$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa File: 7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa (raw, json) Hash identifier: lf0HeM/RcGBnU0YGpe9+wE5n6Xka96marzShhdbgS6Q= Subject key identifier: 0D:90:6D:EA:4C:8B:A1:75:5D:BD:80:39:F6:33:18:65:68:40:91:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F4DE393896882F3C3D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.40.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f4:de:39:38:96:88:2f:3c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=3e16e58c-a5e7-4b2c-9a6f-9b503b2df096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:f9:ed:7c:45:6d:30:0c:b0:81:95:9b:51: 48:c2:77:98:71:48:7b:ce:50:b0:34:d5:67:6e:bf: 2a:be:53:6c:3e:6b:21:b4:c3:10:1d:06:f4:d3:00: ef:6d:5c:54:08:f2:66:5c:48:70:78:97:27:19:c9: 3d:23:01:4b:6a:62:f6:c1:50:61:89:86:9e:85:62: c6:a1:ae:e3:b9:c9:52:16:d8:1c:c0:b9:9d:6f:78: 3e:88:2a:8b:f6:b5:0b:88:0b:8f:34:a5:c0:04:eb: f2:4a:9a:9b:3a:93:9c:b5:f4:df:44:51:48:57:d1: bd:8b:b0:ee:39:43:74:f5:aa:69:13:06:a0:ca:1d: 4c:01:1e:34:9b:d1:79:20:bf:70:4f:f8:8d:79:ac: 53:63:41:87:ab:2a:8a:4f:a1:75:85:17:c1:cc:07: c3:d9:eb:8e:3a:c0:38:51:1d:cd:92:9b:57:aa:46: 2a:57:55:70:3f:df:e9:12:36:2a:9d:55:95:d7:29: 18:76:25:71:3d:0f:52:f9:9d:83:63:4c:23:96:ac: c8:fd:8d:ac:e8:d9:a5:9a:45:18:5b:84:ec:77:f7: d5:90:aa:c4:2e:11:fc:ef:b3:da:25:18:96:c7:e2: 91:22:6d:3d:ed:7f:98:fb:0a:69:74:ce:c3:8c:7a: 55:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:90:6D:EA:4C:8B:A1:75:5D:BD:80:39:F6:33:18:65:68:40:91:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:2e:74:53:1c:1b:bc:c4:49:25:64:ec:a7:53:6d:a2:a6:16: 1c:2d:fa:b1:51:0e:8f:01:74:7b:34:8e:ce:88:df:ac:ce:7c: 77:17:39:4c:63:69:17:d3:04:59:f0:d9:d5:7d:2a:09:dd:aa: 34:8e:5e:a3:f4:0d:b8:26:32:ef:96:45:69:97:49:9b:c1:87: 08:6e:41:fd:6c:f4:c3:1b:fb:49:4d:04:92:b2:7f:af:8d:36: 37:96:cd:8b:8c:9b:c8:db:8f:b6:64:a8:62:ba:4f:04:a6:6c: 54:aa:9a:8e:32:2a:1a:b0:cd:ca:a0:a0:5f:ac:58:80:94:1f: 23:ed:6e:83:27:9d:73:40:ca:cc:03:0f:78:96:f2:a2:47:84: ef:7d:33:df:84:8a:a2:23:08:e0:bc:f6:11:5c:ab:3b:47:89: cf:b7:83:8d:7b:d9:6e:49:b9:fa:88:c1:d0:99:eb:1b:cc:a8: 70:3c:42:ef:4d:58:07:52:ff:2e:8d:fd:fe:e9:13:d7:02:bc: e0:4d:49:98:cd:79:14:22:08:5b:8f:09:95:c1:fa:30:8d:d0: 5b:2e:da:06:a3:d3:f0:4f:da:22:7d:e5:6d:7c:dd:ed:fd:94: e6:ce:cb:c1:d9:45:71:35:3a:e7:a1:e0:98:e8:ce:d0:d3:09: 20:f2:b9:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfTeOTiWiC88PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk M2UxNmU1OGMtYTVlNy00YjJjLTlhNmYtOWI1MDNiMmRmMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2357XxFbTAMsIGVm1FIwneYcUh7zlCwNNVn br8qvlNsPmshtMMQHQb00wDvbVxUCPJmXEhweJcnGck9IwFLamL2wVBhiYaehWLG oa7juclSFtgcwLmdb3g+iCqL9rULiAuPNKXABOvySpqbOpOctfTfRFFIV9G9i7Du OUN09appEwagyh1MAR40m9F5IL9wT/iNeaxTY0GHqyqKT6F1hRfBzAfD2euOOsA4 UR3NkptXqkYqV1VwP9/pEjYqnVWV1ykYdiVxPQ9S+Z2DY0wjlqzI/Y2s6NmlmkUY W4Tsd/fVkKrELhH877PaJRiWx+KRIm097X+Y+wppdM7DjHpV2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2QbepMi6F1Xb2AOfYzGGVoQJE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E0ZjQ0MzQtZmQxYS0z YzU1LWExNmQtYzBlNDIyYWNjYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMudFMcG7zESSVk7KdTbaKmFhwt+rFRDo8BdHs0js6I36zOfHcXOUxj aRfTBFnw2dV9KgndqjSOXqP0DbgmMu+WRWmXSZvBhwhuQf1s9MMb+0lNBJKyf6+N NjeWzYuMm8jbj7ZkqGK6TwSmbFSqmo4yKhqwzcqgoF+sWICUHyPtboMnnXNAyswD D3iW8qJHhO99M9+EiqIjCOC89hFcqztHic+3g4172W5JufqIwdCZ6xvMqHA8Qu9N WAdS/y6N/f7pE9cCvOBNSZjNeRQiCFuPCZXB+jCN0Fsu2gaj0/BP2iJ95W183e39 lObOy8HZRXE1Oueh4JjoztDTCSDyuSU= -----END CERTIFICATE-----Generated at Wed Jun 4 23:42:03 2025 by rpki-client