$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b9b7f7a-0f2e-3f37-b524-df48964e2a01.roa File: 8b9b7f7a-0f2e-3f37-b524-df48964e2a01.roa (raw, json) Hash identifier: YkAJXdC/CWh+B7487qact7mzGF6vhCtPNepu2TJIgFE= Subject key identifier: A6:DF:6D:7C:99:04:AE:F3:7C:FD:4A:BE:94:EA:1C:41:39:E0:23:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431FCE6EC8D096302D03840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b9b7f7a-0f2e-3f37-b524-df48964e2a01.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.48.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:fc:e6:ec:8d:09:63:02:d0:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=39a34f3f-7a8b-4363-b787-4da1111c2d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:b2:76:e7:54:9a:ac:43:b5:39:05:fe:cf: 3c:82:88:f9:a5:0c:c7:72:50:83:74:6a:d4:61:d0: 02:f1:15:5a:0c:af:5f:87:e4:d7:56:77:d0:8d:8e: 62:42:19:86:47:e3:78:cf:4d:08:b2:3d:13:cf:82: af:bf:c9:21:72:3f:76:81:37:d9:99:64:e6:84:28: 44:2f:6c:bc:ad:38:91:25:a4:35:76:38:ab:bb:a5: 51:4e:79:79:41:0e:19:e1:94:c8:04:c0:4e:1a:c7: 35:97:9f:e1:ef:3d:a7:c4:48:d2:a5:a3:bf:8e:7a: 7c:ab:88:68:a4:77:fd:d0:01:4d:dc:95:ec:b1:58: b8:e4:f9:dd:1c:67:21:33:d8:6a:89:e8:dd:71:7e: 59:10:01:ee:b6:39:c4:d0:f0:6a:6d:1f:f4:31:7d: fa:9a:e2:d4:96:b9:52:6f:ca:a0:4e:b8:cb:5b:d1: f6:1a:92:0b:dd:7b:ee:7c:67:0e:bc:15:00:08:34: 3c:5c:b4:7b:7c:f1:9d:c6:53:74:06:88:f9:98:14: 0a:6c:d5:a2:32:5d:ce:bf:98:22:bd:22:f2:9c:3a: 2f:eb:07:00:d6:26:c3:55:86:2e:76:05:67:55:e0: 18:a1:2d:9d:bd:08:96:50:45:da:a8:ba:12:0f:85: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DF:6D:7C:99:04:AE:F3:7C:FD:4A:BE:94:EA:1C:41:39:E0:23:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b9b7f7a-0f2e-3f37-b524-df48964e2a01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:3f:a5:45:73:97:a8:96:84:43:33:34:84:2c:15:7a:57:0d: 6c:99:dc:54:e5:d6:6b:cc:41:74:83:b8:23:eb:75:a0:a9:b1: a5:69:35:40:ed:97:ea:28:e9:e7:bb:2c:18:8e:55:aa:86:12: 45:92:ca:29:df:4d:d1:01:0b:0c:8d:27:22:76:f8:2a:ee:eb: de:a1:90:38:dd:8c:64:49:0d:4f:87:f7:86:8f:16:08:de:2b: db:3d:a3:4b:24:3c:b7:01:cd:ac:9e:c3:2d:ff:fb:33:71:3c: e6:05:85:cd:31:3a:0d:04:bb:20:e6:ab:75:ca:84:7f:60:54: 48:38:81:52:aa:a0:72:20:e5:f6:a2:5f:26:ea:32:0b:3e:ee: f3:e6:5e:75:fc:e6:85:b2:fc:0b:96:54:7a:0a:2f:ef:0a:2e: 81:e1:c9:e4:f5:ae:9f:5e:57:60:d0:25:70:2e:2f:51:12:5b: b6:74:ab:63:4b:49:f4:2e:80:20:5c:36:9d:86:99:99:67:fe: 12:2f:33:54:64:f8:74:b2:65:2c:35:cd:4d:2d:e3:1e:e0:6e: 93:96:0f:b5:0c:c3:47:25:06:fb:f9:bd:a8:c4:1a:d0:40:f8: 75:09:b9:ff:8d:75:53:77:6e:a8:98:83:1d:64:f4:db:f1:2d: 33:1a:08:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfzm7I0JYwLQOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzlhMzRmM2YtN2E4Yi00MzYzLWI3ODctNGRhMTExMWMyZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmWydudUmqxDtTkF/s88goj5pQzHclCDdGrU YdAC8RVaDK9fh+TXVnfQjY5iQhmGR+N4z00Isj0Tz4Kvv8khcj92gTfZmWTmhChE L2y8rTiRJaQ1djiru6VRTnl5QQ4Z4ZTIBMBOGsc1l5/h7z2nxEjSpaO/jnp8q4ho pHf90AFN3JXssVi45PndHGchM9hqiejdcX5ZEAHutjnE0PBqbR/0MX36muLUlrlS b8qgTrjLW9H2GpIL3XvufGcOvBUACDQ8XLR7fPGdxlN0Boj5mBQKbNWiMl3Ov5gi vSLynDov6wcA1ibDVYYudgVnVeAYoS2dvQiWUEXaqLoSD4UJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbfbXyZBK7zfP1KvpTqHEE54COxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI5YjdmN2EtMGYyZS0z ZjM3LWI1MjQtZGY0ODk2NGUyYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKk/pUVzl6iWhEMzNIQsFXpXDWyZ3FTl1mvMQXSDuCPrdaCpsaVpNUDt l+oo6ee7LBiOVaqGEkWSyinfTdEBCwyNJyJ2+Cru696hkDjdjGRJDU+H94aPFgje K9s9o0skPLcBzayewy3/+zNxPOYFhc0xOg0EuyDmq3XKhH9gVEg4gVKqoHIg5fai XybqMgs+7vPmXnX85oWy/AuWVHoKL+8KLoHhyeT1rp9eV2DQJXAuL1ESW7Z0q2NL SfQugCBcNp2GmZln/hIvM1Rk+HSyZSw1zU0t4x7gbpOWD7UMw0clBvv5vajEGtBA +HUJuf+NdVN3bqiYgx1k9NvxLTMaCCI= -----END CERTIFICATE-----Generated at Wed Jun 4 23:03:51 2025 by rpki-client