$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5668f63-76e7-34be-8d66-4a8eafe21b9c.roa File: c5668f63-76e7-34be-8d66-4a8eafe21b9c.roa (raw, json) Hash identifier: rZmASIOafJqUMa4J0bEvaPFU8/sB3NImXVC0IR6E6k0= Subject key identifier: 41:54:23:9A:ED:65:6F:FE:02:D4:42:6C:C4:9D:BA:09:B8:D4:C0:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430A197569A026951C2F680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5668f63-76e7-34be-8d66-4a8eafe21b9c.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.42.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:a1:97:56:9a:02:69:51:c2:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c1c1837b-da47-41e8-aa66-9188865bf797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:04:83:da:e1:86:9a:b5:c7:26:c0:6c:a3: e9:3a:c5:d7:c4:cb:ab:06:dc:25:88:34:10:db:50: 88:e8:7c:4b:93:fa:98:04:b4:c9:3e:d7:b0:ba:7e: 8b:94:b5:47:f6:43:71:37:1c:e1:b2:e3:f1:b9:05: c8:6d:a2:07:38:61:4d:8b:6d:8f:9b:9c:73:73:9e: 25:a8:c2:8e:d8:f4:61:83:ee:15:7a:cf:01:08:65: 86:5a:b1:aa:86:0c:8b:6b:8e:4f:3f:0f:0a:f8:bb: ce:73:a4:66:9f:57:2f:bc:2e:00:bd:60:65:66:85: a3:19:0d:8e:78:42:04:eb:b8:ee:2b:7b:df:26:06: e9:ef:78:80:2e:3d:64:20:d9:f1:bb:13:9e:46:9c: a1:80:db:93:e8:73:ce:d0:df:30:e0:28:c2:f2:83: 61:ae:42:45:29:22:5f:35:af:7d:0c:9c:06:72:f3: bc:e9:bd:26:5b:ed:29:1f:60:ec:b2:35:4a:39:b0: b6:60:8d:ac:39:2d:41:e9:f4:1f:12:be:78:b7:41: 9e:db:57:f7:b2:a3:88:ce:83:54:b8:de:19:ff:0b: 10:b9:d9:cd:f8:8c:d9:6d:54:51:97:19:41:22:c0: 83:ea:50:e9:54:42:b6:fa:e6:37:a2:19:bc:0e:27: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:23:9A:ED:65:6F:FE:02:D4:42:6C:C4:9D:BA:09:B8:D4:C0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5668f63-76e7-34be-8d66-4a8eafe21b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6a:83:ea:8f:a2:9b:bd:fc:cf:a8:c4:10:93:d1:1b:3a:ea: 3f:ac:23:34:bb:03:30:6a:13:4e:a2:0b:81:5f:e2:62:b8:03: 7e:50:57:42:67:9a:27:89:22:60:c1:c2:f1:93:5c:ea:87:7e: 18:0a:ce:fe:81:42:83:74:d0:d0:f4:c6:9e:99:3b:aa:1e:78: 3b:7b:61:a4:75:75:58:67:d3:6a:8a:bf:a4:d5:ef:e2:6a:81: 53:b2:20:4f:68:15:06:83:c6:91:ef:40:e8:c2:1e:1b:b4:88: dc:86:38:36:1c:27:21:e4:0b:75:d2:5b:25:37:98:b0:b2:6d: d9:56:3a:64:5e:c7:91:1b:da:7d:87:84:da:fd:11:af:f4:67: 00:b4:9e:c7:ba:c0:5c:17:a7:56:80:43:bb:d4:0b:20:89:5d: 74:37:e8:06:15:6c:b2:4b:f1:74:d8:b0:0f:fd:57:5d:a0:9a: 0d:79:92:39:47:a2:2d:15:79:4b:d9:bd:67:1b:49:0b:0b:d7: 8a:7f:22:1a:d1:51:66:1d:88:a6:24:e5:89:5f:d1:ca:2b:5e: d6:78:44:8f:f4:0a:69:35:bd:82:35:80:7c:34:d1:ba:d0:b9: a1:25:9d:59:fd:7f:3c:c6:01:d1:e0:79:75:00:c0:db:22:ae: 16:1d:d4:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMKGXVpoCaVHC9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzFjMTgzN2ItZGE0Ny00MWU4LWFhNjYtOTE4ODg2NWJmNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhoEg9rhhpq1xybAbKPpOsXXxMurBtwliDQQ 21CI6HxLk/qYBLTJPtewun6LlLVH9kNxNxzhsuPxuQXIbaIHOGFNi22Pm5xzc54l qMKO2PRhg+4Ves8BCGWGWrGqhgyLa45PPw8K+LvOc6Rmn1cvvC4AvWBlZoWjGQ2O eEIE67juK3vfJgbp73iALj1kINnxuxOeRpyhgNuT6HPO0N8w4CjC8oNhrkJFKSJf Na99DJwGcvO86b0mW+0pH2DssjVKObC2YI2sOS1B6fQfEr54t0Ge21f3sqOIzoNU uN4Z/wsQudnN+IzZbVRRlxlBIsCD6lDpVEK2+uY3ohm8DicWYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFUI5rtZW/+AtRCbMSdugm41MBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzU2NjhmNjMtNzZlNy0z NGJlLThkNjYtNGE4ZWFmZTIxYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCr3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZqg+qPopu9/M+oxBCT0Rs66j+sIzS7AzBqE06iC4Ff4mK4A35QV0Jn mieJImDBwvGTXOqHfhgKzv6BQoN00ND0xp6ZO6oeeDt7YaR1dVhn02qKv6TV7+Jq gVOyIE9oFQaDxpHvQOjCHhu0iNyGODYcJyHkC3XSWyU3mLCybdlWOmRex5Eb2n2H hNr9Ea/0ZwC0nse6wFwXp1aAQ7vUCyCJXXQ36AYVbLJL8XTYsA/9V12gmg15kjlH oi0VeUvZvWcbSQsL14p/IhrRUWYdiKYk5Ylf0corXtZ4RI/0Cmk1vYI1gHw00brQ uaElnVn9fzzGAdHgeXUAwNsirhYd1KY= -----END CERTIFICATE-----Generated at Tue Jun 3 05:06:49 2025 by rpki-client