$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0c6387-f3ca-3929-8b29-266b032ba697.roa File: cf0c6387-f3ca-3929-8b29-266b032ba697.roa (raw, json) Hash identifier: 9Wwt0jY2NAEVBI1K4mPqz44vHcneDGE4gXW6mZkQQ2g= Subject key identifier: C8:A8:90:10:91:C8:3E:C9:A0:62:75:E0:47:4C:9B:CC:28:1F:9D:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C063A2FA8F8EBC5601FD500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0c6387-f3ca-3929-8b29-266b032ba697.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 68.59.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:3a:2f:a8:f8:eb:c5:60:1f:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=6ab14d4a-18d0-4ff7-9055-5a7fb71e5571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:02:99:ac:fc:be:95:7b:1c:49:ca:b6:01: a7:6c:62:d7:10:af:3d:4d:2c:bc:9a:a2:b1:df:ad: 2b:fc:f7:3c:c2:14:99:89:3d:a7:db:ad:5c:90:6c: 37:14:8b:15:ce:34:d2:77:ce:ed:71:3c:f9:a1:3b: 02:90:56:77:4f:8e:4d:59:32:08:98:e9:d9:55:7c: a7:38:b6:b1:db:94:cc:e4:b5:c1:59:fb:4a:e9:be: 17:22:98:49:c0:3d:eb:6b:fe:02:97:ac:72:06:b4: 4e:53:54:64:b9:c6:5d:c2:71:83:3a:26:0f:97:f8: d1:38:48:dd:60:24:57:b3:8b:fb:c0:e8:b0:89:bd: e8:66:d9:78:0d:bd:51:ce:14:ed:a1:f7:dd:27:b4: 35:ed:16:02:10:9d:ab:9c:2f:89:c2:7f:06:ca:b8: 52:cc:94:b3:e6:f2:d9:7d:6d:53:5e:b1:de:16:29: 05:94:57:aa:06:2a:c1:f8:06:62:ca:8f:92:f7:be: 5b:65:d7:af:43:3e:ce:3e:d3:47:b4:44:c5:4e:4c: 6a:a9:54:2e:00:24:7b:c2:87:90:49:86:c9:5b:17: 3a:11:64:ab:92:f3:49:d8:bf:9d:a3:6f:57:85:47: 3e:53:58:48:99:82:65:bb:91:22:45:65:ea:4d:89: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A8:90:10:91:C8:3E:C9:A0:62:75:E0:47:4C:9B:CC:28:1F:9D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0c6387-f3ca-3929-8b29-266b032ba697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d3:cf:49:9c:86:fe:5e:87:d2:da:b6:43:4f:be:cc:6b:96: 4f:c6:e4:b1:5f:6a:9c:5f:dd:79:e2:b0:0d:38:48:99:47:88: fb:ae:5c:99:f6:41:1d:3a:0f:00:4b:6d:db:22:eb:90:34:2b: 23:58:4c:80:9e:e7:01:de:21:56:ab:73:11:82:5c:96:0e:a8: bb:fc:89:da:01:1c:66:ad:1b:28:63:e8:b3:dd:78:da:3a:9a: 4b:77:f0:de:9a:8e:30:9f:07:53:1e:b4:81:29:7a:2d:53:92: 8c:b4:ec:8a:96:c3:62:4c:27:d4:5a:d1:33:3f:1f:8b:41:6e: 77:31:fb:9f:3c:89:11:33:a3:23:03:00:9a:c8:3c:26:68:60: 84:f3:1f:81:71:0c:88:6d:18:99:8d:1a:ee:15:65:72:3f:53: 9c:46:8d:f4:8f:80:76:28:f5:75:cf:87:d2:29:66:47:e3:38: ed:b9:fb:bc:b3:a3:66:c2:65:e9:75:15:97:bd:47:96:82:81: e9:8d:d8:4f:95:6f:17:01:91:2c:67:d9:81:28:c9:c1:59:04: 8c:26:3b:df:37:ed:3f:ff:64:6f:03:cc:25:54:50:09:55:54: 2a:c7:e6:f7:0a:f8:15:c3:1b:90:9e:28:7d:f0:8b:dc:08:1c: 43:e3:cf:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBjovqPjrxWAf1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NmFiMTRkNGEtMThkMC00ZmY3LTkwNTUtNWE3ZmI3MWU1NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxYCmaz8vpV7HEnKtgGnbGLXEK89TSy8mqKx 360r/Pc8whSZiT2n261ckGw3FIsVzjTSd87tcTz5oTsCkFZ3T45NWTIImOnZVXyn OLax25TM5LXBWftK6b4XIphJwD3ra/4Cl6xyBrROU1RkucZdwnGDOiYPl/jROEjd YCRXs4v7wOiwib3oZtl4Db1RzhTtoffdJ7Q17RYCEJ2rnC+Jwn8GyrhSzJSz5vLZ fW1TXrHeFikFlFeqBirB+AZiyo+S975bZdevQz7OPtNHtETFTkxqqVQuACR7woeQ SYbJWxc6EWSrkvNJ2L+do29XhUc+U1hImYJlu5EiRWXqTYmt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiokBCRyD7JoGJ14EdMm8woH51RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YwYzYzODctZjNjYS0z OTI5LThiMjktMjY2YjAzMmJhNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDuuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjTz0mchv5eh9LatkNPvsxrlk/G5LFfapxf3XnisA04SJlHiPuuXJn2 QR06DwBLbdsi65A0KyNYTICe5wHeIVarcxGCXJYOqLv8idoBHGatGyhj6LPdeNo6 mkt38N6ajjCfB1MetIEpei1Tkoy07IqWw2JMJ9Ra0TM/H4tBbncx+588iREzoyMD AJrIPCZoYITzH4FxDIhtGJmNGu4VZXI/U5xGjfSPgHYo9XXPh9IpZkfjOO25+7yz o2bCZel1FZe9R5aCgemN2E+VbxcBkSxn2YEoycFZBIwmO9837T//ZG8DzCVUUAlV VCrH5vcK+BXDG5CeKH3wi9wIHEPjz3w= -----END CERTIFICATE-----Generated at Tue Jun 3 07:48:26 2025 by rpki-client