$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cc4eb4-8abd-325e-9c42-212804e83e83.roa File: d1cc4eb4-8abd-325e-9c42-212804e83e83.roa (raw, json) Hash identifier: vxtD4q6UcAbf1fBvyCGMCvxVuNg69wRERD4NahSzHws= Subject key identifier: 02:88:67:4E:D9:3E:7E:3B:12:19:4D:68:25:DA:E7:89:C3:AD:37:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4308CE9B2B72CB9F6E29340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cc4eb4-8abd-325e-9c42-212804e83e83.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.34.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:8c:e9:b2:b7:2c:b9:f6:e2:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=38b04e2b-2c5b-438b-b345-76d2754329f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:d2:0d:26:49:40:02:e2:d3:99:21:c4:50: e5:55:f3:69:ae:90:79:53:1c:e5:99:13:1a:4d:68: 5c:bc:16:5e:9f:91:b4:9e:89:1e:b3:62:65:69:35: e4:1f:04:e3:ae:67:24:aa:b2:51:31:f1:f2:50:29: 35:f1:10:9d:72:e4:af:0b:89:7e:4e:9b:03:53:73: 36:5b:1c:fc:4e:6a:d6:71:cf:8d:07:71:6e:f7:15: 99:93:0e:cd:b4:14:20:0f:0e:d7:75:ee:a6:ce:77: 1d:82:fe:d9:d2:70:bd:3a:e5:03:c6:36:a9:78:03: e4:96:a8:c2:02:ae:b7:52:db:b9:6c:5f:c4:93:c6: d5:99:9a:62:ec:aa:ef:1b:69:b9:7b:05:a8:4d:3d: b4:74:7b:cf:72:03:ea:38:ed:ab:ad:f0:1b:1d:b2: f2:55:1f:dc:9d:2d:b0:6d:04:03:23:ca:78:68:1c: 92:5e:58:c1:84:1d:18:48:31:f3:62:73:3a:6f:71: 27:30:1a:ea:c4:94:67:45:3c:d9:86:a0:bf:56:ed: b9:0e:a5:b0:ed:b3:d1:25:dd:7d:74:f9:6d:eb:1c: d7:3c:42:bb:4b:a3:a9:1e:8a:17:2e:1f:54:f0:47: 80:5b:d7:01:ae:a3:a4:39:4b:67:20:87:44:f3:23: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:88:67:4E:D9:3E:7E:3B:12:19:4D:68:25:DA:E7:89:C3:AD:37:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cc4eb4-8abd-325e-9c42-212804e83e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0e:21:81:a1:2f:63:8b:a3:5b:d9:91:14:eb:ea:a4:72:ae: 85:53:89:60:2f:c3:a9:08:34:70:ce:8f:bf:37:df:b6:15:93: 65:3e:32:77:1b:f7:0a:3e:f5:ac:e8:39:d8:2a:c0:ee:f6:5a: 85:3c:16:c7:bc:67:12:0a:01:95:b1:8b:a5:a2:81:98:df:cc: f7:64:45:48:bc:db:8c:e5:d0:cd:78:f0:2a:69:1b:59:dc:8e: 55:7e:f4:b6:f7:14:0e:61:af:eb:8a:31:2c:71:6c:e5:4c:c7: 4f:82:b9:f5:7c:c3:8a:b0:4a:d2:9f:57:73:d7:51:84:88:9c: 7c:90:83:1d:dc:f0:d0:00:c4:61:a5:1b:2b:4f:92:6c:56:48: 96:46:2a:9a:72:00:d4:27:c9:b7:0b:bf:84:4a:92:5d:07:04: 28:46:d4:4c:39:46:c2:90:d8:de:a8:c5:ed:24:55:2a:c2:1d: c0:56:0f:79:59:67:d6:54:6e:de:e6:9c:f0:d9:e7:bf:ff:11: bf:d3:1e:18:20:5e:97:2e:cb:cc:1c:42:29:23:0f:61:59:02: c5:e9:a8:43:28:74:f6:8c:f3:69:92:7b:95:64:d3:31:cc:07: de:67:15:88:f7:b7:56:36:b3:84:35:cc:0e:c2:08:f0:2e:c9: 92:39:c7:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMIzpsrcsufbik0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzhiMDRlMmItMmM1Yi00MzhiLWIzNDUtNzZkMjc1NDMyOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyzSDSZJQALi05khxFDlVfNprpB5UxzlmRMa TWhcvBZen5G0nokes2JlaTXkHwTjrmckqrJRMfHyUCk18RCdcuSvC4l+TpsDU3M2 Wxz8TmrWcc+NB3Fu9xWZkw7NtBQgDw7Xde6mzncdgv7Z0nC9OuUDxjapeAPklqjC Aq63Utu5bF/Ek8bVmZpi7KrvG2m5ewWoTT20dHvPcgPqOO2rrfAbHbLyVR/cnS2w bQQDI8p4aBySXljBhB0YSDHzYnM6b3EnMBrqxJRnRTzZhqC/Vu25DqWw7bPRJd19 dPlt6xzXPEK7S6OpHooXLh9U8EeAW9cBrqOkOUtnIIdE8yP9jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKIZ07ZPn47EhlNaCXa54nDrTeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFjYzRlYjQtOGFiZC0z MjVlLTljNDItMjEyODA0ZTgzZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIOIYGhL2OLo1vZkRTr6qRyroVTiWAvw6kINHDOj78337YVk2U+Mncb 9wo+9azoOdgqwO72WoU8Fse8ZxIKAZWxi6WigZjfzPdkRUi824zl0M148CppG1nc jlV+9Lb3FA5hr+uKMSxxbOVMx0+CufV8w4qwStKfV3PXUYSInHyQgx3c8NAAxGGl GytPkmxWSJZGKppyANQnybcLv4RKkl0HBChG1Ew5RsKQ2N6oxe0kVSrCHcBWD3lZ Z9ZUbt7mnPDZ57//Eb/THhggXpcuy8wcQikjD2FZAsXpqEModPaM82mSe5Vk0zHM B95nFYj3t1Y2s4Q1zA7CCPAuyZI5x24= -----END CERTIFICATE-----Generated at Tue Jun 3 05:55:51 2025 by rpki-client