$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68101dc3-f69a-351d-bfac-8fa3b238b663.roa File: 68101dc3-f69a-351d-bfac-8fa3b238b663.roa (raw, json) Hash identifier: qwS4gT/u76c9nhQ/+fdPOkAJ/PmVgjGvQs1elskxOzw= Subject key identifier: C4:56:36:9B:19:0C:14:7A:23:A5:CA:A9:43:68:13:31:98:4D:75:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4308EAD474BD42767E0F200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68101dc3-f69a-351d-bfac-8fa3b238b663.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.36.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:8e:ad:47:4b:d4:27:67:e0:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8a51e2d9-3f30-49c3-a3f8-98db63f01bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:45:12:69:9b:e5:95:21:be:49:0c:85:47: de:93:43:8e:3a:40:0c:6b:cb:3d:81:17:ee:54:e0: d7:34:47:c4:1e:54:e0:3d:4a:30:92:1a:76:0e:fb: 59:31:57:4c:b4:6b:cb:48:05:17:74:71:e9:67:d9: a9:a7:a2:a0:64:f3:11:a9:01:f4:30:94:31:93:4b: 82:52:79:0c:50:4f:64:7f:92:d2:38:d9:f8:b9:48: 25:b4:2a:31:f3:b0:e0:20:11:13:7d:68:25:46:96: 48:c5:a3:96:78:42:54:d2:97:06:5b:85:38:fa:79: b5:37:ce:c0:28:84:8a:49:25:cf:09:59:19:fc:86: d9:c5:4d:8e:3e:3b:c6:99:e0:c7:e6:2e:df:9d:e2: c5:f4:a1:84:38:2e:19:08:1c:3b:81:20:74:af:59: 2c:64:95:d2:1b:a3:dc:e5:8c:6c:eb:d3:df:cd:bb: 63:a0:7e:ec:91:62:11:51:fe:82:d7:da:7a:63:9c: 2e:c6:14:44:12:b0:78:75:0b:e2:d1:65:7c:7f:85: 6d:15:17:54:e3:6a:7b:32:ec:a1:c6:e5:ef:de:54: ef:a6:4c:fd:70:84:da:f2:37:2c:a8:95:00:1e:a2: 63:dc:36:a5:c0:4a:45:77:43:82:44:27:81:5f:0e: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:36:9B:19:0C:14:7A:23:A5:CA:A9:43:68:13:31:98:4D:75:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68101dc3-f69a-351d-bfac-8fa3b238b663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9a:70:ce:45:82:f6:7a:12:d5:a8:64:f6:d8:d5:a7:b4:87: 3f:fa:5b:be:05:d5:2b:65:a6:c2:b3:7e:4e:59:c1:91:53:90: f2:a6:1d:b2:80:7d:5b:61:aa:8b:d5:1b:9f:f3:40:3b:78:0b: ab:02:3b:c4:6c:de:02:fc:e3:d0:02:bf:fc:2e:66:32:d4:b0: 1a:e5:bf:6b:5c:9a:2f:c4:62:e7:7a:72:bc:fc:18:5b:e9:2e: f2:d7:77:1b:c6:39:4b:9c:97:51:3e:bf:ab:25:f1:68:9b:71: 2d:85:15:1a:ec:7d:ea:c6:14:98:47:94:a4:e3:3e:5a:a0:06: 61:24:76:bd:67:67:7f:f7:6b:19:4b:60:c4:48:fe:4b:3b:73: 1b:20:71:ab:05:50:f4:c3:9b:8a:2c:8f:be:8a:0f:98:23:d1: f9:48:5a:44:e9:6f:54:75:f2:09:14:21:87:5d:e4:9a:7e:4c: 4d:04:af:7a:c3:37:59:64:48:40:c5:a8:36:aa:cc:29:3c:85: db:c4:c4:45:05:b2:8f:d7:ae:c0:10:d7:59:29:29:57:aa:81: 3b:99:a6:49:41:53:03:ea:b2:8a:6d:1c:dd:d3:2e:f0:af:a4: 47:17:dd:da:8c:91:73:83:d6:58:ca:6e:48:a1:42:2d:de:e3: 22:a3:75:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMI6tR0vUJ2fg8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGE1MWUyZDktM2YzMC00OWMzLWEzZjgtOThkYjYzZjAxYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk1FEmmb5ZUhvkkMhUfek0OOOkAMa8s9gRfu VODXNEfEHlTgPUowkhp2DvtZMVdMtGvLSAUXdHHpZ9mpp6KgZPMRqQH0MJQxk0uC UnkMUE9kf5LSONn4uUgltCox87DgIBETfWglRpZIxaOWeEJU0pcGW4U4+nm1N87A KISKSSXPCVkZ/IbZxU2OPjvGmeDH5i7fneLF9KGEOC4ZCBw7gSB0r1ksZJXSG6Pc 5Yxs69PfzbtjoH7skWIRUf6C19p6Y5wuxhREErB4dQvi0WV8f4VtFRdU42p7Muyh xuXv3lTvpkz9cITa8jcsqJUAHqJj3DalwEpFd0OCRCeBXw44KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRWNpsZDBR6I6XKqUNoEzGYTXXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjgxMDFkYzMtZjY5YS0z NTFkLWJmYWMtOGZhM2IyMzhiNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCSaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKacM5FgvZ6EtWoZPbY1ae0hz/6W74F1StlpsKzfk5ZwZFTkPKmHbKA fVthqovVG5/zQDt4C6sCO8Rs3gL849ACv/wuZjLUsBrlv2tcmi/EYud6crz8GFvp LvLXdxvGOUucl1E+v6sl8WibcS2FFRrsferGFJhHlKTjPlqgBmEkdr1nZ3/3axlL YMRI/ks7cxsgcasFUPTDm4osj76KD5gj0flIWkTpb1R18gkUIYdd5Jp+TE0Er3rD N1lkSEDFqDaqzCk8hdvExEUFso/XrsAQ11kpKVeqgTuZpklBUwPqsoptHN3TLvCv pEcX3dqMkXOD1ljKbkihQi3e4yKjdao= -----END CERTIFICATE-----Generated at Tue Jun 3 07:12:52 2025 by rpki-client