$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d346ab7-7aa6-364f-95bb-2efb23dd6101.roa File: 9d346ab7-7aa6-364f-95bb-2efb23dd6101.roa (raw, json) Hash identifier: wahTPwghgHDS7nHpf5GC6afhB/xdHRkw+RrP4SRQo8Y= Subject key identifier: 35:E4:1B:AA:51:D0:C3:84:23:53:0D:06:4A:EF:B1:93:CB:70:78:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F4AB4546DC48B9ED5E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d346ab7-7aa6-364f-95bb-2efb23dd6101.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.40.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f4:ab:45:46:dc:48:b9:ed:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=97fe2195-065b-4012-94fc-ae3e44f12e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:97:f6:18:72:e6:77:b2:93:ff:c4:20:3a: e0:ec:50:5e:6f:aa:43:3b:8b:30:8d:f4:54:95:5e: 27:8f:e2:76:73:71:2e:47:93:da:b7:fe:8f:2c:88: 82:85:e6:47:48:8a:02:86:d4:ed:58:16:3a:1e:a8: ab:cb:21:59:30:6b:d3:b4:eb:68:1d:8e:77:7c:ce: 00:e1:4e:f9:c2:3f:c8:c2:a4:39:f7:36:1f:01:81: 59:fc:60:2a:7a:45:9d:f9:1e:f3:82:94:10:ad:20: e2:15:f1:94:b2:86:05:ce:49:65:bc:c2:18:bc:51: de:39:01:02:08:15:c9:da:5f:04:ae:72:91:09:e5: 4a:ef:09:fe:38:57:dc:31:7d:df:f2:51:68:bd:48: 0c:f6:df:95:34:cf:03:cf:52:a8:d6:70:b1:a6:cd: 95:7f:82:e8:9b:18:87:9c:5f:a7:1f:db:af:77:62: fd:76:45:51:4d:7c:3c:f5:6f:9e:eb:8c:88:30:30: d7:c6:cb:44:db:73:97:82:3a:dc:5f:ea:83:70:28: 2a:fd:a3:70:50:7d:ce:a0:cb:7a:e7:f9:f8:e6:b7: 97:32:8e:79:34:93:45:d7:8f:46:5d:53:95:2a:24: 96:66:a8:13:59:ab:73:52:59:d4:01:dd:0c:fe:69: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E4:1B:AA:51:D0:C3:84:23:53:0D:06:4A:EF:B1:93:CB:70:78:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d346ab7-7aa6-364f-95bb-2efb23dd6101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:dd:90:12:4b:4c:82:46:ce:e6:6d:ba:fe:73:19:1d:46:10: 0f:fd:2c:83:df:61:f2:34:d7:cb:1c:74:16:1a:68:ba:1f:48: c0:bc:6e:20:ab:b0:df:c7:b0:d1:ac:f5:13:e8:f4:76:8d:14: 81:32:d5:a0:43:73:e5:29:9f:7f:c0:54:df:1c:83:a6:e7:97: a5:46:7c:44:ca:a2:3b:1e:0d:e1:f2:e3:e4:eb:5d:19:d6:60: 46:0d:42:8d:ca:6a:04:11:4d:be:5c:1b:8d:47:61:62:36:85: 13:e6:42:5a:0a:c4:aa:ed:17:c5:76:d2:17:36:23:0a:29:32: 05:e3:d3:e1:97:9d:ed:a1:e4:79:74:ac:7a:c5:84:fc:ce:e1: cb:2b:ab:cc:09:c5:ed:63:46:c1:c3:6c:01:01:a1:c3:d5:1c: 01:85:1e:1a:70:72:e0:ef:b4:32:f6:76:ec:be:f6:19:6c:1e: 65:58:e0:b0:f1:68:a0:54:68:62:2a:71:ec:80:43:b7:9a:a1: a0:6a:38:ec:05:2d:1f:28:99:a9:b0:9a:b9:05:f2:d5:5a:aa: 30:a6:58:b9:44:8e:0b:d9:83:5a:49:21:d1:e8:c4:76:74:1f: 75:d7:85:66:50:05:bf:9c:b5:17:4c:dd:af:b5:fa:62:33:2a: 8b:1b:cf:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfSrRUbcSLntXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTdmZTIxOTUtMDY1Yi00MDEyLTk0ZmMtYWUzZTQ0ZjEyZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kmX9hhy5neyk//EIDrg7FBeb6pDO4swjfRU lV4nj+J2c3EuR5Pat/6PLIiCheZHSIoChtTtWBY6HqiryyFZMGvTtOtoHY53fM4A 4U75wj/IwqQ59zYfAYFZ/GAqekWd+R7zgpQQrSDiFfGUsoYFzkllvMIYvFHeOQEC CBXJ2l8ErnKRCeVK7wn+OFfcMX3f8lFovUgM9t+VNM8Dz1Ko1nCxps2Vf4LomxiH nF+nH9uvd2L9dkVRTXw89W+e64yIMDDXxstE23OXgjrcX+qDcCgq/aNwUH3OoMt6 5/n45reXMo55NJNF149GXVOVKiSWZqgTWatzUlnUAd0M/mmsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXkG6pR0MOEI1MNBkrvsZPLcHglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQzNDZhYjctN2FhNi0z NjRmLTk1YmItMmVmYjIzZGQ2MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvdkBJLTIJGzuZtuv5zGR1GEA/9LIPfYfI018scdBYaaLofSMC8biCr sN/HsNGs9RPo9HaNFIEy1aBDc+Upn3/AVN8cg6bnl6VGfETKojseDeHy4+TrXRnW YEYNQo3KagQRTb5cG41HYWI2hRPmQloKxKrtF8V20hc2IwopMgXj0+GXne2h5Hl0 rHrFhPzO4csrq8wJxe1jRsHDbAEBocPVHAGFHhpwcuDvtDL2duy+9hlsHmVY4LDx aKBUaGIqceyAQ7eaoaBqOOwFLR8omamwmrkF8tVaqjCmWLlEjgvZg1pJIdHoxHZ0 H3XXhWZQBb+ctRdM3a+1+mIzKosbz1k= -----END CERTIFICATE-----Generated at Tue Jun 3 06:44:22 2025 by rpki-client