$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf94c00-ab75-31ac-be5e-2e22806376e7.roa File: baf94c00-ab75-31ac-be5e-2e22806376e7.roa (raw, json) Hash identifier: 9BNzaERpRaWppCcBf179OEF3FNywe6LVLCQLEM43ts0= Subject key identifier: 09:5D:7C:AA:A2:45:AF:53:D0:54:C6:A7:41:A3:75:4C:7F:45:06:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4308D4B49935A38FAF2B580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf94c00-ab75-31ac-be5e-2e22806376e7.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.34.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:8d:4b:49:93:5a:38:fa:f2:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7b3d6ec3-f1f2-48cb-b790-2ad2e6be2df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:32:1b:2a:87:be:db:22:fe:c5:ac:39:66: f4:c9:b0:4c:0f:39:d8:be:d0:90:d8:e1:ca:2f:5e: 41:bd:6e:c7:f2:7c:1c:48:88:03:4c:a8:e3:da:82: 08:b4:78:5c:7d:30:62:ee:7e:76:a0:44:14:e7:57: 23:2f:2b:4a:ee:59:ea:cf:b5:a0:c8:b1:50:65:4b: 67:d7:18:81:c4:bd:74:35:91:d3:04:9e:94:78:14: ed:11:46:70:62:7a:75:07:90:33:ae:dd:a1:d9:7f: 18:a6:a8:50:ed:d2:09:05:85:aa:cc:14:ab:a2:47: 85:ef:1f:41:f0:4e:32:c9:79:2f:25:9c:7a:bc:18: ca:a7:45:2f:27:d0:2c:51:d5:42:b8:40:11:db:0d: c3:10:d4:34:aa:35:20:34:5e:ce:eb:21:dc:00:4d: 0d:1b:34:e8:17:8e:b4:5c:16:31:49:07:cb:a5:9c: ca:b6:cc:2c:c9:ff:32:0e:f1:22:64:fb:71:5f:5a: 21:c7:8b:d7:e8:80:3f:e6:f4:24:07:09:c6:00:19: 5f:7b:7e:7c:22:c5:0e:c0:37:fb:28:58:d8:97:d0: e7:0e:7f:2e:96:88:54:f3:bb:74:09:94:ed:7d:9d: 32:41:81:3d:a4:68:7f:33:b5:91:01:cb:fd:78:90: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:7C:AA:A2:45:AF:53:D0:54:C6:A7:41:A3:75:4C:7F:45:06:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf94c00-ab75-31ac-be5e-2e22806376e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:a0:0d:59:70:28:d2:0f:ec:43:fb:07:3f:e5:8b:8c:e7:05: 50:75:9f:1d:85:bf:23:3f:89:63:7b:e3:c6:5b:a3:b2:d1:12: 2b:e5:c7:ce:2d:b1:1f:8b:12:0e:06:2a:06:ca:d9:b9:39:91: ae:11:0d:69:a4:e7:f9:3c:0f:4e:5b:bc:f4:7f:76:1c:7b:fe: 2c:af:43:03:50:17:3c:59:44:20:46:09:55:c0:51:e6:af:52: 3d:0c:0b:e5:f0:b8:9d:6f:5e:45:e0:ce:e6:3d:fa:77:b5:ca: f0:e4:2c:b5:53:f1:f5:c0:5e:cf:e0:52:e9:e9:10:ab:d0:e5: 01:4d:05:5d:43:e0:63:80:22:72:f2:4e:21:52:53:a0:0a:cb: 22:72:a7:d7:f1:91:5e:38:73:b4:b5:76:88:6a:48:24:ab:b4: ef:9b:08:30:34:d2:19:2d:a3:a4:e8:fb:e6:19:ad:2c:28:a4: 4a:3f:e6:48:75:a1:db:6e:1d:54:21:0d:35:ab:56:28:43:9d: 49:b6:aa:af:0d:8b:d0:13:08:c2:b3:69:45:ca:09:a5:b7:21: 1e:6d:9d:c0:05:9d:b6:0a:f5:96:ba:64:44:db:ab:04:5a:2f: 3f:1f:70:ed:72:2a:a3:82:5b:b7:aa:5d:47:40:41:e7:11:85: 7a:f0:19:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMI1LSZNaOPrytYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2IzZDZlYzMtZjFmMi00OGNiLWI3OTAtMmFkMmU2YmUyZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4AyGyqHvtsi/sWsOWb0ybBMDznYvtCQ2OHK L15BvW7H8nwcSIgDTKjj2oIItHhcfTBi7n52oEQU51cjLytK7lnqz7WgyLFQZUtn 1xiBxL10NZHTBJ6UeBTtEUZwYnp1B5Azrt2h2X8YpqhQ7dIJBYWqzBSrokeF7x9B 8E4yyXkvJZx6vBjKp0UvJ9AsUdVCuEAR2w3DENQ0qjUgNF7O6yHcAE0NGzToF460 XBYxSQfLpZzKtswsyf8yDvEiZPtxX1ohx4vX6IA/5vQkBwnGABlfe358IsUOwDf7 KFjYl9DnDn8ulohU87t0CZTtfZ0yQYE9pGh/M7WRAcv9eJDxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAldfKqiRa9T0FTGp0GjdUx/RQbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmOTRjMDAtYWI3NS0z MWFjLWJlNWUtMmUyMjgwNjM3NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCIeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6gDVlwKNIP7EP7Bz/li4znBVB1nx2FvyM/iWN748Zbo7LREivlx84t sR+LEg4GKgbK2bk5ka4RDWmk5/k8D05bvPR/dhx7/iyvQwNQFzxZRCBGCVXAUeav Uj0MC+XwuJ1vXkXgzuY9+ne1yvDkLLVT8fXAXs/gUunpEKvQ5QFNBV1D4GOAInLy TiFSU6AKyyJyp9fxkV44c7S1dohqSCSrtO+bCDA00hkto6To++YZrSwopEo/5kh1 odtuHVQhDTWrVihDnUm2qq8Ni9ATCMKzaUXKCaW3IR5tncAFnbYK9Za6ZETbqwRa Lz8fcO1yKqOCW7eqXUdAQecRhXrwGao= -----END CERTIFICATE-----Generated at Wed Jun 4 23:44:52 2025 by rpki-client