$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9c6e2a-2823-3495-87ef-03bd7a6fcc26.roa File: df9c6e2a-2823-3495-87ef-03bd7a6fcc26.roa (raw, json) Hash identifier: SL0VSq+H26OIkUFMGiNx3g3acqBkH20AE1LQQoID6Rk= Subject key identifier: 78:CF:A0:18:EA:D2:07:B8:87:D2:D8:26:7F:45:AB:7F:78:B2:A6:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430947282D08C5076ED4480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9c6e2a-2823-3495-87ef-03bd7a6fcc26.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.37.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:94:72:82:d0:8c:50:76:ed:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9ad61008-803b-4f3e-91f3-00bdc9fa8547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:9e:bd:04:69:fe:c8:1f:45:66:19:74:0b: a9:8f:36:3c:8f:e7:36:8c:e2:9e:70:03:cb:8c:bf: 8c:ef:d2:ee:78:9b:e8:b0:e1:3f:b1:cc:b1:76:54: 0b:e5:c0:72:97:e4:9c:0b:9f:ee:80:34:24:7f:73: e0:d7:c8:cd:02:d1:3a:9d:39:b0:c6:f3:f8:db:13: 11:37:dc:f5:6b:06:91:c6:0c:3a:38:20:91:58:8d: fd:49:f9:5b:05:56:6b:00:92:b5:71:bf:69:ff:fa: 05:f3:06:88:bc:3a:4f:d5:eb:75:19:f6:74:0c:8a: bd:fd:cb:f3:1d:12:28:1b:d4:94:41:a8:2c:f3:5a: b7:ea:60:19:94:54:25:76:2c:2d:05:16:10:30:ff: 1a:ca:97:fa:a3:c2:ef:95:10:18:00:02:e5:dc:32: 4c:35:b0:cc:d4:dd:a0:01:ff:1c:48:8a:58:5f:6c: 05:6e:92:16:9b:b1:05:63:93:68:58:a9:34:f3:d1: 97:29:5a:68:53:e3:1f:08:64:53:d0:f6:17:27:b3: 0b:cc:75:63:33:f2:80:86:85:eb:ff:38:5b:b9:4c: 4e:cc:9d:d8:36:1b:0c:b0:0f:f7:90:28:7c:4a:d3: 81:74:df:6c:72:89:c6:f3:ce:6e:81:bd:95:5a:fa: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CF:A0:18:EA:D2:07:B8:87:D2:D8:26:7F:45:AB:7F:78:B2:A6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9c6e2a-2823-3495-87ef-03bd7a6fcc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fa:6a:6a:83:fd:fa:36:98:2a:87:ee:3b:da:1c:7a:6b:ef: 14:11:63:4f:2a:e3:7a:6e:16:1d:9e:ab:9b:60:45:fb:70:49: b9:8e:af:05:4a:00:5f:3d:ff:77:e9:32:81:3e:0f:0e:34:c1: b8:4f:22:ec:b3:e4:10:cc:41:b9:52:fa:55:90:2d:00:d4:13: 9f:aa:55:9b:be:95:7b:5a:60:64:0b:4a:68:97:2a:a4:e5:4a: 83:44:cc:b5:21:8f:b7:4f:fb:a3:96:44:a0:ed:26:6a:fa:d2: af:91:60:26:77:e4:3e:16:7c:ec:52:60:09:2f:45:48:cd:f7: 1a:e4:a4:a9:ba:66:c6:17:1f:5c:82:cc:40:0b:34:6e:ab:e2: 03:95:cb:b1:0a:cf:56:e4:ee:d2:f0:d6:f3:4b:f5:b2:a6:94: 01:24:4b:63:fd:fe:aa:48:d5:96:b2:34:be:d2:e5:07:80:d6: f3:22:9e:fa:50:f4:5f:c4:12:87:44:3b:ac:f7:28:7d:33:af: 97:91:87:4c:9e:b9:8b:42:77:0e:3a:da:84:14:c3:78:a1:3d: 15:f4:89:bd:dc:fc:f3:a1:32:10:e3:05:50:0c:01:bc:dd:57: 52:a6:e4:ed:42:3d:24:d2:dc:66:b0:8d:5f:4e:28:7a:e8:2d: 59:04:02:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMJRygtCMUHbtRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWFkNjEwMDgtODAzYi00ZjNlLTkxZjMtMDBiZGM5ZmE4NTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwOevQRp/sgfRWYZdAupjzY8j+c2jOKecAPL jL+M79LueJvosOE/scyxdlQL5cByl+ScC5/ugDQkf3Pg18jNAtE6nTmwxvP42xMR N9z1awaRxgw6OCCRWI39SflbBVZrAJK1cb9p//oF8waIvDpP1et1GfZ0DIq9/cvz HRIoG9SUQags81q36mAZlFQldiwtBRYQMP8aypf6o8LvlRAYAALl3DJMNbDM1N2g Af8cSIpYX2wFbpIWm7EFY5NoWKk089GXKVpoU+MfCGRT0PYXJ7MLzHVjM/KAhoXr /zhbuUxOzJ3YNhsMsA/3kCh8StOBdN9sconG885ugb2VWvrGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjPoBjq0ge4h9LYJn9Fq394sqaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY5YzZlMmEtMjgyMy0z NDk1LTg3ZWYtMDNiZDdhNmZjYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz6amqD/fo2mCqH7jvaHHpr7xQRY08q43puFh2eq5tgRftwSbmOrwVK AF89/3fpMoE+Dw40wbhPIuyz5BDMQblS+lWQLQDUE5+qVZu+lXtaYGQLSmiXKqTl SoNEzLUhj7dP+6OWRKDtJmr60q+RYCZ35D4WfOxSYAkvRUjN9xrkpKm6ZsYXH1yC zEALNG6r4gOVy7EKz1bk7tLw1vNL9bKmlAEkS2P9/qpI1ZayNL7S5QeA1vMinvpQ 9F/EEodEO6z3KH0zr5eRh0yeuYtCdw462oQUw3ihPRX0ib3c/POhMhDjBVAMAbzd V1Km5O1CPSTS3GawjV9OKHroLVkEApY= -----END CERTIFICATE-----Generated at Tue Jun 3 06:30:02 2025 by rpki-client