$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa File: 8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa (raw, json) Hash identifier: nQwzk5WmWBDUD7LVBz3lIS9TWU/RmBXS22xKYnnshHc= Subject key identifier: AD:1C:A5:32:0A:72:69:10:44:D1:6B:C6:E8:78:09:0C:E5:98:D4:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431FD091BF89C6EA235FF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.48.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:fd:09:1b:f8:9c:6e:a2:35:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8296991f-c961-4e1a-aace-03a2925b0376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:26:13:f2:0e:ff:8f:f1:83:4f:3b:d1:fe: 33:e5:96:82:2f:a9:2b:69:d2:b2:d8:f1:77:22:d3: 70:1b:33:17:34:ae:b4:48:60:37:ed:a1:7e:50:6c: 2e:3b:91:4a:8b:5b:0d:74:18:68:45:65:ce:c5:a5: 24:33:f1:7d:3a:bb:6a:6f:0e:fd:69:27:95:df:7e: 24:56:b9:f8:28:f2:fd:63:9f:ed:05:7c:d1:c2:02: f9:46:e0:f3:ef:6d:a4:4b:b5:04:82:2b:7b:24:20: f9:ec:ba:c8:62:3c:d4:8b:0d:9e:c3:35:be:3b:b1: 4f:5e:b9:e4:99:9b:99:53:37:8d:91:ac:5e:92:27: 52:c3:25:93:00:3e:91:3c:c4:cd:e2:0a:5a:30:57: 54:6f:8b:9f:a4:6b:b7:55:da:d1:94:5f:b2:85:ed: 3d:16:ee:95:5a:ab:08:ff:7e:1c:19:5a:e8:26:9b: 36:47:65:83:e1:27:ff:8d:86:dd:20:00:76:d2:0d: 6a:89:cd:f0:c2:8a:8e:00:3f:f9:45:2d:51:75:85: 70:08:13:23:ae:62:6b:41:10:3b:fa:e7:57:6c:90: 54:80:30:e5:52:e2:b4:00:cc:00:ae:a0:0c:c2:37: db:2e:20:13:8f:10:cf:ed:ec:d0:36:d8:c9:d3:23: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1C:A5:32:0A:72:69:10:44:D1:6B:C6:E8:78:09:0C:E5:98:D4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e9:6e:f8:25:a2:ec:37:c0:76:82:fc:b4:66:25:7a:c9:9f: 83:cd:5d:29:6d:ea:be:85:0f:e4:f1:72:85:3c:22:d7:15:fd: 58:31:30:83:7a:e1:35:d8:3c:2b:14:df:78:29:ca:0e:f3:6d: 83:a0:7d:f5:02:9c:9a:f6:80:23:15:a1:1b:1f:6e:c9:eb:6e: 19:e0:82:25:01:a6:03:93:e8:af:ab:75:8b:6e:74:2e:cf:a7: ea:4b:ee:b8:c0:e4:a7:59:f5:39:d3:40:0b:47:03:79:f7:81: 8e:ef:8d:7f:5f:5d:44:97:e2:88:55:09:65:d6:73:17:b9:d4: 0b:a0:c5:e2:3d:bf:36:03:bf:ca:d5:d5:48:0b:64:4a:e1:0c: 69:36:77:0d:88:fa:b7:e3:db:cc:f8:74:c8:6e:ec:3b:3e:22: fc:a1:d0:09:91:19:00:a3:76:eb:2b:3e:0c:bc:a5:33:ec:6b: 0f:44:98:99:ff:20:91:07:5d:80:5c:8f:53:90:40:91:17:b7: b7:1c:a6:01:fb:43:c5:1d:ad:df:26:26:54:37:2d:57:c2:f3: 7e:65:a6:18:c6:af:5e:04:ad:c2:ab:56:53:e1:d7:89:bd:50: 98:07:7a:b4:1e:2d:0b:5e:9f:6c:e3:9b:d9:d6:c7:88:00:28: fa:6a:7e:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMf0JG/icbqI1/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODI5Njk5MWYtYzk2MS00ZTFhLWFhY2UtMDNhMjkyNWIwMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbMmE/IO/4/xg0870f4z5ZaCL6kradKy2PF3 ItNwGzMXNK60SGA37aF+UGwuO5FKi1sNdBhoRWXOxaUkM/F9Ortqbw79aSeV334k Vrn4KPL9Y5/tBXzRwgL5RuDz722kS7UEgit7JCD57LrIYjzUiw2ewzW+O7FPXrnk mZuZUzeNkaxekidSwyWTAD6RPMTN4gpaMFdUb4ufpGu3VdrRlF+yhe09Fu6VWqsI /34cGVroJps2R2WD4Sf/jYbdIAB20g1qic3wwoqOAD/5RS1RdYVwCBMjrmJrQRA7 +udXbJBUgDDlUuK0AMwArqAMwjfbLiATjxDP7ezQNtjJ0yNxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0cpTIKcmkQRNFrxuh4CQzlmNRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI1ZGM1NWItMzc5ZC0z YWExLWIxZjQtZjY5YTFlMGU5NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLpbvglouw3wHaC/LRmJXrJn4PNXSlt6r6FD+TxcoU8ItcV/VgxMIN6 4TXYPCsU33gpyg7zbYOgffUCnJr2gCMVoRsfbsnrbhnggiUBpgOT6K+rdYtudC7P p+pL7rjA5KdZ9TnTQAtHA3n3gY7vjX9fXUSX4ohVCWXWcxe51AugxeI9vzYDv8rV 1UgLZErhDGk2dw2I+rfj28z4dMhu7Ds+Ivyh0AmRGQCjdusrPgy8pTPsaw9EmJn/ IJEHXYBcj1OQQJEXt7ccpgH7Q8Udrd8mJlQ3LVfC835lphjGr14ErcKrVlPh14m9 UJgHerQeLQten2zjm9nWx4gAKPpqfi4= -----END CERTIFICATE-----Generated at Tue Jun 3 05:46:11 2025 by rpki-client