$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90aaec78-88e0-3962-a29b-c066bd26de9a.roa File: 90aaec78-88e0-3962-a29b-c066bd26de9a.roa (raw, json) Hash identifier: zngTrTxvPYsbj23IZsnCuzLo1M9uzJmuHcXEyXOzhZY= Subject key identifier: 6F:7B:33:D3:88:0E:35:1A:42:87:93:65:FD:EE:5B:AC:9E:53:D2:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4308AE0313DCE9CAC9B9180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90aaec78-88e0-3962-a29b-c066bd26de9a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.32.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:8a:e0:31:3d:ce:9c:ac:9b:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=87dceabc-6398-48b3-8008-38503636870b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:e6:16:8b:11:18:9e:46:13:34:10:50:c6: f1:c3:b9:3e:ad:50:18:64:fa:49:16:d1:a2:b6:65: c8:90:3b:38:a5:0a:80:20:2b:e2:35:1c:9c:d9:21: 4d:9f:14:6a:80:06:7d:b6:9a:5e:84:59:a7:43:56: 9f:20:a8:5d:04:be:6b:6d:33:81:51:ab:dd:b3:ea: ef:a3:ae:93:19:ee:5f:de:5b:70:43:b0:cb:4b:96: 92:8d:e8:dc:df:aa:a1:e9:bb:49:63:43:9a:c6:6d: ad:2a:c5:e0:1b:7e:b2:ff:bf:ab:eb:a1:63:d3:a9: 98:b0:43:d2:94:c2:f5:df:e7:f1:d0:6e:25:af:58: 01:e3:8e:4a:71:d9:b8:9f:bc:a8:6b:54:3e:73:d2: 21:3b:af:2c:7e:bc:94:23:da:36:f1:5b:54:00:93: a0:35:54:99:0b:33:d9:43:65:c4:02:47:16:2e:ad: 0f:80:f3:e8:82:8f:7f:3f:0a:37:c5:fd:01:dd:51: 34:7c:03:f0:54:23:c0:a5:6c:19:46:c3:50:41:24: d8:a5:e0:11:8d:ce:c9:46:ef:7d:d6:4c:55:95:19: f4:df:33:2e:14:32:f5:57:cd:43:b7:18:80:e6:ad: 25:d0:f4:cb:2a:ee:df:58:56:17:21:38:31:43:ac: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7B:33:D3:88:0E:35:1A:42:87:93:65:FD:EE:5B:AC:9E:53:D2:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90aaec78-88e0-3962-a29b-c066bd26de9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:98:22:5f:59:1a:5e:2d:4a:3c:f9:3b:a2:d5:30:3a:a4:d9: 3e:1f:94:2f:a0:98:76:2d:55:30:fc:ce:f7:9f:5e:f3:4f:25: 3d:62:9d:87:45:77:c0:bf:10:e3:50:fc:71:75:94:05:ed:ab: 27:ec:05:0a:60:f0:b5:e8:01:b3:9d:8d:20:ac:e9:2d:9a:a6: 44:f7:9f:5a:f3:68:7f:fd:60:77:6c:82:42:10:fc:c3:55:7a: 5b:ad:a9:bb:2e:ac:4c:cb:83:9e:b7:4c:dd:05:f8:65:f2:62: be:39:2b:fc:86:8b:35:a7:ee:67:f7:35:e4:e9:81:fb:3e:76: 60:41:19:74:68:39:3d:e1:07:8a:e5:80:f7:99:5d:e3:e9:cb: 06:de:12:80:7f:77:c5:27:0d:cd:c8:ca:91:0c:d9:62:9e:62: 34:f5:72:55:c9:39:2b:52:d8:05:19:00:c3:97:48:fe:f4:e2: 14:ff:2b:de:ad:60:54:7c:20:14:61:e8:46:8e:82:a4:95:80: 02:d8:0f:1a:e7:5e:ee:71:e2:e0:c5:77:ff:08:12:c9:b0:60: f9:f6:15:63:36:55:4c:5b:d9:56:3f:56:60:f3:55:8a:a5:7b: 63:40:97:27:02:b3:10:21:52:b7:a5:4a:6f:3c:09:a7:0c:22: 8f:1c:dd:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMIrgMT3OnKybkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODdkY2VhYmMtNjM5OC00OGIzLTgwMDgtMzg1MDM2MzY4NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRnmFosRGJ5GEzQQUMbxw7k+rVAYZPpJFtGi tmXIkDs4pQqAICviNRyc2SFNnxRqgAZ9tppehFmnQ1afIKhdBL5rbTOBUavds+rv o66TGe5f3ltwQ7DLS5aSjejc36qh6btJY0Oaxm2tKsXgG36y/7+r66Fj06mYsEPS lML13+fx0G4lr1gB445Kcdm4n7yoa1Q+c9IhO68sfryUI9o28VtUAJOgNVSZCzPZ Q2XEAkcWLq0PgPPogo9/Pwo3xf0B3VE0fAPwVCPApWwZRsNQQSTYpeARjc7JRu99 1kxVlRn03zMuFDL1V81DtxiA5q0l0PTLKu7fWFYXITgxQ6xiuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG97M9OIDjUaQoeTZf3uW6yeU9LTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTBhYWVjNzgtODhlMC0z OTYyLWEyOWItYzA2NmJkMjZkZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWYIl9ZGl4tSjz5O6LVMDqk2T4flC+gmHYtVTD8zvefXvNPJT1inYdF d8C/EONQ/HF1lAXtqyfsBQpg8LXoAbOdjSCs6S2apkT3n1rzaH/9YHdsgkIQ/MNV elutqbsurEzLg563TN0F+GXyYr45K/yGizWn7mf3NeTpgfs+dmBBGXRoOT3hB4rl gPeZXePpywbeEoB/d8UnDc3IypEM2WKeYjT1clXJOStS2AUZAMOXSP704hT/K96t YFR8IBRh6EaOgqSVgALYDxrnXu5x4uDFd/8IEsmwYPn2FWM2VUxb2VY/VmDzVYql e2NAlycCsxAhUrelSm88CacMIo8c3RA= -----END CERTIFICATE-----Generated at Tue Jun 3 06:04:08 2025 by rpki-client