$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa File: 863a4b84-1653-3d1b-9139-69e7b60c3efa.roa (raw, json) Hash identifier: kC9tBvQ3OhvREYC1MPUdKsu/GzTlU6CHmUMDW2CFUVQ= Subject key identifier: 32:61:91:E3:B0:D6:C8:C3:EC:7A:F0:AB:24:9F:05:45:7D:FF:7F:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430AE4D8B2719ED0586CF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.49.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:ae:4d:8b:27:19:ed:05:86:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bfe500f7-8e98-40e3-9642-a9ae613a6b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:f1:17:5c:76:1b:bf:3c:0a:21:c9:6c:2b: 89:2e:10:97:89:78:12:28:ce:54:0e:98:54:5f:5b: 43:f1:3b:01:29:60:fe:16:50:3b:a1:f2:91:f1:84: 62:4c:8f:f1:41:1e:3d:45:0e:19:c6:53:e3:4a:23: af:b8:93:a1:cf:06:f4:42:7d:ec:e0:75:53:9a:97: ee:2d:82:c8:a9:2b:f9:cc:ef:45:db:52:a5:b9:2d: 4c:ff:25:a9:47:75:a0:36:14:5c:b4:af:59:7d:4b: 58:3c:e2:ff:be:2e:97:05:34:69:e7:ff:78:fc:d4: 0d:c4:8d:40:f7:b5:f5:8c:71:26:a0:11:23:82:e0: 44:f1:06:6f:80:61:08:1b:81:5d:f9:93:03:d7:a4: 0a:67:b1:3b:ee:51:82:c7:58:8f:7d:20:d1:27:72: b3:52:62:66:1d:04:72:ed:4d:fc:b1:13:9d:03:5a: b0:11:ea:54:f7:ef:30:29:e6:71:8f:e2:56:3b:69: 0a:3f:e2:9f:33:99:55:a1:16:ee:9f:d2:7e:34:e8: d1:c9:8f:66:67:41:4d:99:d3:aa:9f:79:c5:25:d6: 4b:28:b4:c9:f2:11:64:d2:02:3b:2c:db:5d:6f:c9: a2:f7:91:ac:fc:6e:61:4e:f4:fa:84:9d:25:5f:6a: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:61:91:E3:B0:D6:C8:C3:EC:7A:F0:AB:24:9F:05:45:7D:FF:7F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b8:16:22:3c:61:1f:3e:05:98:55:f2:4b:1c:90:67:27:4d: b1:22:64:bc:7d:1e:25:f4:b4:66:83:96:ec:cb:c8:b8:69:ed: 6d:64:5b:15:ea:c9:dd:e3:78:e1:9f:46:33:25:35:96:05:d9: 81:fd:99:15:a0:b4:2f:d4:be:98:ad:74:3c:ab:12:ba:6a:be: 4b:b4:68:37:48:f4:11:34:cf:3b:c5:dc:ab:65:26:9c:c2:fe: 76:7b:fe:63:0e:29:c4:79:e4:c2:c3:49:eb:4d:3f:18:db:e0: cb:2d:51:e1:2c:49:84:8d:e6:91:10:36:60:86:6d:92:78:8f: 9f:0d:90:1b:4a:b6:49:06:e5:e7:c2:62:e4:0a:7b:8d:52:6b: f6:61:2e:29:d7:72:3b:6b:57:96:59:82:84:20:e3:12:83:ce: c0:ce:3b:25:72:94:fe:7a:9b:86:dc:f9:04:e5:a1:ed:bc:c6: 54:04:3d:52:55:2b:fb:4e:e9:c0:a7:b1:b9:69:73:60:1a:c2: 39:c8:f7:9b:5c:7c:a7:af:e1:21:14:10:8e:9b:bc:81:66:3d: 6b:d6:eb:52:34:bf:87:21:56:6a:ad:d8:1a:36:6c:a9:67:20: bd:b3:03:86:85:a4:4b:29:32:bb:8b:a4:12:58:9c:01:c6:49: e3:e1:91:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMK5NiycZ7QWGzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmZlNTAwZjctOGU5OC00MGUzLTk2NDItYTlhZTYxM2E2YjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlnxF1x2G788CiHJbCuJLhCXiXgSKM5UDphU X1tD8TsBKWD+FlA7ofKR8YRiTI/xQR49RQ4ZxlPjSiOvuJOhzwb0Qn3s4HVTmpfu LYLIqSv5zO9F21KluS1M/yWpR3WgNhRctK9ZfUtYPOL/vi6XBTRp5/94/NQNxI1A 97X1jHEmoBEjguBE8QZvgGEIG4Fd+ZMD16QKZ7E77lGCx1iPfSDRJ3KzUmJmHQRy 7U38sROdA1qwEepU9+8wKeZxj+JWO2kKP+KfM5lVoRbun9J+NOjRyY9mZ0FNmdOq n3nFJdZLKLTJ8hFk0gI7LNtdb8mi95Gs/G5hTvT6hJ0lX2pLiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJhkeOw1sjD7HrwqySfBUV9/39EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODYzYTRiODQtMTY1My0z ZDFiLTkxMzktNjllN2I2MGMzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI24FiI8YR8+BZhV8ksckGcnTbEiZLx9HiX0tGaDluzLyLhp7W1kWxXq yd3jeOGfRjMlNZYF2YH9mRWgtC/UvpitdDyrErpqvku0aDdI9BE0zzvF3KtlJpzC /nZ7/mMOKcR55MLDSetNPxjb4MstUeEsSYSN5pEQNmCGbZJ4j58NkBtKtkkG5efC YuQKe41Sa/ZhLinXcjtrV5ZZgoQg4xKDzsDOOyVylP56m4bc+QTloe28xlQEPVJV K/tO6cCnsblpc2AawjnI95tcfKev4SEUEI6bvIFmPWvW61I0v4chVmqt2Bo2bKln IL2zA4aFpEspMruLpBJYnAHGSePhkYE= -----END CERTIFICATE-----Generated at Tue Jun 3 06:17:24 2025 by rpki-client