$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88755a22-365b-345c-a6ef-9be9b69b32f8.roa File: 88755a22-365b-345c-a6ef-9be9b69b32f8.roa (raw, json) Hash identifier: SnQCADl1/9v/K5+jwzHqZIdd8ihsRMHTWmNct2B0zZU= Subject key identifier: DD:FB:12:38:0D:9B:9F:75:66:AB:E5:82:C2:CA:A1:9D:C8:CC:8A:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C062C1E7DA49A1493E1C380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88755a22-365b-345c-a6ef-9be9b69b32f8.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 68.44.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:2c:1e:7d:a4:9a:14:93:e1:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=44363f93-b5aa-4250-be9d-460da4a244ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:92:a9:60:87:c6:50:d9:2d:6d:ad:bc:77: 83:81:4d:f8:7f:9c:14:43:e4:5d:10:e8:62:8c:30: 7a:e4:88:8c:b0:97:3e:ff:bf:c9:cf:2d:b8:c9:3e: c4:45:db:31:09:12:80:68:9e:60:10:fc:5c:d6:c9: 58:55:49:b4:30:c7:d8:99:b8:13:28:a5:a5:8d:76: b3:a5:58:d4:f5:39:20:cb:a6:77:ce:cd:6a:03:a2: b3:96:f2:73:a5:05:28:61:02:22:8c:50:98:24:13: 99:2e:22:07:e3:d4:cc:5a:6f:31:74:88:da:4e:92: 2d:cd:42:d5:f5:7e:43:38:57:3b:bc:73:61:5c:d1: 90:6d:82:60:66:42:0a:ca:60:1f:f5:0f:2b:a6:06: 1e:33:82:ae:13:8e:2a:a5:71:22:9a:f8:2f:2f:52: 1c:2c:d1:52:88:fe:84:27:ff:ed:b9:49:21:a7:b3: 4d:5f:c6:6b:da:92:d0:be:1c:55:ef:77:bb:c0:cd: a7:d2:ef:9c:10:a4:88:c8:3b:06:67:e5:20:8a:c7: aa:1d:ba:3d:a2:8c:02:77:27:29:07:cd:b0:fb:de: e7:31:07:66:6d:14:ee:b3:2a:b4:e7:79:34:ca:ad: 63:a7:07:52:d7:d4:21:c9:3f:23:ef:f9:1e:e2:e8: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:12:38:0D:9B:9F:75:66:AB:E5:82:C2:CA:A1:9D:C8:CC:8A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88755a22-365b-345c-a6ef-9be9b69b32f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:89:c5:e8:6f:73:90:f3:a3:f8:15:f2:df:12:8c:b3:ca:d5: d2:35:b1:94:83:c0:8c:c6:08:f2:a1:ea:f6:37:a1:31:35:cf: ea:9e:fa:41:dd:2c:0b:15:68:e3:9c:aa:56:b2:ec:c0:61:11: ef:4e:cb:97:74:dc:cc:86:2c:67:16:2a:4d:d2:66:cd:75:54: 25:44:2b:a9:0b:27:b7:e1:b2:90:86:c2:f5:1e:b5:51:9e:b6: 57:b6:b0:f9:3b:ec:80:76:8f:3b:5b:d4:38:83:99:f8:79:b6: 50:08:41:0b:1e:1e:4b:96:d2:ff:b8:9a:42:a0:c5:47:88:c7: 49:60:6b:21:d2:25:d9:77:d1:bf:27:6c:07:ff:b4:d5:ff:0f: d4:f6:bd:f0:32:cb:e1:79:c5:31:19:4f:35:f3:9c:59:1f:39: 90:0e:26:83:aa:49:7a:f0:fe:13:79:41:16:ea:8a:e8:35:50: fb:c9:7d:4e:93:7f:34:11:16:00:0f:dc:63:25:24:8d:63:7e: 3a:76:cd:32:8b:fc:81:09:5f:fd:2c:79:06:76:a0:87:5a:8e: 49:9a:5f:83:12:e6:ad:fb:82:3f:08:65:6f:0b:6c:d9:4c:67: d2:45:e2:37:92:22:fa:72:33:90:3e:8a:ce:41:e7:66:7f:44: 3d:40:9d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBiwefaSaFJPhw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDQzNjNmOTMtYjVhYS00MjUwLWJlOWQtNDYwZGE0YTI0NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2eSqWCHxlDZLW2tvHeDgU34f5wUQ+RdEOhi jDB65IiMsJc+/7/Jzy24yT7ERdsxCRKAaJ5gEPxc1slYVUm0MMfYmbgTKKWljXaz pVjU9Tkgy6Z3zs1qA6KzlvJzpQUoYQIijFCYJBOZLiIH49TMWm8xdIjaTpItzULV 9X5DOFc7vHNhXNGQbYJgZkIKymAf9Q8rpgYeM4KuE44qpXEimvgvL1IcLNFSiP6E J//tuUkhp7NNX8Zr2pLQvhxV73e7wM2n0u+cEKSIyDsGZ+UgiseqHbo9oowCdycp B82w+97nMQdmbRTusyq053k0yq1jpwdS19QhyT8j7/ke4ugqowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN37EjgNm591ZqvlgsLKoZ3IzIqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg3NTVhMjItMzY1Yi0z NDVjLWE2ZWYtOWJlOWI2OWIzMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCyOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeJxehvc5Dzo/gV8t8SjLPK1dI1sZSDwIzGCPKh6vY3oTE1z+qe+kHd LAsVaOOcqlay7MBhEe9Oy5d03MyGLGcWKk3SZs11VCVEK6kLJ7fhspCGwvUetVGe tle2sPk77IB2jztb1DiDmfh5tlAIQQseHkuW0v+4mkKgxUeIx0lgayHSJdl30b8n bAf/tNX/D9T2vfAyy+F5xTEZTzXznFkfOZAOJoOqSXrw/hN5QRbqiug1UPvJfU6T fzQRFgAP3GMlJI1jfjp2zTKL/IEJX/0seQZ2oIdajkmaX4MS5q37gj8IZW8LbNlM Z9JF4jeSIvpyM5A+is5B52Z/RD1And8= -----END CERTIFICATE-----Generated at Wed Jun 4 23:20:55 2025 by rpki-client