$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa File: 89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa (raw, json) Hash identifier: 2j0SQcBMbmbgKpiTz8fYW4D5uJVwkgLW++lAI46bO+A= Subject key identifier: CC:C7:39:3C:FD:15:81:3A:47:9E:6C:8E:CA:42:57:90:53:62:A4:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430BFB6B00340B3BC11E520 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.60.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:bf:b6:b0:03:40:b3:bc:11:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c9e0f7bc-cdab-46ac-8c5d-19d07d21461c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:44:0a:4c:ba:7f:04:fe:c1:03:0e:bb:5f: 77:08:4d:9c:54:d7:c3:67:33:ff:c6:f9:8b:be:93: bf:7d:62:6e:66:ce:b2:ff:22:a9:28:6d:fd:a6:cf: f9:fc:c6:59:e9:1c:d5:b2:5a:27:4d:9b:67:af:b7: d5:a2:c0:57:d2:1d:e5:f2:6b:64:d4:29:d7:f8:66: 12:11:db:5a:f6:35:f3:81:b8:63:cf:e1:48:7f:e2: 75:c8:ea:f0:b6:6f:0d:74:0f:db:83:d1:65:43:68: 9d:56:a5:bc:44:e0:26:08:0f:c8:dd:ea:a2:5e:0f: cc:78:03:aa:c2:64:ac:a1:92:45:a9:c4:9c:55:46: 83:56:4f:75:9d:51:0f:d9:86:91:b1:b3:fb:fa:58: 91:68:b8:7b:1f:c0:98:94:d6:79:4e:d1:0c:5e:52: 7e:f7:69:f7:1e:32:26:bc:0b:34:a1:c5:dd:0f:17: 64:16:27:c1:f2:a5:c6:ea:0b:8f:8d:ba:24:17:8a: 8b:ea:33:5b:2d:9b:a3:d6:94:9f:ac:a6:7d:4d:0c: 41:1d:02:b6:26:92:7f:54:ba:15:19:09:5e:40:a4: 35:c0:a6:c8:e3:ea:36:90:6d:bc:1c:04:66:52:b2: d6:a6:b1:9d:0d:3a:ce:df:be:a6:f5:8e:e8:bc:f4: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C7:39:3C:FD:15:81:3A:47:9E:6C:8E:CA:42:57:90:53:62:A4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9d:50:a7:e6:04:53:fb:f9:b4:96:86:b5:ce:2a:b3:37:03: f9:1f:c9:65:ad:d0:17:a8:99:b6:d3:7e:58:b4:ea:b7:96:ae: 45:97:82:80:10:69:03:bc:91:d3:97:b6:ac:0c:f9:9b:be:a6: 89:8a:5c:11:21:36:c0:13:a9:57:2a:3a:91:84:37:b7:97:07: a7:0a:01:8c:da:88:6c:e1:7e:f3:39:40:56:38:fe:4e:e8:cf: 8a:10:97:52:2e:82:41:40:50:ab:bd:02:92:38:4c:6b:e2:f5: 8f:85:8c:aa:bd:f5:74:5a:b6:c8:16:a8:d2:29:38:49:b6:30: ba:8e:ef:1e:08:64:09:ad:fb:21:2a:e5:fa:a0:65:64:72:d8: d2:e6:c1:c3:45:88:a5:30:d0:4e:73:48:1d:44:08:95:4c:d0: c8:53:bb:db:87:17:4c:ed:16:56:b8:bf:2a:30:db:01:db:7e: 59:49:74:19:4c:6e:34:0e:71:d9:2b:66:ab:cd:ec:54:ff:fc: c1:75:d6:e1:94:28:da:32:71:be:f8:0d:99:fb:96:5e:06:d8: c6:88:df:e7:52:09:82:0b:64:d9:4b:7b:0a:eb:64:08:90:03: 7a:16:bf:95:e1:ee:55:ec:40:b1:54:35:ca:de:8f:86:b9:89: 2a:4d:81:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUML+2sANAs7wR5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzllMGY3YmMtY2RhYi00NmFjLThjNWQtMTlkMDdkMjE0NjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDxECky6fwT+wQMOu193CE2cVNfDZzP/xvmL vpO/fWJuZs6y/yKpKG39ps/5/MZZ6RzVslonTZtnr7fVosBX0h3l8mtk1CnX+GYS Edta9jXzgbhjz+FIf+J1yOrwtm8NdA/bg9FlQ2idVqW8ROAmCA/I3eqiXg/MeAOq wmSsoZJFqcScVUaDVk91nVEP2YaRsbP7+liRaLh7H8CYlNZ5TtEMXlJ+92n3HjIm vAs0ocXdDxdkFifB8qXG6guPjbokF4qL6jNbLZuj1pSfrKZ9TQxBHQK2JpJ/VLoV GQleQKQ1wKbI4+o2kG28HARmUrLWprGdDTrO376m9Y7ovPRaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzHOTz9FYE6R55sjspCV5BTYqRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODliNWMzNzEtNWM1Yy0z M2UzLTgzYzctZWI4M2YyMGNhMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABedUKfmBFP7+bSWhrXOKrM3A/kfyWWt0BeombbTfli06reWrkWXgoAQ aQO8kdOXtqwM+Zu+pomKXBEhNsATqVcqOpGEN7eXB6cKAYzaiGzhfvM5QFY4/k7o z4oQl1IugkFAUKu9ApI4TGvi9Y+FjKq99XRatsgWqNIpOEm2MLqO7x4IZAmt+yEq 5fqgZWRy2NLmwcNFiKUw0E5zSB1ECJVM0MhTu9uHF0ztFla4vyow2wHbfllJdBlM bjQOcdkrZqvN7FT//MF11uGUKNoycb74DZn7ll4G2MaI3+dSCYILZNlLewrrZAiQ A3oWv5Xh7lXsQLFUNcrej4a5iSpNgZw= -----END CERTIFICATE-----Generated at Tue Jun 3 05:06:13 2025 by rpki-client