$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b227712-ae53-3f41-a8a4-76ca87ca64d8.roa File: 8b227712-ae53-3f41-a8a4-76ca87ca64d8.roa (raw, json) Hash identifier: I73Sdh0rCgGhQ3+qdXiRCKNUYrtQavMooiic6J4hO+Q= Subject key identifier: 97:0B:94:CB:18:96:AE:D4:D2:F0:1A:95:7E:E4:21:EE:67:15:F7:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430BA894541431CAA618AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b227712-ae53-3f41-a8a4-76ca87ca64d8.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.56.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:ba:89:45:41:43:1c:aa:61:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=170f8bb6-da33-4ee4-a095-63a076652cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9a:0e:4d:9f:62:15:73:15:3b:a3:46:0c:06: 62:f8:0e:45:5b:a8:9c:32:2a:ef:0f:72:0d:bd:af: e7:a4:bb:41:fc:56:2b:7f:db:55:33:d0:ee:dc:f3: fe:3d:97:6f:54:9e:8b:2a:1d:18:9b:76:e4:41:29: 4c:33:c6:f4:8a:65:54:43:62:f8:c3:d7:ed:74:18: 91:61:99:5c:38:d3:9e:7d:04:69:25:03:fd:a6:00: 09:7e:ce:b5:eb:a1:b5:ea:68:90:11:62:e1:a0:11: a0:7d:94:7b:1f:e6:99:f7:f1:ba:30:af:8b:54:fa: 0f:e6:c7:f8:27:bb:62:48:5c:7c:52:5d:2b:9d:25: d5:48:56:4c:91:63:b7:b3:47:b8:b4:ad:f7:5b:e5: 45:93:94:ab:00:ae:e2:ff:1e:91:99:5e:f8:ad:8f: cf:98:73:da:e0:a1:12:9e:a8:3c:50:e6:7b:2b:34: c8:32:cb:9f:03:4a:5d:6c:a6:74:bb:1c:82:36:c1: c8:6c:9a:20:06:69:2a:65:18:2f:98:50:00:45:81: f4:3b:5f:1f:81:d7:a5:e5:48:6c:47:db:8d:89:b3: 7b:65:24:44:74:07:d6:a0:ea:5a:d9:4e:04:60:c1: 4e:87:cd:28:04:eb:d9:8e:67:57:e3:03:d3:ea:15: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:94:CB:18:96:AE:D4:D2:F0:1A:95:7E:E4:21:EE:67:15:F7:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b227712-ae53-3f41-a8a4-76ca87ca64d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d1:be:f4:e7:0b:f8:a5:99:88:f6:ec:b3:b6:63:4b:57:5e: e2:49:50:46:f5:cd:04:70:da:7c:49:b2:3e:17:a7:b9:57:d3: fd:ac:95:e9:f9:11:03:4e:85:d7:f2:54:1f:c5:27:fc:a6:fe: 68:a3:1c:b7:79:13:c9:d7:aa:b2:ec:6e:2a:2e:03:e6:97:2b: 46:1a:2d:7c:20:6d:4c:4f:16:47:58:d6:c5:e1:e0:73:88:9d: 6e:71:de:52:09:77:ee:86:d7:45:83:50:84:f6:01:b0:96:92: 17:60:8d:67:75:ad:e0:0f:c9:83:35:74:f6:fc:c5:aa:ec:9c: 76:54:e7:14:ee:17:4c:29:ce:5d:01:3e:dc:e0:a7:71:72:d7: 23:f7:df:7b:5c:1f:9e:31:9d:4e:c1:cc:5b:0a:06:43:c3:02: 46:51:85:75:ad:45:2d:24:be:4d:d6:5d:6f:f1:47:fa:15:4c: 12:47:8f:15:ca:0e:3e:bb:4f:ba:2f:62:ad:60:a0:c1:89:60: 38:f4:d0:f8:99:c1:a7:e4:69:3b:51:0b:b0:9b:00:d0:f9:e0: 18:46:51:a5:0e:0c:8c:27:34:c0:70:9b:b2:8b:63:80:e3:65: 71:6b:45:55:54:10:60:56:e7:a2:d9:11:3d:0b:dd:38:a9:c6: 37:9a:4a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMLqJRUFDHKphisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTcwZjhiYjYtZGEzMy00ZWU0LWEwOTUtNjNhMDc2NjUyY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZoOTZ9iFXMVO6NGDAZi+A5FW6icMirvD3IN va/npLtB/FYrf9tVM9Du3PP+PZdvVJ6LKh0Ym3bkQSlMM8b0imVUQ2L4w9ftdBiR YZlcONOefQRpJQP9pgAJfs6166G16miQEWLhoBGgfZR7H+aZ9/G6MK+LVPoP5sf4 J7tiSFx8Ul0rnSXVSFZMkWO3s0e4tK33W+VFk5SrAK7i/x6RmV74rY/PmHPa4KES nqg8UOZ7KzTIMsufA0pdbKZ0uxyCNsHIbJogBmkqZRgvmFAARYH0O18fgdel5Uhs R9uNibN7ZSREdAfWoOpa2U4EYMFOh80oBOvZjmdX4wPT6hW8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcLlMsYlq7U0vAalX7kIe5nFfd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGIyMjc3MTItYWU1My0z ZjQxLWE4YTQtNzZjYTg3Y2E2NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADRvvTnC/ilmYj27LO2Y0tXXuJJUEb1zQRw2nxJsj4Xp7lX0/2slen5 EQNOhdfyVB/FJ/ym/mijHLd5E8nXqrLsbiouA+aXK0YaLXwgbUxPFkdY1sXh4HOI nW5x3lIJd+6G10WDUIT2AbCWkhdgjWd1reAPyYM1dPb8xarsnHZU5xTuF0wpzl0B Ptzgp3Fy1yP333tcH54xnU7BzFsKBkPDAkZRhXWtRS0kvk3WXW/xR/oVTBJHjxXK Dj67T7ovYq1goMGJYDj00PiZwafkaTtRC7CbAND54BhGUaUODIwnNMBwm7KLY4Dj ZXFrRVVUEGBW56LZET0L3TipxjeaSjM= -----END CERTIFICATE-----Generated at Tue Jun 3 05:45:36 2025 by rpki-client