$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb5198ff-a9c7-3c39-9170-729d147da88a.roa File: eb5198ff-a9c7-3c39-9170-729d147da88a.roa (raw, json) Hash identifier: ly9jf9muEyKrsS1hv1/XZ+mbMhN68DmdRkzf7XkoP+4= Subject key identifier: 31:2A:1D:86:52:1D:DD:68:EB:39:A7:31:69:B5:0F:77:53:5E:0C:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430C295D1EA879F1D847D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb5198ff-a9c7-3c39-9170-729d147da88a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.61.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:c2:95:d1:ea:87:9f:1d:84:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=291f984a-72a8-4a76-9571-04704e50359e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4c:58:4e:ad:d2:cb:79:68:bf:be:50:22:37: 93:4a:91:37:3b:4a:07:ad:0f:ee:b7:71:55:d3:bd: 71:4d:52:59:44:19:d8:f4:6d:34:1b:f8:19:a5:48: 18:14:7c:46:87:42:1a:94:76:9a:92:03:2c:34:a0: ff:22:6d:c6:8b:02:b8:1d:61:1f:20:d2:df:e7:c9: b8:97:b4:06:cd:c5:d3:75:a0:da:5f:43:66:22:d5: d7:5a:c7:24:d6:09:7f:dc:27:5b:64:02:51:b7:4b: 5b:09:d4:f6:f9:a1:10:57:29:4e:18:15:d1:d0:4d: 6f:1d:f4:83:8e:01:64:1a:8e:10:26:b9:dd:36:6b: 89:89:89:20:20:00:ee:0a:1c:10:1f:f8:13:45:b4: 30:7e:ec:85:b2:e0:5b:9b:7e:61:f1:ad:aa:33:87: f7:8a:8d:f0:2a:c2:41:0c:1e:93:cd:37:f3:1e:69: 9b:66:a3:24:c6:af:d7:c6:ef:27:e0:f5:07:f3:af: cf:91:5a:3b:d4:eb:1f:fe:3f:e8:95:2b:06:55:21: 37:a7:c1:a4:a1:1f:2d:30:49:cc:31:c8:9e:34:08: 23:79:7c:cd:cc:cb:9a:eb:35:77:c2:55:73:00:3e: 9a:02:af:76:c3:6b:d6:44:ba:92:5a:89:bc:bd:ed: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2A:1D:86:52:1D:DD:68:EB:39:A7:31:69:B5:0F:77:53:5E:0C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb5198ff-a9c7-3c39-9170-729d147da88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:60:84:b3:33:6b:bb:1a:52:53:07:32:2d:4e:9c:c5:59:5e: 71:ee:59:b8:d7:b8:48:f0:67:dd:b3:40:5b:b7:74:75:b5:b3: ae:2b:8f:74:85:e9:24:24:f8:f4:1b:45:b0:49:f9:a9:e0:52: 0a:86:1e:5f:6d:e6:09:08:fa:23:fc:0d:f0:4b:a8:83:48:41: 7e:cd:c2:24:43:30:cf:6c:a7:02:e1:d9:58:f2:6e:91:56:35: 10:82:58:4d:47:38:14:99:6f:5b:f8:bd:0d:99:55:bf:79:fa: d1:c7:8c:f4:81:aa:d3:54:3f:45:70:5e:42:3b:2d:67:d7:e3: 72:cd:6a:7b:80:5e:d2:71:e3:42:1a:79:dc:9b:e6:83:3c:ca: 02:af:f0:44:ec:da:de:84:f1:89:9e:cb:61:00:b3:03:34:3a: 31:f1:10:d6:e4:59:40:9e:02:f1:26:f9:7a:b1:e0:a0:e6:4d: db:68:12:29:75:4b:c9:18:29:d2:74:2d:62:1a:33:11:c2:9e: 6e:ba:2e:b8:a1:d3:36:0b:5e:8a:61:de:d9:30:24:1d:03:b4: 78:bf:78:c0:a4:1c:93:0c:d9:b0:89:56:ec:19:3b:14:8d:98: 45:75:f5:3f:b2:17:4d:4d:76:ad:e4:3c:d4:73:8b:20:b5:b6: ac:51:b4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMMKV0eqHnx2EfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjkxZjk4NGEtNzJhOC00YTc2LTk1NzEtMDQ3MDRlNTAzNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UxYTq3Sy3lov75QIjeTSpE3O0oHrQ/ut3FV 071xTVJZRBnY9G00G/gZpUgYFHxGh0IalHaakgMsNKD/Im3GiwK4HWEfINLf58m4 l7QGzcXTdaDaX0NmItXXWsck1gl/3CdbZAJRt0tbCdT2+aEQVylOGBXR0E1vHfSD jgFkGo4QJrndNmuJiYkgIADuChwQH/gTRbQwfuyFsuBbm35h8a2qM4f3io3wKsJB DB6TzTfzHmmbZqMkxq/Xxu8n4PUH86/PkVo71Osf/j/olSsGVSE3p8GkoR8tMEnM McieNAgjeXzNzMua6zV3wlVzAD6aAq92w2vWRLqSWom8ve2YSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEqHYZSHd1o6zmnMWm1D3dTXgxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWI1MTk4ZmYtYTljNy0z YzM5LTkxNzAtNzI5ZDE0N2RhODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNghLMza7saUlMHMi1OnMVZXnHuWbjXuEjwZ92zQFu3dHW1s64rj3SF 6SQk+PQbRbBJ+angUgqGHl9t5gkI+iP8DfBLqINIQX7NwiRDMM9spwLh2VjybpFW NRCCWE1HOBSZb1v4vQ2ZVb95+tHHjPSBqtNUP0VwXkI7LWfX43LNanuAXtJx40Ia edyb5oM8ygKv8ETs2t6E8Ymey2EAswM0OjHxENbkWUCeAvEm+Xqx4KDmTdtoEil1 S8kYKdJ0LWIaMxHCnm66Lrih0zYLXoph3tkwJB0DtHi/eMCkHJMM2bCJVuwZOxSN mEV19T+yF01Ndq3kPNRziyC1tqxRtCY= -----END CERTIFICATE-----Generated at Wed Jun 4 23:10:21 2025 by rpki-client