$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa File: df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa (raw, json) Hash identifier: lynA3b40lhQzhH8pcBZI0lbJH/fzWvkjsMx1LAaRHHU= Subject key identifier: F8:80:F5:B9:E9:6B:5D:FF:48:4F:93:EF:E8:EE:D8:CB:89:B8:24:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4309937525068E776F1F700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.40.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:99:37:52:50:68:e7:76:f1:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=cb87c37c-cf4d-4ec4-8575-778e40f7b80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:a4:07:8c:6d:1c:db:e1:e2:95:c4:d4:eb: 04:e7:48:0d:e1:c0:11:b1:25:6b:7e:ee:04:49:e3: e9:cd:cd:b8:bf:c3:01:82:cb:ca:98:f7:3c:77:04: 02:43:64:31:ac:f5:e7:57:43:05:64:40:92:d7:a7: 4c:0a:68:cd:bc:83:84:ca:f8:9f:d8:46:d8:7f:78: 06:09:ad:48:f5:3b:ff:8d:da:e4:96:24:85:5f:a0: 2b:48:5d:02:11:e6:58:f6:01:37:0e:ae:29:b0:b3: e3:44:cf:06:a6:96:f2:58:d6:49:8a:4e:5d:3d:8d: 68:7f:d9:33:e2:d9:1f:a2:86:d4:c3:52:14:ba:49: 1b:a8:b0:74:a2:ff:ef:4d:a3:8b:eb:04:33:06:36: 5b:ac:87:87:27:41:82:21:75:fb:3c:ee:90:53:1d: 7a:46:51:47:03:90:43:c3:4e:39:f7:d1:fc:3b:7e: 93:f8:7a:a4:27:db:f8:b7:5f:ab:01:73:0a:53:01: aa:fe:11:8e:f2:3f:f7:59:83:eb:b2:7b:10:25:13: 69:26:92:a7:16:3e:50:7c:9d:a5:9e:9f:e1:49:80: f8:a3:bd:91:dd:52:c8:6e:a6:56:e0:ba:5d:ac:c5: 8a:cd:19:8e:89:eb:d6:97:9b:d4:f1:e6:93:10:83: ac:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:80:F5:B9:E9:6B:5D:FF:48:4F:93:EF:E8:EE:D8:CB:89:B8:24:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5feb8d-9af8-3f31-b1f9-4720e2e8def4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4e:c3:b9:83:05:ca:88:f9:8d:04:49:99:37:89:03:45:41: e6:1b:4f:72:45:9a:e0:ac:c6:06:1b:48:05:e3:f2:f3:ed:0c: f1:ff:b9:8f:0e:9a:c4:a6:7f:5b:96:b6:21:c6:7a:d2:26:3b: 7e:5e:91:4b:38:7f:91:63:e2:cc:ad:59:e9:ab:9f:c7:10:0e: 78:f8:02:0a:43:0a:0a:17:b6:2c:04:7b:7e:f0:ad:93:4c:e7: f8:e2:45:df:80:7c:d9:35:53:28:93:dd:b9:68:c4:31:24:45: 45:4b:fa:9b:73:1e:ca:03:c4:40:4b:fc:25:30:ca:d4:4a:3f: d3:2a:5e:ed:a2:c0:b7:05:6c:8d:1e:6e:06:8a:51:ff:45:12: bb:02:86:d5:64:8a:0c:35:35:35:a5:7d:fc:eb:54:d3:3c:5f: 59:8e:60:1f:11:dc:17:b1:c8:d7:c6:e1:f8:e2:24:8e:d9:4e: fa:c9:12:88:d9:68:a2:6d:9e:ac:17:58:f6:73:e5:3a:1e:c5: 90:b6:5b:12:c1:55:2d:17:f9:b8:cc:8f:85:91:60:47:5a:f3: 76:e7:f6:71:95:1d:8e:38:ba:f4:4f:ac:d7:78:3b:6a:50:aa: 11:74:ec:e2:e9:66:06:d4:13:db:d8:a8:3c:67:62:a6:c9:b4: ac:5b:59:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMJk3UlBo53bx9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2I4N2MzN2MtY2Y0ZC00ZWM0LTg1NzUtNzc4ZTQwZjdiODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4akB4xtHNvh4pXE1OsE50gN4cARsSVrfu4E SePpzc24v8MBgsvKmPc8dwQCQ2QxrPXnV0MFZECS16dMCmjNvIOEyvif2EbYf3gG Ca1I9Tv/jdrkliSFX6ArSF0CEeZY9gE3Dq4psLPjRM8GppbyWNZJik5dPY1of9kz 4tkfoobUw1IUukkbqLB0ov/vTaOL6wQzBjZbrIeHJ0GCIXX7PO6QUx16RlFHA5BD w04599H8O36T+HqkJ9v4t1+rAXMKUwGq/hGO8j/3WYPrsnsQJRNpJpKnFj5QfJ2l np/hSYD4o72R3VLIbqZW4LpdrMWKzRmOievWl5vU8eaTEIOs/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiA9bnpa13/SE+T7+ju2MuJuCQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY1ZmViOGQtOWFmOC0z ZjMxLWIxZjktNDcyMGUyZThkZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdOw7mDBcqI+Y0ESZk3iQNFQeYbT3JFmuCsxgYbSAXj8vPtDPH/uY8O msSmf1uWtiHGetImO35ekUs4f5Fj4sytWemrn8cQDnj4AgpDCgoXtiwEe37wrZNM 5/jiRd+AfNk1UyiT3bloxDEkRUVL+ptzHsoDxEBL/CUwytRKP9MqXu2iwLcFbI0e bgaKUf9FErsChtVkigw1NTWlffzrVNM8X1mOYB8R3BexyNfG4fjiJI7ZTvrJEojZ aKJtnqwXWPZz5ToexZC2WxLBVS0X+bjMj4WRYEda83bn9nGVHY44uvRPrNd4O2pQ qhF07OLpZgbUE9vYqDxnYqbJtKxbWVE= -----END CERTIFICATE-----Generated at Wed Jun 4 23:36:19 2025 by rpki-client