$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d11f0f8-f7a2-3f6a-8e9e-a5b2f3be6e05.roa File: 6d11f0f8-f7a2-3f6a-8e9e-a5b2f3be6e05.roa (raw, json) Hash identifier: oahpYa/tKHfx4uvmg9v9NA4HPy+Thni0K6sPdqnLRXE= Subject key identifier: EE:51:75:02:FF:29:56:1F:A6:05:53:E0:2F:48:10:88:EF:06:23:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F9FF320E121788F1A280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d11f0f8-f7a2-3f6a-8e9e-a5b2f3be6e05.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.43.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f9:ff:32:0e:12:17:88:f1:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d486230a-d790-4146-9076-ff473c4490f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:8d:4c:65:2d:47:33:3a:d9:01:d3:ce:68: ee:64:b4:80:e7:d7:46:b4:ec:ad:94:d8:72:aa:bf: ad:59:d7:83:ce:46:f0:46:b5:4f:2f:05:81:9c:d8: 4c:76:f3:73:4d:d9:63:dd:28:a5:7e:55:97:16:fe: 36:9a:ff:3c:a5:20:d1:87:d9:33:de:8f:a0:2d:4f: cf:cd:51:e8:ac:ee:50:fa:7c:78:a8:76:5b:56:61: 89:50:00:3e:16:30:8b:f3:08:f8:77:3e:1a:9f:46: 8c:23:29:15:ac:68:e4:19:30:0d:4e:34:99:a7:85: 58:0c:b7:b0:ae:c0:0f:c3:44:8e:de:d2:cc:ef:06: 70:cb:07:9d:e3:c3:e5:97:91:8a:6a:16:1c:d4:d7: c8:89:d4:2b:fc:df:cb:43:24:9b:0a:5b:c5:1b:69: b1:1d:fd:fe:3f:5e:71:c6:90:e9:50:87:03:6e:2a: d8:89:6c:c8:00:e1:3d:6a:f8:14:27:74:f9:29:2c: f1:d0:29:1d:06:34:f8:84:aa:c6:e9:44:4a:b3:ee: af:9b:11:3e:e5:e9:ee:0e:db:31:1c:36:df:8c:39: af:2b:4b:0d:94:f9:15:36:04:bb:28:59:6d:2e:9d: 4a:f7:4d:29:06:32:5d:ec:fb:9f:41:b4:c0:f6:a6: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:51:75:02:FF:29:56:1F:A6:05:53:E0:2F:48:10:88:EF:06:23:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d11f0f8-f7a2-3f6a-8e9e-a5b2f3be6e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ac:d5:30:78:b3:bc:18:71:f7:b3:e8:29:fc:90:b1:11:b8: bd:de:b1:89:b7:7f:e8:70:70:30:1c:22:a1:57:d0:b4:ce:da: 0d:da:a2:fd:9e:99:94:4e:dc:4a:cb:58:f2:47:2c:13:a9:c0: 29:88:2a:0b:3e:1c:99:b3:a4:47:cd:b2:ad:33:cb:2c:f2:4e: 89:07:be:51:03:b5:fa:2d:94:20:7f:59:e0:ea:92:7f:33:e8: 29:e8:85:48:ea:07:1c:74:f7:6b:fa:5c:45:f2:59:e1:d4:5c: 3f:71:8b:99:7d:77:53:96:6d:e4:a3:47:86:ec:0f:c6:c1:d6: 53:ca:7a:66:11:41:2f:a1:88:bf:1f:29:c4:64:7e:eb:b1:62: e7:98:ed:63:02:d7:7b:e4:b3:c8:44:0c:df:63:fe:12:94:f6: 4f:53:71:fc:31:bb:6d:99:d1:76:9f:d7:19:aa:65:a7:c1:bf: 16:a5:44:30:d4:7f:e9:7b:6d:c9:50:45:1a:cc:9d:90:a2:11: 7b:11:ba:24:95:18:f7:f5:9e:69:8a:1a:f6:a9:f0:ac:92:d1: 98:27:d2:bd:c4:a2:1e:4e:69:f0:d7:22:ba:9e:67:ad:1c:1f: 8c:eb:1d:f9:9d:ae:96:31:d6:a6:9f:d0:0a:23:b2:ef:79:48: 27:cc:39:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfn/Mg4SF4jxooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ4NjIzMGEtZDc5MC00MTQ2LTkwNzYtZmY0NzNjNDQ5MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6GNTGUtRzM62QHTzmjuZLSA59dGtOytlNhy qr+tWdeDzkbwRrVPLwWBnNhMdvNzTdlj3SilflWXFv42mv88pSDRh9kz3o+gLU/P zVHorO5Q+nx4qHZbVmGJUAA+FjCL8wj4dz4an0aMIykVrGjkGTANTjSZp4VYDLew rsAPw0SO3tLM7wZwywed48Pll5GKahYc1NfIidQr/N/LQySbClvFG2mxHf3+P15x xpDpUIcDbirYiWzIAOE9avgUJ3T5KSzx0CkdBjT4hKrG6URKs+6vmxE+5enuDtsx HDbfjDmvK0sNlPkVNgS7KFltLp1K900pBjJd7PufQbTA9qZmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5RdQL/KVYfpgVT4C9IEIjvBiPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmQxMWYwZjgtZjdhMi0z ZjZhLThlOWUtYTViMmYzYmU2ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6s1TB4s7wYcfez6Cn8kLERuL3esYm3f+hwcDAcIqFX0LTO2g3aov2e mZRO3ErLWPJHLBOpwCmIKgs+HJmzpEfNsq0zyyzyTokHvlEDtfotlCB/WeDqkn8z 6CnohUjqBxx092v6XEXyWeHUXD9xi5l9d1OWbeSjR4bsD8bB1lPKemYRQS+hiL8f KcRkfuuxYueY7WMC13vks8hEDN9j/hKU9k9Tcfwxu22Z0Xaf1xmqZafBvxalRDDU f+l7bclQRRrMnZCiEXsRuiSVGPf1nmmKGvap8KyS0Zgn0r3Eoh5OafDXIrqeZ60c H4zrHfmdrpYx1qaf0Aojsu95SCfMOUo= -----END CERTIFICATE-----Generated at Tue Jun 3 04:50:20 2025 by rpki-client