$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c4b6ec-2959-312d-af8c-8c4defab0810.roa File: a7c4b6ec-2959-312d-af8c-8c4defab0810.roa (raw, json) Hash identifier: /606+XCMtIzb5TzfvKQT9yEFZ6MmyOgK5rHGD3rTaZs= Subject key identifier: 3D:6C:B1:65:D3:49:69:A0:65:BD:EB:CF:A9:77:11:52:19:48:14:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF753B8F923BF086B02919D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c4b6ec-2959-312d-af8c-8c4defab0810.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 68.35.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:3b:8f:92:3b:f0:86:b0:29:19:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=ac076280-98ee-4a35-bf32-92f06a15f3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:1f:b2:f2:35:a1:83:b6:72:87:72:e5:e3: a0:e1:19:e0:81:d6:b5:a5:21:86:d6:68:f7:18:c4: b9:78:60:62:66:36:62:1f:84:b8:bf:c3:ca:ac:3c: 8c:47:ea:c3:0a:1a:94:c8:25:d9:23:07:24:1e:6b: 25:37:12:dd:40:74:13:5c:aa:9b:47:18:a4:be:3e: bf:48:ff:68:dd:22:78:3d:36:c9:34:66:31:f4:9d: c7:fa:13:aa:e9:e3:f2:54:1f:64:9f:cb:07:bd:8a: 84:ee:fe:6c:b7:96:7a:7a:8c:53:8b:7b:bf:4a:2c: f0:30:ef:93:e9:04:61:a3:cb:03:0c:6f:de:f2:4e: d6:93:ed:6f:a5:0c:ea:19:14:e2:6e:92:df:fe:b1: 02:9f:d4:b0:3b:49:d7:48:d4:ba:61:31:4e:49:1b: d4:84:41:51:c9:71:51:76:39:86:40:86:06:1e:02: 06:82:4b:3f:ab:16:dd:40:51:fa:62:6f:cb:54:3a: 9f:48:76:79:0f:47:03:62:3c:48:2c:9f:25:42:a0: b8:57:8a:a9:68:8c:61:75:67:f7:dd:cc:d2:ae:50: 91:d6:50:e5:0f:a2:cc:f7:29:58:df:f5:d8:18:17: 75:4b:99:c4:4f:65:e6:58:0c:98:c1:b7:87:c4:51: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6C:B1:65:D3:49:69:A0:65:BD:EB:CF:A9:77:11:52:19:48:14:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c4b6ec-2959-312d-af8c-8c4defab0810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bb:d1:c2:6e:83:91:0f:8d:54:cc:f8:a1:7a:b1:ff:72:9f: f2:28:d5:9d:6d:5c:20:68:2e:b7:37:ba:3b:9d:80:80:5c:52: ea:cb:74:10:a8:27:c4:cc:6b:f5:47:fd:08:56:46:b0:ab:d6: d7:4b:16:fa:29:0f:10:6f:dc:76:1f:26:12:d7:1f:d3:19:c8: 01:b1:15:f1:5f:4f:43:e2:10:19:5c:69:bb:66:b6:da:6f:3e: 04:c1:5b:a2:04:fd:50:17:44:cd:f0:72:4f:1a:94:ca:57:74: ad:90:09:d5:2c:9c:b5:bd:d0:ab:82:af:38:45:62:03:c8:eb: 1f:3d:b5:bb:eb:48:22:ba:34:1b:cd:fc:59:51:a1:3f:68:04: 83:fb:cd:96:1d:57:27:a4:17:99:58:b6:3e:83:d2:f4:18:a2: c1:2e:a8:da:b1:2d:47:e4:e8:cf:ef:53:3a:90:d9:b3:b8:bd: a5:b8:59:79:c9:fb:23:f1:0d:fe:0d:cf:35:66:04:84:15:81: 7b:69:99:c5:77:d2:dc:6f:d7:00:05:40:4f:0a:07:eb:9f:37: 4b:0a:8f:5c:b9:13:5d:e4:d2:0a:31:cd:a4:9d:11:bd:a2:b8: ae:a2:55:a8:a3:a6:3c:14:07:5c:78:e3:9c:c0:6a:25:09:65: 3d:f2:e6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dTuPkjvwhrApGdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk YWMwNzYyODAtOThlZS00YTM1LWJmMzItOTJmMDZhMTVmM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd4fsvI1oYO2cody5eOg4Rnggda1pSGG1mj3 GMS5eGBiZjZiH4S4v8PKrDyMR+rDChqUyCXZIwckHmslNxLdQHQTXKqbRxikvj6/ SP9o3SJ4PTbJNGYx9J3H+hOq6ePyVB9kn8sHvYqE7v5st5Z6eoxTi3u/SizwMO+T 6QRho8sDDG/e8k7Wk+1vpQzqGRTibpLf/rECn9SwO0nXSNS6YTFOSRvUhEFRyXFR djmGQIYGHgIGgks/qxbdQFH6Ym/LVDqfSHZ5D0cDYjxILJ8lQqC4V4qpaIxhdWf3 3czSrlCR1lDlD6LM9ylY3/XYGBd1S5nET2XmWAyYwbeHxFH4oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1ssWXTSWmgZb3rz6l3EVIZSBT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdjNGI2ZWMtMjk1OS0z MTJkLWFmOGMtOGM0ZGVmYWIwODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe70cJug5EPjVTM+KF6sf9yn/Io1Z1tXCBoLrc3ujudgIBcUurLdBCo J8TMa/VH/QhWRrCr1tdLFvopDxBv3HYfJhLXH9MZyAGxFfFfT0PiEBlcabtmttpv PgTBW6IE/VAXRM3wck8alMpXdK2QCdUsnLW90KuCrzhFYgPI6x89tbvrSCK6NBvN /FlRoT9oBIP7zZYdVyekF5lYtj6D0vQYosEuqNqxLUfk6M/vUzqQ2bO4vaW4WXnJ +yPxDf4NzzVmBIQVgXtpmcV30txv1wAFQE8KB+ufN0sKj1y5E13k0goxzaSdEb2i uK6iVaijpjwUB1x445zAaiUJZT3y5sk= -----END CERTIFICATE-----Generated at Wed Jun 4 23:36:20 2025 by rpki-client