$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b35e3be9-4a7e-3e5e-98a6-91e8173e931d.roa File: b35e3be9-4a7e-3e5e-98a6-91e8173e931d.roa (raw, json) Hash identifier: sYZOz/p8iCwd0EQnzW90oKNCwbrS3g1UrtTYkeUINow= Subject key identifier: 3C:45:39:DF:92:9C:AB:B3:63:52:72:58:C3:7F:82:4F:2E:8A:B9:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431EEF053E55E1FA89784C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b35e3be9-4a7e-3e5e-98a6-91e8173e931d.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.36.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:ee:f0:53:e5:5e:1f:a8:97:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=4a2e2a43-bc16-44af-8f17-e701b9a90e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:34:de:b2:2d:33:ab:15:3c:f7:ea:bf:5b: 2d:80:9a:c2:18:e7:b6:5b:d4:0e:44:c6:73:d9:1e: 3f:35:93:55:4b:b1:f9:e3:c8:52:50:75:b5:da:75: 2e:7a:e7:62:f1:81:ae:a3:b8:00:46:ff:e5:ab:76: 1e:b0:52:a8:28:47:72:e3:1e:fb:3b:4f:4e:13:b7: 54:85:45:3e:2b:d2:34:56:1a:e0:3b:59:90:fb:dd: e2:f4:cd:9b:80:74:01:e7:cc:7a:fc:d2:cc:1d:42: 64:27:80:60:33:6a:e1:79:60:c1:41:2b:aa:26:d8: ab:dc:05:dd:4c:36:48:d5:6e:79:32:1a:ad:58:09: 22:f8:da:75:79:4c:35:d6:37:c0:89:00:41:f2:8a: fd:fc:83:a9:35:e8:01:7a:e6:15:09:d4:f5:8d:6d: 00:68:88:08:96:0f:cb:80:53:9d:2c:49:d9:41:66: fe:51:a7:17:a7:7f:98:15:ee:c7:0c:b8:54:f2:15: 6e:55:f6:50:5f:5b:58:06:9e:43:66:cf:5b:22:1b: 97:2f:6a:0d:ea:61:7b:70:4b:28:ec:34:e7:a8:24: 93:e8:0a:77:ae:19:15:99:8f:57:cb:51:da:17:66: 19:8e:04:65:b9:00:8f:a1:1f:d3:a9:85:95:72:dd: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:45:39:DF:92:9C:AB:B3:63:52:72:58:C3:7F:82:4F:2E:8A:B9:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b35e3be9-4a7e-3e5e-98a6-91e8173e931d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8f:cc:a4:e5:2f:e2:9a:bd:2e:84:25:29:45:ea:ef:f1:34: e1:2f:4e:46:35:8b:d6:e8:7c:db:2b:c9:65:a5:32:86:72:19: 27:88:4c:44:a2:11:03:6a:84:32:66:7d:f0:b9:79:c8:15:52: fb:bb:b1:57:1d:61:80:a3:7a:a0:82:60:3e:e2:17:f1:aa:f2: 02:8d:b7:64:ab:7f:ed:0b:3f:d4:13:d0:54:9e:6a:f4:6c:ae: c3:81:d6:53:c5:7b:56:63:b2:a8:51:10:74:01:7b:b2:d3:f6: 9f:49:a0:b3:bb:68:8c:b1:7c:68:49:3b:88:0d:ae:33:16:c2: 20:60:a8:c7:57:58:6c:61:b5:a7:d5:54:af:ec:f1:66:7f:a6: 22:a1:53:07:cc:39:ee:9b:a3:5b:16:a3:9a:07:87:a3:f6:a0: 58:7c:c7:a7:c3:b2:cb:92:43:bc:8a:ac:3b:3f:cf:d9:0e:c8: ba:7e:bf:c2:5b:c0:ea:4d:2a:08:30:ba:89:08:0d:32:90:25: 31:41:b0:c9:e7:f4:9f:16:af:8e:38:cb:ef:b0:9f:25:a0:54: 0d:0a:48:51:ef:7c:a3:57:47:c5:db:da:65:42:fa:f6:c1:91: e6:bb:9b:0a:58:b3:dc:26:78:2d:24:88:2d:94:01:ee:ef:cd: 92:61:e6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMe7wU+VeH6iXhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NGEyZTJhNDMtYmMxNi00NGFmLThmMTctZTcwMWI5YTkwZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeI03rItM6sVPPfqv1stgJrCGOe2W9QORMZz 2R4/NZNVS7H548hSUHW12nUueudi8YGuo7gARv/lq3YesFKoKEdy4x77O09OE7dU hUU+K9I0VhrgO1mQ+93i9M2bgHQB58x6/NLMHUJkJ4BgM2rheWDBQSuqJtir3AXd TDZI1W55MhqtWAki+Np1eUw11jfAiQBB8or9/IOpNegBeuYVCdT1jW0AaIgIlg/L gFOdLEnZQWb+UacXp3+YFe7HDLhU8hVuVfZQX1tYBp5DZs9bIhuXL2oN6mF7cEso 7DTnqCST6Ap3rhkVmY9Xy1HaF2YZjgRluQCPoR/TqYWVct12UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxFOd+SnKuzY1JyWMN/gk8uirlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjM1ZTNiZTktNGE3ZS0z ZTVlLTk4YTYtOTFlODE3M2U5MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCR+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACPzKTlL+KavS6EJSlF6u/xNOEvTkY1i9bofNsryWWlMoZyGSeITESi EQNqhDJmffC5ecgVUvu7sVcdYYCjeqCCYD7iF/Gq8gKNt2Srf+0LP9QT0FSeavRs rsOB1lPFe1ZjsqhREHQBe7LT9p9JoLO7aIyxfGhJO4gNrjMWwiBgqMdXWGxhtafV VK/s8WZ/piKhUwfMOe6bo1sWo5oHh6P2oFh8x6fDssuSQ7yKrDs/z9kOyLp+v8Jb wOpNKggwuokIDTKQJTFBsMnn9J8Wr444y++wnyWgVA0KSFHvfKNXR8Xb2mVC+vbB kea7mwpYs9wmeC0kiC2UAe7vzZJh5rs= -----END CERTIFICATE-----Generated at Tue Jun 3 04:54:13 2025 by rpki-client