$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0f889e0-ca01-3159-8fb8-f838182713e5.roa File: e0f889e0-ca01-3159-8fb8-f838182713e5.roa (raw, json) Hash identifier: sguCFCvGtv2SEju+qa6aAm+vTfO99Ne5+BYKi4aV/ys= Subject key identifier: CF:E8:97:DB:D5:D7:DC:8A:4A:CD:39:8E:4A:57:A9:7F:CE:DB:2F:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F842A9281E84E80E4D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0f889e0-ca01-3159-8fb8-f838182713e5.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.42.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f8:42:a9:28:1e:84:e8:0e:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=17e911f2-239c-4984-9d54-d82884c4d92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:b7:b9:a5:99:c6:dd:49:99:3a:ee:d5:87: 54:48:20:62:58:ca:db:7c:f5:ac:61:53:71:02:fe: e6:7f:2e:b9:4c:e4:1a:78:a1:10:6f:c9:57:8e:6f: ac:79:cb:2c:d4:a0:b3:c4:c9:1f:be:0c:6b:c9:f0: b9:6d:36:b0:14:c3:ce:5f:87:95:76:72:bd:31:6f: b4:4e:78:56:0b:8c:c2:99:6c:a9:e0:27:f4:6b:79: c4:9c:88:01:4f:52:c4:ba:f0:8c:68:23:9d:fb:ec: 9b:cb:86:89:10:47:f7:00:c1:9b:f0:bb:db:2c:13: 7e:d8:dc:8c:c7:42:06:8f:ed:c7:53:08:af:df:42: 9d:e0:c0:42:0d:e6:db:23:a1:c2:54:a6:51:cf:f5: 33:8c:2c:af:c8:1a:29:ba:30:d8:11:e8:ab:4c:d8: 65:01:30:51:d5:5d:23:cc:0e:0e:48:53:c1:ac:b8: 8d:35:9b:7d:65:4c:48:cc:9e:bd:bc:cf:89:42:5d: c2:cc:5a:f4:46:16:d0:18:db:02:11:5a:8e:b4:41: 1b:8f:e4:b6:71:bb:e4:47:2e:d2:d9:6e:95:0c:72: 7a:70:ba:30:40:fc:01:4c:37:db:76:39:8a:46:5b: 35:c0:14:52:e1:f3:2f:93:21:69:2b:a6:a0:3d:87: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:97:DB:D5:D7:DC:8A:4A:CD:39:8E:4A:57:A9:7F:CE:DB:2F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0f889e0-ca01-3159-8fb8-f838182713e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:bf:2b:10:7f:60:07:77:71:75:a4:5d:e3:ea:41:bb:2f:b6: 9b:30:7c:50:2b:38:9a:ab:69:dd:66:58:03:a3:05:11:a5:29: 55:62:2f:fb:c3:be:53:98:35:de:95:0f:a0:c8:db:c9:69:b8: 65:87:33:0b:b7:a8:f4:cf:82:ac:e1:a4:52:8a:65:bc:44:f5: b4:8a:e7:48:29:59:34:26:dd:de:5d:2c:78:6f:c8:76:80:9c: 17:29:12:d2:10:08:dd:b1:23:b0:87:d3:8c:7f:67:bc:77:34: e0:3e:7b:7f:e4:25:1b:5b:90:d1:60:dc:b6:eb:6d:c7:17:f7: 86:29:4f:39:b4:05:11:22:04:81:fd:e9:9c:3a:46:8e:d4:59: 97:b3:44:cd:2f:e4:ae:b7:54:c3:3e:9c:c4:90:f2:d5:7c:ef: f1:dc:8e:56:94:20:f4:42:c6:34:de:a4:64:77:03:cc:35:69: e0:ae:3b:cb:65:56:6a:27:6f:9e:97:28:71:77:1a:1e:1b:fd: 1b:dd:38:76:6a:51:30:16:c2:22:90:b0:e3:99:9d:3a:9f:33: ed:62:62:09:20:aa:e0:fa:dd:85:f8:5c:e3:ad:de:7c:d0:cb: 23:5e:cf:ea:f9:a1:b5:ee:c5:d1:ea:e7:e9:cf:d9:c8:39:a4: 48:a5:8e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfhCqSgehOgOTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTdlOTExZjItMjM5Yy00OTg0LTlkNTQtZDgyODg0YzRkOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSK3uaWZxt1JmTru1YdUSCBiWMrbfPWsYVNx Av7mfy65TOQaeKEQb8lXjm+secss1KCzxMkfvgxryfC5bTawFMPOX4eVdnK9MW+0 TnhWC4zCmWyp4Cf0a3nEnIgBT1LEuvCMaCOd++yby4aJEEf3AMGb8LvbLBN+2NyM x0IGj+3HUwiv30Kd4MBCDebbI6HCVKZRz/UzjCyvyBopujDYEeirTNhlATBR1V0j zA4OSFPBrLiNNZt9ZUxIzJ69vM+JQl3CzFr0RhbQGNsCEVqOtEEbj+S2cbvkRy7S 2W6VDHJ6cLowQPwBTDfbdjmKRls1wBRS4fMvkyFpK6agPYdDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/ol9vV19yKSs05jkpXqX/O2y+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTBmODg5ZTAtY2EwMS0z MTU5LThmYjgtZjgzODE4MjcxM2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALi/KxB/YAd3cXWkXePqQbsvtpswfFArOJqrad1mWAOjBRGlKVViL/vD vlOYNd6VD6DI28lpuGWHMwu3qPTPgqzhpFKKZbxE9bSK50gpWTQm3d5dLHhvyHaA nBcpEtIQCN2xI7CH04x/Z7x3NOA+e3/kJRtbkNFg3LbrbccX94YpTzm0BREiBIH9 6Zw6Ro7UWZezRM0v5K63VMM+nMSQ8tV87/HcjlaUIPRCxjTepGR3A8w1aeCuO8tl Vmonb56XKHF3Gh4b/RvdOHZqUTAWwiKQsOOZnTqfM+1iYgkgquD63YX4XOOt3nzQ yyNez+r5obXuxdHq5+nP2cg5pEiljtU= -----END CERTIFICATE-----Generated at Tue Jun 3 06:10:33 2025 by rpki-client