$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/681ae271-a6ee-3391-aea7-73fa843cebac.roa File: 681ae271-a6ee-3391-aea7-73fa843cebac.roa (raw, json) Hash identifier: IisI976S8BYp2ePQrZCz5kgaSs5qCKslEP2zTb+h+0o= Subject key identifier: F6:D6:71:17:CB:5D:A2:E7:17:17:74:0E:29:CC:AF:5D:F8:32:5A:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F32D118FFDD92D06E8C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/681ae271-a6ee-3391-aea7-73fa843cebac.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.40.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f3:2d:11:8f:fd:d9:2d:06:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=a3bb98dd-4a4c-45c5-98a2-d2b139a49ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:90:3e:ae:2c:3e:6b:15:dd:47:b5:1b:8e: fc:e1:94:56:3a:45:26:34:fa:d8:40:3b:2a:e0:a3: 31:1d:0f:04:c0:c0:60:72:f5:25:51:d0:53:45:fa: bd:fc:4a:3b:6e:e7:42:43:97:a6:4d:c8:c6:6b:77: 5d:b7:5b:62:93:b1:e2:92:fc:ce:97:8a:3a:b1:34: d9:57:50:86:3a:a1:73:cd:84:02:9d:76:e9:34:76: ed:66:e8:98:5d:9f:44:8a:52:3a:c6:7b:76:35:e6: 3a:02:0f:22:70:fb:72:4f:63:4d:34:ca:ec:26:47: d5:17:8b:24:00:52:eb:23:de:f1:9f:f2:42:85:43: 0b:ac:53:fc:a8:d2:e7:04:4f:96:00:ef:69:bf:eb: e2:53:ef:ed:67:41:5b:0d:0c:47:9d:09:d3:58:0d: 55:f8:27:8f:2e:f3:ab:ad:4d:3e:f8:3f:f6:e5:19: 72:bd:4c:ff:2d:37:38:15:ba:ca:35:30:8f:ce:93: 81:da:f6:47:0b:6b:fc:10:3f:39:56:63:5b:d5:40: 89:c4:6d:0c:61:13:64:f8:f8:b4:d4:6f:3d:3b:2b: f9:8f:85:e7:af:00:06:95:94:9e:6a:82:88:23:44: d2:07:56:a6:60:8d:68:32:2b:68:bf:99:f8:13:63: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D6:71:17:CB:5D:A2:E7:17:17:74:0E:29:CC:AF:5D:F8:32:5A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/681ae271-a6ee-3391-aea7-73fa843cebac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c6:87:28:53:e8:35:d6:67:79:8b:50:0a:f0:91:6b:94:cf: b5:43:4f:ea:f1:58:e4:94:2e:5b:cb:68:00:58:9f:ae:a0:d4: c0:96:dc:3c:df:94:46:52:d3:59:2b:df:cd:33:95:8c:b0:8e: 88:57:97:1b:b3:79:dd:bc:61:a5:e4:82:fe:11:7b:e6:bc:65: b1:b9:09:f5:89:48:bd:4b:a4:91:7f:91:dd:04:5a:6f:44:e7: 71:04:5c:cb:0d:0f:55:ff:1b:55:aa:3e:57:cc:0f:47:28:5d: 13:23:ea:ee:60:23:55:28:51:f8:a7:d5:f4:1d:d1:6e:bc:af: 65:86:04:10:17:8d:39:bc:ac:da:8e:12:87:b7:2d:b5:63:0b: 5c:f3:4f:84:86:07:8c:70:bb:df:23:df:25:25:d9:03:87:74: 36:d3:9a:e4:c5:4a:c2:7c:7d:57:e0:6a:ea:f6:7e:51:e0:85: f6:72:be:29:0e:d7:4c:13:15:94:f0:bb:59:29:98:1d:3d:f1: 65:ca:7e:03:09:ca:f2:1f:5e:56:83:0a:5c:b3:09:8f:86:6d: e6:5a:5f:81:29:99:6d:77:9b:67:8c:e5:40:10:c5:80:b3:dc: 13:90:55:28:fd:ed:ca:02:64:f0:7a:ca:0b:f6:74:2d:f8:b4: fe:84:26:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfMtEY/92S0G6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTNiYjk4ZGQtNGE0Yy00NWM1LTk4YTItZDJiMTM5YTQ5ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0iQPq4sPmsV3Ue1G4784ZRWOkUmNPrYQDsq 4KMxHQ8EwMBgcvUlUdBTRfq9/Eo7budCQ5emTcjGa3ddt1tik7HikvzOl4o6sTTZ V1CGOqFzzYQCnXbpNHbtZuiYXZ9EilI6xnt2NeY6Ag8icPtyT2NNNMrsJkfVF4sk AFLrI97xn/JChUMLrFP8qNLnBE+WAO9pv+viU+/tZ0FbDQxHnQnTWA1V+CePLvOr rU0++D/25RlyvUz/LTc4FbrKNTCPzpOB2vZHC2v8ED85VmNb1UCJxG0MYRNk+Pi0 1G89Oyv5j4XnrwAGlZSeaoKII0TSB1amYI1oMitov5n4E2MgVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbWcRfLXaLnFxd0DinMr134MloVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjgxYWUyNzEtYTZlZS0z MzkxLWFlYTctNzNmYTg0M2NlYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCh2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbGhyhT6DXWZ3mLUArwkWuUz7VDT+rxWOSULlvLaABYn66g1MCW3Dzf lEZS01kr380zlYywjohXlxuzed28YaXkgv4Re+a8ZbG5CfWJSL1LpJF/kd0EWm9E 53EEXMsND1X/G1WqPlfMD0coXRMj6u5gI1UoUfin1fQd0W68r2WGBBAXjTm8rNqO Eoe3LbVjC1zzT4SGB4xwu98j3yUl2QOHdDbTmuTFSsJ8fVfgaur2flHghfZyvikO 10wTFZTwu1kpmB098WXKfgMJyvIfXlaDClyzCY+GbeZaX4EpmW13m2eM5UAQxYCz 3BOQVSj97coCZPB6ygv2dC34tP6EJmA= -----END CERTIFICATE-----Generated at Tue Jun 3 06:02:31 2025 by rpki-client