$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a265d6dd-d31b-3ce4-85b9-38f232c805a1.roa File: a265d6dd-d31b-3ce4-85b9-38f232c805a1.roa (raw, json) Hash identifier: y1HXLIw2MSPFYGT0i4UcimJSYzLxfHcqOWfOkgfZ02s= Subject key identifier: 47:24:1A:7A:5D:B7:5B:68:04:94:84:C3:A8:C3:40:DC:79:D4:B3:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D1655F4DFED19F063A85E300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a265d6dd-d31b-3ce4-85b9-38f232c805a1.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 13367 IP address blocks: 68.59.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:5f:4d:fe:d1:9f:06:3a:85:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=9dc878b8-e37d-429c-85d5-7ae2df31b2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:29:16:d7:9e:4e:b9:0e:8f:62:8f:3d:00:b5: 03:ca:06:a1:b1:49:34:c3:fe:6f:56:52:af:10:8d: e2:55:92:7c:3d:df:e3:64:fc:4e:7a:19:54:98:db: df:76:f0:ce:b2:96:96:f4:c0:47:c4:05:0d:59:8a: 04:66:f0:06:35:f7:5e:3b:b6:48:ee:c2:9a:66:4e: bb:39:9c:e6:32:bd:60:f6:d2:b3:6b:cb:07:9e:a0: 09:d9:a1:ec:93:d9:98:f1:4b:50:a6:b5:5b:a0:53: 5c:7d:4b:86:9c:12:95:78:90:cb:ec:7e:16:e5:f7: 13:84:15:c8:ae:02:42:22:f1:31:a3:4b:47:50:a6: 98:dc:35:f7:8f:01:80:b3:97:e4:b3:a6:5c:73:73: 3b:86:a6:1d:77:83:97:af:30:1b:78:32:63:ed:15: a7:d1:b6:89:dd:b6:0c:0b:d3:8e:4d:a7:8a:3e:06: a2:a1:1f:e8:2b:b4:c3:1a:6a:48:b0:28:7f:6e:bd: df:84:a5:d8:9e:2c:3c:c6:93:a6:b9:f9:d3:2b:d4: 0f:5e:a8:a0:79:80:d5:d5:55:19:14:e5:56:da:7e: e1:64:2a:8f:09:bc:f9:7c:0a:41:2f:48:7b:4f:5f: e2:0c:c7:7f:ef:78:6d:68:cb:5e:81:c5:97:c6:8b: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:24:1A:7A:5D:B7:5B:68:04:94:84:C3:A8:C3:40:DC:79:D4:B3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a265d6dd-d31b-3ce4-85b9-38f232c805a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:b2:86:c5:2b:44:80:00:f1:7d:d9:23:0e:5f:45:68:8e:30: 28:35:d0:44:57:ad:06:8c:31:76:a2:77:98:f6:8b:99:ef:c5: 37:cf:df:d4:0d:bf:bc:6c:37:8f:87:96:73:23:76:25:97:e0: 09:51:e6:79:c2:7e:f3:4c:bb:61:7f:2c:12:01:b0:9c:0e:cf: 52:28:5c:26:b6:11:2b:64:bc:a8:5a:bd:78:ad:44:5f:3f:7b: 84:a8:7a:c2:78:34:11:ce:cc:4a:bc:b6:6a:ca:52:2b:b9:cc: 9a:0a:1d:23:ec:c4:2a:55:ed:72:b0:d6:ee:7e:97:af:d3:7b: 49:b8:82:b3:64:68:71:7e:28:88:7e:a7:b7:85:75:62:d0:04: ff:74:66:b9:d4:2e:78:8c:7c:3f:01:e2:fb:88:67:a9:21:dd: 4b:d4:1a:b6:e6:73:d9:7c:b0:63:0d:ee:2a:be:32:57:0c:45: 3c:94:07:10:d6:1a:12:35:e0:1c:b2:8e:7a:ed:2c:41:20:f2: 7d:81:1a:25:d7:af:46:6c:a2:ab:cc:66:28:91:ee:f8:07:ba: 0d:1d:64:ed:0a:7e:96:a8:0b:e0:b0:f9:12:76:8d:e0:44:63: cf:ad:34:3a:0d:59:36:c3:87:a7:e3:1e:73:85:86:66:56:e9: 73:3b:07:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZV9N/tGfBjqF4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk OWRjODc4YjgtZTM3ZC00MjljLTg1ZDUtN2FlMmRmMzFiMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmikW155OuQ6PYo89ALUDygahsUk0w/5vVlKv EI3iVZJ8Pd/jZPxOehlUmNvfdvDOspaW9MBHxAUNWYoEZvAGNfdeO7ZI7sKaZk67 OZzmMr1g9tKza8sHnqAJ2aHsk9mY8UtQprVboFNcfUuGnBKVeJDL7H4W5fcThBXI rgJCIvExo0tHUKaY3DX3jwGAs5fks6Zcc3M7hqYdd4OXrzAbeDJj7RWn0baJ3bYM C9OOTaeKPgaioR/oK7TDGmpIsCh/br3fhKXYniw8xpOmufnTK9QPXqigeYDV1VUZ FOVW2n7hZCqPCbz5fApBL0h7T1/iDMd/73htaMtegcWXxosUfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEckGnpdt1toBJSEw6jDQNx51LMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI2NWQ2ZGQtZDMxYi0z Y2U0LTg1YjktMzhmMjMyYzgwNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDsuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANmyhsUrRIAA8X3ZIw5fRWiOMCg10ERXrQaMMXaid5j2i5nvxTfP39QN v7xsN4+HlnMjdiWX4AlR5nnCfvNMu2F/LBIBsJwOz1IoXCa2EStkvKhavXitRF8/ e4SoesJ4NBHOzEq8tmrKUiu5zJoKHSPsxCpV7XKw1u5+l6/Te0m4grNkaHF+KIh+ p7eFdWLQBP90ZrnULniMfD8B4vuIZ6kh3UvUGrbmc9l8sGMN7iq+MlcMRTyUBxDW GhI14ByyjnrtLEEg8n2BGiXXr0ZsoqvMZiiR7vgHug0dZO0KfpaoC+Cw+RJ2jeBE Y8+tNDoNWTbDh6fjHnOFhmZW6XM7B70= -----END CERTIFICATE-----Generated at Wed Jun 4 23:24:07 2025 by rpki-client