLXruAWZyS45LLpxjYF95bOdWS 0EtFeRRv23zBTFAbEfuzHdvowaJkrsiAbcuk0+q+Sissls73FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd1IRYarunf4eJZ7XIriPEMrPG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjY3Y2IzMzItN2UyZi0z NmMxLWJiNzEtMTdlZGFjODVmZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEenUaPb1xNPOExGAyrSyWfh1ehrj7UjIBFdhuxkZOHOU7DunKvWLdbX IoZxWubzKTZPLhNnggKbaTP6IMPYUC3oBHCxzJEWaPj4cmWnvD4U6hNYmLcPW6Pj a1unccUQG6gbpQ81+SzKnPd8/6HMmKe7jEKhvRC3RloGpDhYLksb1w5ehSl39Y47 lG3rrnK0zvWJgBNdg7x55GgjmqHUwXBESNdh8Rgu/BoL4nS91H2gfAT9/4DNKd8g guvWe3rMuiY8/Y9QubtrfkjfRYxlD3RfcuqYK/qEu+UrmaZtV9Lb1/XrJ1K4JvnE 93IXy3o+Gfz9mvSiQ0HFLErHaSDTVfo= -----END CERTIFICATE-----Generated at Tue Jun 3 07:11:01 2025 by rpki-client