$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a896b76c-4fc3-39c1-bc35-c65d78c4e014.roa File: a896b76c-4fc3-39c1-bc35-c65d78c4e014.roa (raw, json) Hash identifier: vpyK7l00R4i7G22WrvtXOKI+/16DoDbpWVCmNfcR0Sc= Subject key identifier: 68:8C:9D:E0:D3:B9:AE:A1:8C:7A:2B:44:29:0A:55:65:DF:E2:AC:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05DF521D4DA9B2707C7240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a896b76c-4fc3-39c1-bc35-c65d78c4e014.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 68.82.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:df:52:1d:4d:a9:b2:70:7c:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=0f249f6c-4363-4902-a447-634d96ac9ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:7d:28:ee:cb:da:03:46:ba:35:2c:b3:0a: fe:f5:c9:6a:c0:6f:f7:2b:b7:43:6f:a5:c4:a0:50: 26:d1:aa:f2:cd:da:19:0e:dc:77:cb:6e:e9:4a:6d: 22:7a:77:bf:61:a1:f8:bc:39:d2:e0:17:3d:5c:f6: 2a:af:f1:df:10:78:ec:b8:83:6b:37:6b:1e:e3:58: e8:ae:8f:d0:03:90:bb:c7:84:0c:6f:d2:fd:76:b8: b7:93:d3:e6:ff:06:b8:fb:2b:3b:dc:57:21:0a:f1: 27:ce:7f:11:3d:c3:0c:61:0e:a0:ae:e7:6b:10:47: 3a:fe:09:97:e9:30:a1:76:be:7b:a3:47:d4:bd:ec: b4:f6:2c:df:b8:2f:97:07:d2:c2:48:57:c1:01:e1: f2:16:2a:74:8f:95:42:70:e9:09:95:56:a0:68:3f: fd:75:4f:05:86:b4:08:b4:8e:6d:a6:51:54:4f:20: 5e:24:19:16:83:d3:32:48:0e:14:8d:25:e1:cd:57: 7a:3a:f6:f3:00:b0:17:20:4b:41:34:db:38:db:04: 1e:76:1c:75:d5:4e:d9:af:b4:73:8f:fe:7c:a1:12: ff:98:d7:56:72:9e:b8:2d:1c:10:59:8a:07:b3:55: e4:32:9a:df:4b:0a:98:e2:35:89:14:1d:d3:ee:a7: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8C:9D:E0:D3:B9:AE:A1:8C:7A:2B:44:29:0A:55:65:DF:E2:AC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a896b76c-4fc3-39c1-bc35-c65d78c4e014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.82.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:28:0b:07:c6:c4:5b:a4:7a:c9:bc:03:40:44:bb:de:3a:24: 00:15:8b:c4:9a:02:f3:68:8b:c2:27:aa:1e:10:22:54:b1:ba: a1:d2:51:ea:2b:18:87:a0:f5:a3:34:9c:18:f4:42:3b:33:cf: 00:91:45:f2:1f:14:2c:45:95:30:9b:c9:b0:43:c4:51:7e:3c: 4a:91:54:fc:f0:4f:f7:33:05:fa:bc:05:34:55:af:a0:36:06: 4b:38:9e:60:a1:0e:8a:1b:36:7b:db:02:a1:d1:7c:60:31:40: 17:ab:81:dc:7c:99:1a:c6:e9:99:3e:fc:c1:39:31:21:8b:4b: b8:33:00:30:a8:f8:c9:75:46:a0:a7:14:89:cc:7e:75:7b:79: 43:b9:5e:29:eb:a1:c1:7b:9e:d6:47:e5:7c:de:69:7f:6f:4f: 86:70:29:41:54:45:49:89:8d:9c:46:d7:9a:75:43:7f:bf:c0: 91:38:80:dc:ae:ea:3b:66:9b:81:07:e4:89:6e:55:ed:69:bf: 3e:a3:5e:11:fb:2f:50:f5:a5:54:ae:b9:91:66:b4:f5:1f:bd: 43:de:40:99:a2:e4:e3:b3:39:6f:95:dd:1e:55:56:ef:93:14: 37:f3:74:74:9c:d3:52:a5:7e:61:cd:90:fb:cd:ea:51:c6:8e: 03:1b:01:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBd9SHU2psnB8ckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MGYyNDlmNmMtNDM2My00OTAyLWE0NDctNjM0ZDk2YWM5ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyJ9KO7L2gNGujUsswr+9clqwG/3K7dDb6XE oFAm0aryzdoZDtx3y27pSm0iene/YaH4vDnS4Bc9XPYqr/HfEHjsuINrN2se41jo ro/QA5C7x4QMb9L9dri3k9Pm/wa4+ys73FchCvEnzn8RPcMMYQ6grudrEEc6/gmX 6TChdr57o0fUvey09izfuC+XB9LCSFfBAeHyFip0j5VCcOkJlVagaD/9dU8FhrQI tI5tplFUTyBeJBkWg9MySA4UjSXhzVd6OvbzALAXIEtBNNs42wQedhx11U7Zr7Rz j/58oRL/mNdWcp64LRwQWYoHs1XkMprfSwqY4jWJFB3T7qdZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiMneDTua6hjHorRCkKVWXf4qxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg5NmI3NmMtNGZjMy0z OWMxLWJjMzUtYzY1ZDc4YzRlMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwoCwfGxFukesm8A0BEu946JAAVi8SaAvNoi8Inqh4QIlSxuqHSUeor GIeg9aM0nBj0QjszzwCRRfIfFCxFlTCbybBDxFF+PEqRVPzwT/czBfq8BTRVr6A2 Bks4nmChDoobNnvbAqHRfGAxQBergdx8mRrG6Zk+/ME5MSGLS7gzADCo+Ml1RqCn FInMfnV7eUO5XinrocF7ntZH5XzeaX9vT4ZwKUFURUmJjZxG15p1Q3+/wJE4gNyu 6jtmm4EH5IluVe1pvz6jXhH7L1D1pVSuuZFmtPUfvUPeQJmi5OOzOW+V3R5VVu+T FDfzdHSc01KlfmHNkPvN6lHGjgMbAQs= -----END CERTIFICATE-----Generated at Tue Jun 3 04:53:45 2025 by rpki-client