$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57e7f9e-5bb2-3609-8c2a-3a9532252f3d.roa File: d57e7f9e-5bb2-3609-8c2a-3a9532252f3d.roa (raw, json) Hash identifier: UM5QYrjrccfpfoEjZKExK1tDjTp/Phn6dv3ep3F0RfI= Subject key identifier: F1:7A:FA:8E:CD:0E:07:FB:2A:AE:F0:71:C9:E2:77:D1:91:D8:7F:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4309F9E990925FD9D4998A8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57e7f9e-5bb2-3609-8c2a-3a9532252f3d.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.42.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:9f:9e:99:09:25:fd:9d:49:98:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=398f1121-0dbf-4337-8927-c593846db14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:c8:09:aa:35:e7:30:af:3e:ac:98:9b:f9: af:6f:95:35:8f:c1:04:92:1b:39:52:54:bf:0e:90: 5f:25:29:d7:a9:1d:10:dd:d1:74:66:db:82:84:6f: e7:78:3b:f5:c9:2a:4c:6a:ee:59:90:7c:60:ad:4b: 14:77:ae:5d:3e:a1:e2:f8:99:dc:04:69:f1:f4:9a: 00:d1:e6:7a:44:a7:97:f5:05:f9:9c:69:67:53:4e: 25:fd:ba:aa:70:29:e9:fd:ec:7b:dd:d2:b1:21:3f: c8:11:13:84:d3:7f:86:0b:7b:47:f2:cb:6b:72:2b: 9b:3f:1f:00:2c:43:a7:64:a9:9e:eb:78:e4:8c:77: 0c:8d:77:a7:9f:c9:a9:41:b2:90:75:ad:9e:2f:55: 75:03:5c:35:40:5c:6e:e6:6b:f6:9d:4a:45:6f:e2: 02:91:c6:bd:e6:86:cf:e2:60:fa:48:a0:c1:2b:4c: 22:fe:6e:3a:68:c4:9b:7d:04:97:62:ab:0c:65:36: bd:42:1b:2e:86:5b:24:7f:3e:20:38:1a:76:92:b4: 3e:a0:c4:9a:81:f1:bd:3c:0a:95:a1:68:30:37:24: 02:36:47:cc:cc:03:6b:cf:e0:b7:ba:3f:b7:65:8e: 91:06:f5:a2:39:63:30:3a:ae:a9:e0:4c:ec:da:33: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7A:FA:8E:CD:0E:07:FB:2A:AE:F0:71:C9:E2:77:D1:91:D8:7F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d57e7f9e-5bb2-3609-8c2a-3a9532252f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a1:09:58:20:14:8a:9f:02:24:43:df:f5:84:4a:4e:6f:5d: 26:a5:02:ac:f5:00:7a:e4:96:ee:8e:91:61:0b:e6:a0:e2:58: cc:40:8f:f6:60:78:8e:c8:84:59:d2:9a:4c:00:0d:bb:4a:26: 28:8c:e0:32:56:56:09:b1:b4:4d:3b:1e:67:72:18:4a:58:0e: a6:74:c6:9b:21:7b:ad:78:4d:12:7d:41:b8:10:e8:68:04:43: 7e:09:38:40:2a:e1:9b:a4:6e:10:bc:47:81:2e:ca:89:59:5c: b5:f9:b0:44:1e:69:bd:91:ff:de:d7:c8:32:db:bc:34:b8:67: c1:3f:09:d3:80:13:80:11:b9:70:0c:b4:36:da:84:63:da:96: 95:0c:fe:85:41:b6:71:5c:be:57:1b:93:b2:6d:4b:db:7d:1f: 2b:fd:f2:46:3a:e7:19:fd:f0:9a:01:d2:fb:23:80:73:b5:1f: 98:8c:b3:e5:ee:7e:7a:d0:9d:fe:8d:30:84:42:5b:ca:41:d5: a7:6d:ee:19:76:0c:9e:9e:6e:3a:95:c8:44:a0:77:39:ce:82: b5:5b:25:19:cf:eb:b4:f0:eb:34:eb:5b:31:cb:69:2b:e6:7b: ab:39:3a:ae:20:ea:65:9c:74:d2:9a:4b:c7:1a:9d:12:f6:46: bd:f5:ae:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMJ+emQkl/Z1JmKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Mzk4ZjExMjEtMGRiZi00MzM3LTg5MjctYzU5Mzg0NmRiMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPfICao15zCvPqyYm/mvb5U1j8EEkhs5UlS/ DpBfJSnXqR0Q3dF0ZtuChG/neDv1ySpMau5ZkHxgrUsUd65dPqHi+JncBGnx9JoA 0eZ6RKeX9QX5nGlnU04l/bqqcCnp/ex73dKxIT/IEROE03+GC3tH8strciubPx8A LEOnZKme63jkjHcMjXenn8mpQbKQda2eL1V1A1w1QFxu5mv2nUpFb+ICkca95obP 4mD6SKDBK0wi/m46aMSbfQSXYqsMZTa9Qhsuhlskfz4gOBp2krQ+oMSagfG9PAqV oWgwNyQCNkfMzANrz+C3uj+3ZY6RBvWiOWMwOq6p4Ezs2jPFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF6+o7NDgf7Kq7wccnid9GR2H+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU3ZTdmOWUtNWJiMi0z NjA5LThjMmEtM2E5NTMyMjUyZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCqiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHehCVggFIqfAiRD3/WESk5vXSalAqz1AHrklu6OkWEL5qDiWMxAj/Zg eI7IhFnSmkwADbtKJiiM4DJWVgmxtE07HmdyGEpYDqZ0xpshe614TRJ9QbgQ6GgE Q34JOEAq4ZukbhC8R4EuyolZXLX5sEQeab2R/97XyDLbvDS4Z8E/CdOAE4ARuXAM tDbahGPalpUM/oVBtnFcvlcbk7JtS9t9Hyv98kY65xn98JoB0vsjgHO1H5iMs+Xu fnrQnf6NMIRCW8pB1adt7hl2DJ6ebjqVyESgdznOgrVbJRnP67Tw6zTrWzHLaSvm e6s5Oq4g6mWcdNKaS8canRL2Rr31rvU= -----END CERTIFICATE-----Generated at Wed Jun 4 23:05:36 2025 by rpki-client