$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa File: df89c50c-62c6-3b77-9fec-19798455694b.roa (raw, json) Hash identifier: F6j5Ufk4kPnnImU2v6xbB/FwjGVW5Ac2bZc+G97sIi8= Subject key identifier: 54:EB:92:31:1B:D7:B3:1C:C1:3B:24:33:0D:A9:6C:7A:F6:13:62:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F7EFBB8A3D2A0DD61C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.42.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f7:ef:bb:8a:3d:2a:0d:d6:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=31cf0358-7dea-4e8a-9ccd-234840b425b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e3:b3:f1:1c:17:88:ae:eb:bc:d1:d1:49:1d: bc:07:65:05:12:9b:b0:04:ee:1f:58:eb:d1:55:cb: ce:f0:98:8f:5b:c5:d7:ab:f7:a2:f4:da:b2:99:8e: 76:0b:95:74:5e:3f:1a:59:1d:13:63:b8:22:e6:99: b7:81:68:e7:20:52:97:c1:51:ae:55:26:f6:9c:98: 21:68:f9:20:4d:b8:81:78:0a:60:d1:ea:ec:d2:f0: 2d:65:50:03:ae:f5:94:24:b4:8e:90:2a:56:37:b2: 08:12:85:82:fe:f6:c0:af:95:9d:bd:8e:aa:91:4d: 3a:30:11:af:41:5b:dd:5b:29:bd:38:31:b5:80:50: 29:39:e1:dc:22:b0:3e:33:27:e1:ef:cf:d0:93:52: 06:b6:a6:a1:88:70:58:e4:17:af:f6:b8:e0:7e:71: bf:c0:f7:46:14:9e:2d:e2:4b:16:07:43:7e:35:11: 9f:33:b2:8b:1d:e6:b2:b2:c8:4b:5c:37:58:bf:30: ea:d6:2e:9a:0d:7f:7b:39:f4:3f:48:04:b8:c8:24: 10:a4:34:0e:1e:a7:a9:47:d5:02:3b:dd:f5:6b:ac: 98:0c:5b:fd:cf:36:ac:05:c3:df:5c:07:b9:c0:f3: 0f:23:92:75:8f:5e:2a:6e:7c:f4:c7:b4:7f:16:94: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EB:92:31:1B:D7:B3:1C:C1:3B:24:33:0D:A9:6C:7A:F6:13:62:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:1e:3e:23:cd:f7:9e:b8:95:34:8b:dc:93:77:4c:a2:58:c9: 1f:f5:47:ec:2d:a9:e7:5a:53:a8:d0:9d:ff:39:b2:c4:80:24: 82:6d:98:e6:51:72:c2:35:4e:9f:63:1f:90:68:30:42:1b:b1: cf:60:87:7f:be:e6:78:a3:03:5d:c2:24:47:3b:82:3f:92:68: c3:df:6e:98:03:44:fb:77:92:7c:d6:bc:8e:9e:5e:5d:8a:c9: 60:7a:d3:ec:93:6f:06:76:aa:6c:de:a4:74:b2:be:0a:ac:55: 7f:d5:a4:b9:5b:59:0b:20:94:74:77:58:07:db:6a:81:49:bc: de:bd:82:ba:3f:b1:91:ae:44:e7:51:ff:f7:0e:32:ed:c1:db: 82:78:c2:94:27:5e:a6:50:42:3d:03:09:1f:cb:08:da:14:11: 0c:6a:94:1f:46:14:01:96:d4:12:f6:37:74:5c:de:20:38:74: 3d:7e:16:69:ee:10:de:d4:c7:0a:f9:ad:f1:2c:7c:9a:43:cd: 3f:1c:f3:78:23:ea:42:6f:88:ca:51:9e:11:d2:68:fb:c5:74: ae:b8:41:e5:18:86:04:0a:fb:4f:92:6f:9a:a2:d4:0d:70:39: 0b:72:e8:e8:06:90:ae:71:fe:16:8a:7d:49:dc:b1:dd:6e:d9: 8d:6e:2c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMffvu4o9Kg3WHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzFjZjAzNTgtN2RlYS00ZThhLTljY2QtMjM0ODQwYjQyNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+Oz8RwXiK7rvNHRSR28B2UFEpuwBO4fWOvR VcvO8JiPW8XXq/ei9NqymY52C5V0Xj8aWR0TY7gi5pm3gWjnIFKXwVGuVSb2nJgh aPkgTbiBeApg0ers0vAtZVADrvWUJLSOkCpWN7IIEoWC/vbAr5WdvY6qkU06MBGv QVvdWym9ODG1gFApOeHcIrA+Myfh78/Qk1IGtqahiHBY5Bev9rjgfnG/wPdGFJ4t 4ksWB0N+NRGfM7KLHeaysshLXDdYvzDq1i6aDX97OfQ/SAS4yCQQpDQOHqepR9UC O931a6yYDFv9zzasBcPfXAe5wPMPI5J1j14qbnz0x7R/FpTqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTrkjEb17McwTskMw2pbHr2E2IrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4OWM1MGMtNjJjNi0z Yjc3LTlmZWMtMTk3OTg0NTU2OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgePiPN9564lTSL3JN3TKJYyR/1R+wtqedaU6jQnf85ssSAJIJtmOZR csI1Tp9jH5BoMEIbsc9gh3++5nijA13CJEc7gj+SaMPfbpgDRPt3knzWvI6eXl2K yWB60+yTbwZ2qmzepHSyvgqsVX/VpLlbWQsglHR3WAfbaoFJvN69gro/sZGuROdR //cOMu3B24J4wpQnXqZQQj0DCR/LCNoUEQxqlB9GFAGW1BL2N3Rc3iA4dD1+Fmnu EN7Uxwr5rfEsfJpDzT8c83gj6kJviMpRnhHSaPvFdK64QeUYhgQK+0+Sb5qi1A1w OQty6OgGkK5x/haKfUncsd1u2Y1uLBc= -----END CERTIFICATE-----Generated at Tue Jun 3 05:52:03 2025 by rpki-client