$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/935f5c26-f36c-34f5-9240-2deaaf8c47c7.roa File: 935f5c26-f36c-34f5-9240-2deaaf8c47c7.roa (raw, json) Hash identifier: KlBpiRXXi57doTeQbA5So8eIIrRRSJwjKytEdESJTBE= Subject key identifier: 25:B4:D0:3F:74:4F:E9:E0:CC:39:90:E5:38:B9:F1:67:F8:42:76:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F449203B68CD7C7C6740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/935f5c26-f36c-34f5-9240-2deaaf8c47c7.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.40.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f4:49:20:3b:68:cd:7c:7c:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f479b8d5-e6bf-4f85-a3dc-13dbfc80f5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:16:88:38:51:ec:0b:42:d2:da:ab:89:fa: c1:3d:35:b4:46:d5:6e:39:0b:04:77:ec:30:de:ca: 89:0b:87:1a:91:31:64:5d:44:b5:2f:20:43:98:a1: 6c:6d:eb:00:27:7d:ad:d8:a1:6e:cb:de:60:07:51: 3d:27:14:06:10:03:da:f4:d5:e1:f1:f8:b0:af:36: da:64:9a:af:f0:73:50:59:bf:29:11:63:4c:6c:67: bb:19:72:a1:9a:a9:02:9f:ff:2f:62:16:ec:54:6c: 6a:15:b1:82:cd:5b:08:77:81:0c:81:0f:83:40:49: 39:91:3e:79:88:39:b9:10:29:2f:27:1c:ad:99:b6: 9f:41:ea:c9:71:68:f6:a8:cb:df:3b:df:42:4b:7a: bc:c6:49:27:50:9a:93:07:56:0f:5b:fd:04:68:bd: 7e:c4:49:58:1d:09:4e:94:5b:7e:f2:f1:65:97:78: 7e:9c:fe:d7:58:44:8d:4e:27:13:9b:1b:c4:20:6b: 52:6c:bd:6c:1b:3a:d2:4a:d0:92:53:4c:b2:be:9b: e6:3c:d2:7e:9c:fb:7f:29:03:ed:8f:a6:78:d6:47: 75:5f:d7:6d:4b:16:94:55:d6:e4:48:99:21:f2:19: 51:cf:c4:57:ad:1d:ae:cf:6d:26:59:cd:be:64:c7: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:D0:3F:74:4F:E9:E0:CC:39:90:E5:38:B9:F1:67:F8:42:76:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/935f5c26-f36c-34f5-9240-2deaaf8c47c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a2:31:e8:ef:76:b6:de:2b:27:d0:eb:3c:fe:97:a8:58:39: de:d7:be:9b:eb:d9:8e:2d:99:5c:45:67:9f:34:ae:6f:8e:07: 69:ec:b6:d1:e7:5a:6b:86:4a:d3:0e:01:fc:12:af:57:22:23: 16:11:fc:5f:37:34:a8:e7:2d:db:db:38:0f:cf:53:b5:c7:8c: 52:e7:6e:d4:d2:28:fc:6c:a5:33:da:31:71:70:9a:c5:44:7a: fe:c6:f2:69:44:08:12:c9:b8:e3:98:3b:d2:95:04:82:54:45: 6d:4c:ec:f9:0a:f0:64:b5:c1:d2:67:db:f9:91:48:61:5d:79: db:af:ba:c5:13:91:13:61:45:ce:6f:e8:59:e0:26:b7:22:1f: 37:69:bf:26:dc:d5:36:15:7d:53:7f:4d:d9:e3:b5:b8:92:a1: 6c:bc:06:11:e5:07:03:c2:ed:5f:26:3a:97:ff:b0:ff:93:ce: a6:99:c4:37:f5:21:36:0d:04:6e:58:10:5e:a5:5c:87:36:5e: ab:ad:89:3f:60:fb:f0:33:0f:98:0a:ae:59:b1:f7:04:62:0d: f1:73:c2:9d:38:3f:e1:4f:c0:ed:d3:f4:5f:e7:88:d2:57:af: 77:e2:12:b8:ed:dc:30:79:2e:3e:36:d6:34:0a:c6:1a:6a:23: d2:27:74:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfRJIDtozXx8Z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjQ3OWI4ZDUtZTZiZi00Zjg1LWEzZGMtMTNkYmZjODBmNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhssWiDhR7AtC0tqrifrBPTW0RtVuOQsEd+ww 3sqJC4cakTFkXUS1LyBDmKFsbesAJ32t2KFuy95gB1E9JxQGEAPa9NXh8fiwrzba ZJqv8HNQWb8pEWNMbGe7GXKhmqkCn/8vYhbsVGxqFbGCzVsId4EMgQ+DQEk5kT55 iDm5ECkvJxytmbafQerJcWj2qMvfO99CS3q8xkknUJqTB1YPW/0EaL1+xElYHQlO lFt+8vFll3h+nP7XWESNTicTmxvEIGtSbL1sGzrSStCSU0yyvpvmPNJ+nPt/KQPt j6Z41kd1X9dtSxaUVdbkSJkh8hlRz8RXrR2uz20mWc2+ZMe2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW00D90T+ngzDmQ5Ti58Wf4QnbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTM1ZjVjMjYtZjM2Yy0z NGY1LTkyNDAtMmRlYWFmOGM0N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGiMejvdrbeKyfQ6zz+l6hYOd7Xvpvr2Y4tmVxFZ580rm+OB2nsttHn WmuGStMOAfwSr1ciIxYR/F83NKjnLdvbOA/PU7XHjFLnbtTSKPxspTPaMXFwmsVE ev7G8mlECBLJuOOYO9KVBIJURW1M7PkK8GS1wdJn2/mRSGFdeduvusUTkRNhRc5v 6FngJrciHzdpvybc1TYVfVN/TdnjtbiSoWy8BhHlBwPC7V8mOpf/sP+TzqaZxDf1 ITYNBG5YEF6lXIc2XqutiT9g+/AzD5gKrlmx9wRiDfFzwp04P+FPwO3T9F/niNJX r3fiErjt3DB5Lj421jQKxhpqI9IndBw= -----END CERTIFICATE-----Generated at Tue Jun 3 04:55:01 2025 by rpki-client