$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba5bcb4-e6f4-3c64-91f4-2b365b20f530.roa File: dba5bcb4-e6f4-3c64-91f4-2b365b20f530.roa (raw, json) Hash identifier: bOXp33vQudBs+l4av5172mNUUI9wCK1MlDi1vxcA4TM= Subject key identifier: E0:4E:03:E0:9F:5B:87:7A:A5:B3:5E:52:11:A3:99:3A:BB:35:06:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F653316C4DFF73DE4880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba5bcb4-e6f4-3c64-91f4-2b365b20f530.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.41.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f6:53:31:6c:4d:ff:73:de:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=85ae74e7-45ad-41c0-9a62-7c63e30a0d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:ac:14:a5:1e:49:02:10:16:a1:30:3f:4f: a3:10:6f:58:fe:c1:9a:23:1a:1c:ad:d1:ab:e1:89: 5a:71:3c:c6:3f:2d:11:f2:26:20:d1:a4:e5:9c:ae: 83:2d:0d:24:70:5e:a1:c6:e1:39:25:41:3d:66:c2: 60:b6:b3:ef:44:16:38:30:51:5b:b1:15:ef:c1:a7: 16:8b:5e:50:24:a6:19:80:72:57:00:b0:a3:e1:7f: 8d:73:a6:ac:73:f2:59:9b:70:b5:af:e6:4b:9e:9a: f6:f5:17:58:d2:00:fa:da:ec:22:ac:70:78:d2:6f: e7:fa:34:c2:c8:e0:db:49:2c:39:d9:64:ae:80:e6: ea:24:93:bc:8e:09:ae:d9:09:62:fc:35:46:57:7a: a2:d9:bd:cd:d8:41:cf:5a:96:b1:b2:29:28:34:f0: 45:e2:c2:65:61:2f:83:c2:ab:35:5b:62:85:73:78: 4e:a5:87:8b:f2:cf:4d:2e:d9:8d:7b:7c:85:cc:f8: 32:bd:6e:61:cb:3d:64:47:9a:24:46:91:ed:44:57: ed:0e:e4:b5:39:89:7e:22:5d:87:ce:95:28:63:08: 82:3e:d7:ce:01:c4:ff:d7:ce:60:71:56:ad:f1:be: ad:b0:c6:7d:b1:79:af:04:87:15:43:79:72:72:bf: f8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4E:03:E0:9F:5B:87:7A:A5:B3:5E:52:11:A3:99:3A:BB:35:06:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba5bcb4-e6f4-3c64-91f4-2b365b20f530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:44:b9:28:2d:a3:d5:7d:d2:ed:1c:26:89:57:3d:26:03:cf: d7:cc:60:58:fc:0b:b0:c4:6c:95:c9:a0:93:12:ff:30:b1:d2: 19:bb:19:09:cf:5e:30:34:d0:5a:aa:f3:52:66:33:d5:a9:f3: 03:0d:74:c2:de:fe:ed:0c:43:05:35:fd:e1:90:65:7f:6a:f1: e5:51:68:0f:e4:b9:c6:3b:a1:59:3d:63:cb:41:e5:4e:bc:d4: 5b:b2:1f:e5:5a:c1:0e:57:15:24:49:0d:23:17:a6:61:72:5f: c7:ed:65:58:a3:50:7d:af:3a:01:4a:de:7b:ca:18:4a:96:55: c0:f4:a9:66:f4:f7:48:c3:51:30:4a:fa:90:c4:6a:f9:cd:c0: 15:51:f0:2f:c4:5b:60:4d:d9:43:5c:cd:b7:ed:ed:e4:26:6c: af:7d:17:3f:66:4a:a4:d1:8c:0b:dd:09:1f:a7:06:9d:fc:ff: 55:d1:72:17:ae:25:81:48:81:41:c3:74:7c:8d:f6:2e:71:4d: be:6f:1f:1e:4a:8e:a8:d0:1a:e4:87:03:1c:1a:17:ec:d3:d3: e9:7c:a2:50:c9:27:b0:6e:17:a3:a6:cd:f3:c1:bc:2e:ef:2f: 6c:59:e5:62:b7:b0:cf:ca:a5:ed:29:5e:5f:8e:fb:9a:32:7a: e0:09:ae:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfZTMWxN/3PeSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODVhZTc0ZTctNDVhZC00MWMwLTlhNjItN2M2M2UzMGEwZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvSsFKUeSQIQFqEwP0+jEG9Y/sGaIxocrdGr 4YlacTzGPy0R8iYg0aTlnK6DLQ0kcF6hxuE5JUE9ZsJgtrPvRBY4MFFbsRXvwacW i15QJKYZgHJXALCj4X+Nc6asc/JZm3C1r+ZLnpr29RdY0gD62uwirHB40m/n+jTC yODbSSw52WSugObqJJO8jgmu2Qli/DVGV3qi2b3N2EHPWpaxsikoNPBF4sJlYS+D wqs1W2KFc3hOpYeL8s9NLtmNe3yFzPgyvW5hyz1kR5okRpHtRFftDuS1OYl+Il2H zpUoYwiCPtfOAcT/185gcVat8b6tsMZ9sXmvBIcVQ3lycr/4MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBOA+CfW4d6pbNeUhGjmTq7NQYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGJhNWJjYjQtZTZmNC0z YzY0LTkxZjQtMmIzNjViMjBmNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZEuSgto9V90u0cJolXPSYDz9fMYFj8C7DEbJXJoJMS/zCx0hm7GQnP XjA00Fqq81JmM9Wp8wMNdMLe/u0MQwU1/eGQZX9q8eVRaA/kucY7oVk9Y8tB5U68 1FuyH+VawQ5XFSRJDSMXpmFyX8ftZVijUH2vOgFK3nvKGEqWVcD0qWb090jDUTBK +pDEavnNwBVR8C/EW2BN2UNczbft7eQmbK99Fz9mSqTRjAvdCR+nBp38/1XRcheu JYFIgUHDdHyN9i5xTb5vHx5KjqjQGuSHAxwaF+zT0+l8olDJJ7BuF6OmzfPBvC7v L2xZ5WK3sM/Kpe0pXl+O+5oyeuAJrrc= -----END CERTIFICATE-----Generated at Tue Jun 3 04:54:23 2025 by rpki-client