$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa File: 6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa (raw, json) Hash identifier: /6dXXD7d8qm8D52oXKEgrnq8jZoObF/EAUiqhye+uGs= Subject key identifier: E8:5A:C8:80:E6:10:94:1E:00:FE:AE:7E:D9:1B:E9:DA:41:81:E8:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F66B06C8CFB0A71A3AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.41.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f6:6b:06:c8:cf:b0:a7:1a:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d7fd1091-36e7-4bc9-ad34-41dc99de099e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:2a:4c:0f:8b:4c:66:85:da:5b:06:81:78: 0a:5c:66:53:b4:f7:ca:1d:a4:4c:97:f1:3e:9c:5d: 14:be:e2:aa:f8:32:33:b8:e6:db:f8:cd:53:55:a1: 9f:7d:54:ac:01:a8:5a:4b:75:63:ed:54:29:06:f4: e9:45:21:c5:6c:a8:70:38:64:1e:1c:64:f8:a1:12: 28:c1:52:2d:d7:a5:9d:c2:d9:a2:17:3b:08:e3:78: da:2a:18:f4:b0:5e:b5:e8:be:d5:ff:54:66:bd:48: 98:bf:5a:71:6f:96:f1:3e:04:24:cd:82:de:26:c7: 8f:bc:8a:70:88:33:31:9a:c3:3d:6e:36:ea:50:05: 77:6f:cc:4c:e6:a8:d9:67:8e:12:2e:11:1c:f9:6b: 6d:5e:03:51:45:98:01:da:c6:f9:08:7b:b7:a4:2f: 9a:d0:aa:19:01:f9:80:32:39:57:7d:15:73:31:9a: 59:3e:34:e5:12:fe:60:c4:77:f7:42:57:42:68:c5: bf:dd:d8:b6:18:31:5d:d9:40:0a:e3:48:ef:b3:a9: 69:cc:12:5f:4c:0a:f5:91:e1:f8:4e:f7:d0:d6:79: 40:32:f5:39:41:04:ae:3e:b8:de:91:c5:2f:72:fe: 16:a5:7b:9c:bb:3a:e5:c5:42:de:99:30:89:43:67: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5A:C8:80:E6:10:94:1E:00:FE:AE:7E:D9:1B:E9:DA:41:81:E8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b1af42e-eb12-3dc2-bd59-12fd1d4deffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d3:68:7a:87:7b:08:3f:83:b1:3e:f4:bf:65:32:3e:f9:d2: b7:16:d5:34:d6:8d:20:a9:92:86:e2:f0:d9:8f:e1:b8:bb:28: 23:e6:ce:63:70:c8:20:a3:58:f4:9b:c8:63:c1:19:42:d3:2a: 6c:f7:2c:2f:5a:d5:98:77:54:88:7d:c8:98:ed:d0:b4:7b:16: 97:0c:a5:06:ea:97:47:39:65:5e:ef:ea:a9:a6:f3:59:56:1a: db:2d:2a:ff:5d:4c:31:16:32:78:e8:f3:09:09:f8:fc:5f:37: a0:7e:c8:4a:09:45:6b:02:bd:89:53:cb:55:48:94:39:6d:db: 8b:18:2b:0f:79:6c:f6:12:37:8d:66:ce:8a:32:32:f5:1f:48: f6:43:12:d2:34:b4:d3:6a:8f:55:4b:6c:2e:4a:58:09:06:b0: d1:a5:1f:82:4c:be:4e:11:25:53:f6:f7:63:f3:fb:64:6c:37: 4c:87:42:e8:09:c4:68:54:ad:60:f9:91:73:95:69:bf:fb:52: e5:94:31:42:ad:56:fc:1d:56:31:ff:ba:fa:e1:f1:d6:aa:14: d1:8c:5a:a2:2b:ff:9a:da:e1:ab:03:71:58:61:c1:80:ea:b7: e4:1f:d8:ab:93:e0:8b:5c:dc:b0:81:82:4c:98:9f:41:17:90: 00:b4:52:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfZrBsjPsKcaOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDdmZDEwOTEtMzZlNy00YmM5LWFkMzQtNDFkYzk5ZGUwOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt54qTA+LTGaF2lsGgXgKXGZTtPfKHaRMl/E+ nF0UvuKq+DIzuObb+M1TVaGffVSsAahaS3Vj7VQpBvTpRSHFbKhwOGQeHGT4oRIo wVIt16WdwtmiFzsI43jaKhj0sF616L7V/1RmvUiYv1pxb5bxPgQkzYLeJsePvIpw iDMxmsM9bjbqUAV3b8xM5qjZZ44SLhEc+WttXgNRRZgB2sb5CHu3pC+a0KoZAfmA MjlXfRVzMZpZPjTlEv5gxHf3QldCaMW/3di2GDFd2UAK40jvs6lpzBJfTAr1keH4 TvfQ1nlAMvU5QQSuPrjekcUvcv4WpXucuzrlxULemTCJQ2fKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhayIDmEJQeAP6uftkb6dpBgeixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmIxYWY0MmUtZWIxMi0z ZGMyLWJkNTktMTJmZDFkNGRlZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjTaHqHewg/g7E+9L9lMj750rcW1TTWjSCpkobi8NmP4bi7KCPmzmNw yCCjWPSbyGPBGULTKmz3LC9a1Zh3VIh9yJjt0LR7FpcMpQbql0c5ZV7v6qmm81lW GtstKv9dTDEWMnjo8wkJ+PxfN6B+yEoJRWsCvYlTy1VIlDlt24sYKw95bPYSN41m zooyMvUfSPZDEtI0tNNqj1VLbC5KWAkGsNGlH4JMvk4RJVP292Pz+2RsN0yHQugJ xGhUrWD5kXOVab/7UuWUMUKtVvwdVjH/uvrh8daqFNGMWqIr/5ra4asDcVhhwYDq t+Qf2KuT4Itc3LCBgkyYn0EXkAC0Ur0= -----END CERTIFICATE-----Generated at Wed Jun 4 23:05:35 2025 by rpki-client