$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c95312d6-2547-3459-9d2a-c9e6ba72494e.roa File: c95312d6-2547-3459-9d2a-c9e6ba72494e.roa (raw, json) Hash identifier: TJuAbwV4ijCl/0o49WW0jE8GWv+U+C03lPKTemTJWWY= Subject key identifier: 72:9B:75:FD:C3:CC:EE:4E:F6:6A:B4:71:00:CB:E0:69:D5:52:6B:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0627D7FACE82DCC2AE3F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c95312d6-2547-3459-9d2a-c9e6ba72494e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 68.38.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:27:d7:fa:ce:82:dc:c2:ae:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=2cc28e02-6a0c-45e6-848c-69883fe4b862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:30:c2:16:5a:66:69:b2:f5:b6:f4:5d:7d: 7b:33:6b:27:1b:bf:b8:e5:a4:d6:4c:dc:57:b1:40: 90:81:26:7f:9e:66:b9:8d:08:b9:12:47:e4:84:1a: 81:50:6d:e9:01:a9:d5:16:62:b1:5d:7d:a7:e6:bd: f1:2c:36:b7:83:11:a7:d0:a2:ea:d6:64:0f:b0:d9: a6:2a:d7:9d:dd:09:9a:ee:c6:db:3b:4d:d3:ac:6a: 29:1b:d0:27:d1:4b:8b:8e:91:c4:30:fa:ef:e1:b8: 6a:44:f0:43:bb:0a:dd:e5:32:ec:52:da:3f:7f:1e: d2:af:f7:40:05:81:b9:99:03:1a:2c:3d:f6:7c:ab: 06:b4:fd:f2:f1:72:13:7c:e4:70:b8:69:8c:7e:1f: a0:9d:fd:ed:02:b4:a1:47:64:e5:29:e5:b4:27:b6: d8:13:fc:90:b7:f4:b3:9c:46:b3:0e:33:01:ae:74: 40:21:49:4a:cc:0b:e2:9d:7c:0c:b2:f8:3e:4f:36: 64:e1:43:6f:88:0d:36:6e:a2:ed:3a:b2:99:00:ee: 1a:29:4d:9c:e0:7f:97:ba:6b:26:eb:50:3d:8f:f7: 4a:ca:c8:65:6e:95:35:0a:22:2a:a8:b5:98:0f:9c: ec:ca:8c:9f:30:dd:d9:9c:df:ee:37:d1:31:c7:a0: 37:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9B:75:FD:C3:CC:EE:4E:F6:6A:B4:71:00:CB:E0:69:D5:52:6B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c95312d6-2547-3459-9d2a-c9e6ba72494e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a2:41:5e:ca:24:7a:d4:70:59:68:5b:33:c5:2f:2f:d7:f4: f9:44:8f:95:b9:87:95:e8:94:77:6b:ed:a3:05:b9:a4:e9:5b: c9:86:d3:80:a2:b6:6c:f9:8a:f6:57:64:21:45:d6:59:ef:2c: 09:9d:29:e3:ff:f2:09:51:85:02:f1:02:e6:81:6b:9a:6d:da: 91:e4:ec:49:c5:56:b8:69:60:a3:7c:67:37:a2:f5:e2:94:ec: c5:71:7c:7c:c6:a4:af:1f:a3:61:0f:c9:54:50:5c:d4:41:dd: 96:3c:3c:81:ef:37:fb:24:ce:7e:df:c0:83:37:09:df:61:19: aa:42:86:31:54:17:e3:f0:c5:06:1f:96:a5:ba:51:83:5b:d8: 88:72:14:55:5e:96:15:e7:15:cc:de:a6:f7:c0:4d:42:e2:98: 19:e1:cd:88:6c:92:21:7a:c1:ea:1c:6d:c3:b8:ff:4e:65:13: db:b8:e6:c6:ae:bc:66:02:9a:bd:f1:d3:b1:db:e6:c9:b7:93: ce:28:bd:3d:ff:4a:7a:44:14:eb:0d:c7:3e:41:62:de:ae:1e: 71:11:a1:3e:7c:9a:f8:40:91:a5:15:3a:30:2b:26:e4:e1:2e: c3:c5:9a:2d:48:3a:91:52:38:5f:b2:25:83:5a:f4:0d:72:6c: f3:9c:b2:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBifX+s6C3MKuP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MmNjMjhlMDItNmEwYy00NWU2LTg0OGMtNjk4ODNmZTRiODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwAwwhZaZmmy9bb0XX17M2snG7+45aTWTNxX sUCQgSZ/nma5jQi5EkfkhBqBUG3pAanVFmKxXX2n5r3xLDa3gxGn0KLq1mQPsNmm Kted3Qma7sbbO03TrGopG9An0UuLjpHEMPrv4bhqRPBDuwrd5TLsUto/fx7Sr/dA BYG5mQMaLD32fKsGtP3y8XITfORwuGmMfh+gnf3tArShR2TlKeW0J7bYE/yQt/Sz nEazDjMBrnRAIUlKzAvinXwMsvg+TzZk4UNviA02bqLtOrKZAO4aKU2c4H+Xumsm 61A9j/dKyshlbpU1CiIqqLWYD5zsyoyfMN3ZnN/uN9Exx6A31QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKbdf3DzO5O9mq0cQDL4GnVUmugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzk1MzEyZDYtMjU0Ny0z NDU5LTlkMmEtYzllNmJhNzI0OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2iQV7KJHrUcFloWzPFLy/X9PlEj5W5h5XolHdr7aMFuaTpW8mG04Ci tmz5ivZXZCFF1lnvLAmdKeP/8glRhQLxAuaBa5pt2pHk7EnFVrhpYKN8Zzei9eKU 7MVxfHzGpK8fo2EPyVRQXNRB3ZY8PIHvN/skzn7fwIM3Cd9hGapChjFUF+PwxQYf lqW6UYNb2IhyFFVelhXnFczepvfATULimBnhzYhskiF6weocbcO4/05lE9u45sau vGYCmr3x07Hb5sm3k84ovT3/SnpEFOsNxz5BYt6uHnERoT58mvhAkaUVOjArJuTh LsPFmi1IOpFSOF+yJYNa9A1ybPOcsu8= -----END CERTIFICATE-----Generated at Wed Jun 4 23:29:35 2025 by rpki-client