$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa File: d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa (raw, json) Hash identifier: 9vWWJFxc6B+nULqmzVp80Bxsrfvh3W7TkpdwbvRHZdA= Subject key identifier: 71:CE:28:53:2B:CC:7F:5D:41:03:E9:86:AA:F8:6D:11:7A:68:88:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431FEA62B17108348893300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.49.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:fe:a6:2b:17:10:83:48:89:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7f3fa7f0-7b95-48c8-9152-585a642a82e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:03:21:dd:d4:a4:e3:45:55:84:54:b9:e8:66: 1f:f8:2a:3b:9d:cb:3d:af:c2:4b:fc:1d:45:93:e3: 14:19:79:25:97:7c:00:51:80:91:a8:9b:1e:f4:71: 68:42:de:e5:2a:ae:96:b7:d4:1e:fb:00:ca:41:59: df:d4:4f:51:df:ac:28:69:34:27:16:1f:a0:d3:a0: 98:1d:93:fc:29:3b:90:83:08:e7:aa:eb:1e:45:95: 80:42:3f:3c:2f:db:ae:9a:46:0b:f1:0c:06:ed:30: 7e:22:2d:9e:de:41:66:24:44:07:63:b7:d8:82:16: 7a:29:0a:40:6b:d5:0f:07:29:b0:47:3d:6a:bf:a8: 1d:05:e7:42:84:7e:4f:19:0f:7b:49:f3:6a:15:76: da:73:8f:e8:f2:c5:bd:2a:5f:a0:4e:36:23:eb:a1: ea:17:88:f3:ef:60:80:03:24:ae:d3:b5:3e:93:69: 5a:d1:1e:32:23:e8:12:29:a3:13:11:8f:45:ae:7f: 50:a6:64:90:5b:8f:82:9f:47:bd:29:d1:1d:b5:42: 85:7c:61:a0:b9:66:47:07:1b:20:91:2a:cc:dd:40: 4c:8b:c9:52:ff:17:96:9b:ce:d8:55:bb:70:5d:b9: 02:73:a5:85:bf:6f:16:78:aa:fd:71:c8:0c:c0:01: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:28:53:2B:CC:7F:5D:41:03:E9:86:AA:F8:6D:11:7A:68:88:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c7:68:e7:b3:aa:be:86:24:f8:62:bf:cc:e3:1c:bb:6c:81: f1:f0:ae:58:0c:98:c8:ee:23:6d:57:b1:f0:c5:21:82:77:19: 58:94:97:2c:c6:f9:39:4b:58:d8:02:a5:f4:0e:5a:4f:35:a6: df:82:c0:80:fc:a8:54:1e:b9:33:59:94:3b:7b:74:53:24:ed: e8:8c:b0:74:02:95:8e:15:96:e3:31:68:12:9a:8e:66:1d:10: 97:04:f2:ee:cd:03:47:26:c2:5e:b8:5d:82:96:52:da:e3:0d: 97:31:b8:49:e6:d0:e4:bc:5c:e9:b9:e3:a6:17:e6:dc:5c:6e: 04:23:09:46:bd:59:f9:d9:af:55:ff:7f:80:5a:43:42:52:2b: 3a:9a:d1:58:f5:00:2b:f2:81:03:44:21:fb:97:af:6a:c7:cc: dd:a4:da:3c:49:da:f2:16:79:d7:ef:2f:1e:af:6b:01:b5:f1: e8:7c:9e:89:d3:7f:20:61:d0:47:62:fc:74:60:1e:c1:34:bd: 6e:1a:34:b9:2d:88:8c:c4:83:95:e5:aa:65:59:47:35:de:d0: 4d:47:d2:96:c6:4e:19:9b:49:20:04:d8:18:b9:53:38:ad:de: 23:8a:16:e2:62:f0:6a:58:ae:38:e6:26:08:05:ba:15:e4:96: 64:31:5b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMf6mKxcQg0iJMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2YzZmE3ZjAtN2I5NS00OGM4LTkxNTItNTg1YTY0MmE4MmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAMh3dSk40VVhFS56GYf+Co7ncs9r8JL/B1F k+MUGXkll3wAUYCRqJse9HFoQt7lKq6Wt9Qe+wDKQVnf1E9R36woaTQnFh+g06CY HZP8KTuQgwjnquseRZWAQj88L9uumkYL8QwG7TB+Ii2e3kFmJEQHY7fYghZ6KQpA a9UPBymwRz1qv6gdBedChH5PGQ97SfNqFXbac4/o8sW9Kl+gTjYj66HqF4jz72CA AySu07U+k2la0R4yI+gSKaMTEY9Frn9QpmSQW4+Cn0e9KdEdtUKFfGGguWZHBxsg kSrM3UBMi8lS/xeWm87YVbtwXbkCc6WFv28WeKr9ccgMwAGnqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHOKFMrzH9dQQPphqr4bRF6aIiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDI3ZGUxMGItNWQ5ZC0z YzI3LTkyN2UtZGQwMTIzZmI2NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjHaOezqr6GJPhiv8zjHLtsgfHwrlgMmMjuI21XsfDFIYJ3GViUlyzG +TlLWNgCpfQOWk81pt+CwID8qFQeuTNZlDt7dFMk7eiMsHQClY4VluMxaBKajmYd EJcE8u7NA0cmwl64XYKWUtrjDZcxuEnm0OS8XOm546YX5txcbgQjCUa9WfnZr1X/ f4BaQ0JSKzqa0Vj1ACvygQNEIfuXr2rHzN2k2jxJ2vIWedfvLx6vawG18eh8nonT fyBh0Edi/HRgHsE0vW4aNLktiIzEg5XlqmVZRzXe0E1H0pbGThmbSSAE2Bi5Uzit 3iOKFuJi8GpYrjjmJggFuhXklmQxW80= -----END CERTIFICATE-----Generated at Wed Jun 4 22:54:57 2025 by rpki-client