$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c6f407-9810-3f58-a03e-4fe398ea49ed.roa File: a1c6f407-9810-3f58-a03e-4fe398ea49ed.roa (raw, json) Hash identifier: +HkcLWiojprQb07EjrNlCXhDV/abuTvg8RGpoLNgUa4= Subject key identifier: D0:3F:9C:7A:78:60:67:07:2C:61:36:0B:C4:DE:A1:EE:E2:F0:91:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43099CB508248F030088D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c6f407-9810-3f58-a03e-4fe398ea49ed.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.40.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:99:cb:50:82:48:f0:30:08:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=459537b0-d90c-40ec-ba75-7b0fef98a259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:c9:c8:91:b9:30:61:c2:59:1a:58:f9:54: 63:35:52:0c:cc:82:07:0d:88:a3:a1:1c:37:d7:77: 64:50:61:d9:65:5c:06:2e:cd:08:7b:3c:51:37:98: 17:2e:17:56:c0:67:16:58:19:41:34:2d:1b:d2:dd: 83:81:c0:64:7e:9a:5d:55:3d:06:c9:49:ba:cb:b2: 88:87:86:33:c0:07:e2:af:e8:98:cc:b1:99:87:40: 4a:ed:78:30:c1:46:ad:a1:34:bb:ae:e7:79:03:5e: 17:51:83:98:12:2c:7c:76:b4:ed:7a:32:ca:33:4e: 26:e5:11:d2:33:ca:bd:93:d7:6f:8e:ec:e6:c0:d2: f3:e5:b4:d0:c2:4e:f2:79:d9:11:e9:6c:bc:5b:83: 45:e9:cd:ea:5a:3f:27:05:87:42:c4:3f:b3:a5:6b: 18:35:62:c9:ee:0b:34:9a:61:c5:ce:3d:27:79:b4: d8:16:12:3a:81:2a:f8:c8:59:3c:23:9e:0c:1a:a2: 88:08:63:b4:87:a9:9f:27:5c:5f:a3:0c:9c:7e:6b: 25:3d:01:cd:54:0b:10:cf:4f:86:45:cb:e6:8a:93: 5b:f2:47:58:a6:3b:c5:25:c8:00:13:05:ce:07:fc: 80:8b:81:86:d6:73:4f:0b:1c:b3:32:b9:dd:2f:e5: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3F:9C:7A:78:60:67:07:2C:61:36:0B:C4:DE:A1:EE:E2:F0:91:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c6f407-9810-3f58-a03e-4fe398ea49ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c7:94:08:12:0a:96:7a:26:63:20:58:19:b0:2e:59:34:6f: 3e:97:8c:b0:b0:11:14:a9:55:7d:77:4e:22:08:3a:20:19:d4: 39:78:af:29:3f:b3:84:d9:09:3b:3f:3c:a0:f3:73:66:70:88: be:0b:8f:68:f3:73:93:ba:ea:90:3c:ed:06:2f:8b:fd:de:13: 27:56:a9:b6:75:4f:48:e3:ff:84:22:1d:1c:59:ba:80:ee:d7: bc:07:bf:3f:4e:92:48:3f:12:55:4a:cc:28:50:3a:37:96:19: 16:2e:4d:2b:16:2e:f9:ac:e9:43:58:94:6c:44:a5:68:96:b0: 72:6d:5a:51:42:b1:6b:5b:2a:ad:a3:d5:a0:b7:e7:27:b7:fd: f1:e6:0d:31:b5:84:57:e8:6f:0a:ee:2f:fa:03:c1:4f:4c:f6: 3f:28:39:dc:6b:00:b0:f1:15:92:94:4f:36:ad:51:da:ab:f9: fb:16:0b:67:ff:9e:e0:50:36:68:3b:0e:9c:44:67:32:99:13: db:7b:3f:ab:8b:4a:3b:5e:63:cb:a9:93:af:6e:ad:a3:4f:d0: b9:f2:e0:3c:52:7a:5d:d5:bf:55:6f:71:ce:46:4a:b8:40:e3: de:f4:06:45:47:70:4a:2e:e8:9b:dc:b3:98:3a:5c:29:62:98: 28:f8:b5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMJnLUIJI8DAIjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDU5NTM3YjAtZDkwYy00MGVjLWJhNzUtN2IwZmVmOThhMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxunJyJG5MGHCWRpY+VRjNVIMzIIHDYijoRw3 13dkUGHZZVwGLs0IezxRN5gXLhdWwGcWWBlBNC0b0t2DgcBkfppdVT0GyUm6y7KI h4YzwAfir+iYzLGZh0BK7XgwwUatoTS7rud5A14XUYOYEix8drTtejLKM04m5RHS M8q9k9dvjuzmwNLz5bTQwk7yedkR6Wy8W4NF6c3qWj8nBYdCxD+zpWsYNWLJ7gs0 mmHFzj0nebTYFhI6gSr4yFk8I54MGqKICGO0h6mfJ1xfowycfmslPQHNVAsQz0+G RcvmipNb8kdYpjvFJcgAEwXOB/yAi4GG1nNPCxyzMrndL+UeuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA/nHp4YGcHLGE2C8Teoe7i8JFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTFjNmY0MDctOTgxMC0z ZjU4LWEwM2UtNGZlMzk4ZWE0OWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3HlAgSCpZ6JmMgWBmwLlk0bz6XjLCwERSpVX13TiIIOiAZ1Dl4ryk/ s4TZCTs/PKDzc2ZwiL4Lj2jzc5O66pA87QYvi/3eEydWqbZ1T0jj/4QiHRxZuoDu 17wHvz9Okkg/ElVKzChQOjeWGRYuTSsWLvms6UNYlGxEpWiWsHJtWlFCsWtbKq2j 1aC35ye3/fHmDTG1hFfobwruL/oDwU9M9j8oOdxrALDxFZKUTzatUdqr+fsWC2f/ nuBQNmg7DpxEZzKZE9t7P6uLSjteY8upk69uraNP0Lny4DxSel3Vv1Vvcc5GSrhA 4970BkVHcEou6Jvcs5g6XClimCj4tYs= -----END CERTIFICATE-----Generated at Tue Jun 3 04:57:50 2025 by rpki-client