$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed33fa5e-ef12-36c1-9bc2-35f0aee1c6da.roa File: ed33fa5e-ef12-36c1-9bc2-35f0aee1c6da.roa (raw, json) Hash identifier: jfV3RxuMczCJNIeUH9VdtlB14436ESQDt80b/2AKxiU= Subject key identifier: 4A:C2:F0:8E:29:8B:B6:64:CF:00:D5:C2:12:33:8A:A5:E3:8C:00:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430B3AA29D936C54D19C100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed33fa5e-ef12-36c1-9bc2-35f0aee1c6da.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.55.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:b3:aa:29:d9:36:c5:4d:19:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e7fa9641-3645-4d9b-99d9-22f0fc8bff32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:ec:60:87:42:94:98:b8:11:10:c6:c3:41: f8:58:6e:0e:88:4f:a1:20:5c:87:0c:fc:c4:89:b3: ef:ec:90:0f:e7:ce:ec:05:70:da:05:d0:78:38:e7: 25:2c:5e:f1:3a:7d:67:72:39:ac:81:d9:34:0e:61: da:21:90:86:3c:d1:6e:b8:57:a2:93:64:4a:e2:63: 9c:44:9c:08:5d:a3:ec:48:31:4b:5e:d4:91:36:3f: 77:24:8f:1d:2e:7e:9c:37:36:13:49:8e:4f:65:73: 03:c9:4d:41:8a:8f:bd:e4:7d:63:b0:69:2a:a4:b7: 56:aa:da:ce:cb:65:4c:46:73:21:22:ed:64:e2:54: 65:ad:39:5f:7d:65:35:84:63:2c:21:ff:d5:d6:c1: 22:8a:f8:60:25:f6:a9:05:c6:7e:f7:86:d5:9b:06: c2:da:dc:0e:01:4f:a3:f2:45:93:7b:01:7b:e2:b0: 7a:5d:c8:aa:45:c1:3e:9d:65:73:58:d9:62:d2:78: 9b:f5:5b:35:0d:ba:23:de:2e:e2:b7:ae:47:e2:2d: fc:54:aa:ff:1b:a9:2a:3a:0a:9d:db:f6:dc:cc:96: e6:a0:57:ea:18:11:08:e7:43:2e:34:58:7f:56:cd: 0c:c0:3d:ce:eb:b2:ee:a2:f3:e9:84:f8:59:11:70: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C2:F0:8E:29:8B:B6:64:CF:00:D5:C2:12:33:8A:A5:E3:8C:00:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed33fa5e-ef12-36c1-9bc2-35f0aee1c6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.55.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8c:82:f9:90:cb:f5:58:05:cf:4f:d2:1a:a9:6c:7f:c0:96: 16:44:bd:b8:28:37:b2:4d:0d:ca:79:fb:38:14:ce:dd:9f:84: a9:96:0f:af:23:d5:1e:64:96:bc:c1:b0:3a:18:5d:bd:e2:ea: f4:78:c7:87:b0:62:e1:48:d9:d0:7e:59:42:96:8f:88:05:02: b7:5f:30:85:18:03:f5:2e:8e:7a:32:6c:c9:d7:af:78:e1:4a: 19:88:89:af:36:fe:bd:bd:fb:27:63:0b:2a:9e:05:ea:c0:ca: f2:4c:1b:e1:bf:4f:24:50:8e:a0:ee:c6:fd:14:d4:0b:14:47: 1d:59:5b:62:aa:73:35:1c:93:2c:fc:29:88:de:04:92:0b:7e: 0e:77:4a:53:bd:de:9b:e7:e8:da:85:36:4a:77:59:87:da:f1: cf:8d:ba:5e:ef:66:9c:f4:c0:0e:76:e8:7f:7a:e5:55:89:da: 01:99:15:79:4c:97:00:7e:99:7f:d8:90:3b:65:3c:53:68:b2: 43:12:b5:45:b9:e7:02:54:4a:ab:d3:1e:34:c7:47:21:22:11: 88:c6:f1:71:b3:01:20:55:96:92:d2:52:04:fd:2d:7d:95:5b: ff:e4:a7:3d:99:4d:31:b5:0b:af:2f:fc:93:82:30:7c:72:b8: 88:0d:66:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMLOqKdk2xU0ZwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTdmYTk2NDEtMzY0NS00ZDliLTk5ZDktMjJmMGZjOGJmZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQHsYIdClJi4ERDGw0H4WG4OiE+hIFyHDPzE ibPv7JAP587sBXDaBdB4OOclLF7xOn1ncjmsgdk0DmHaIZCGPNFuuFeik2RK4mOc RJwIXaPsSDFLXtSRNj93JI8dLn6cNzYTSY5PZXMDyU1Bio+95H1jsGkqpLdWqtrO y2VMRnMhIu1k4lRlrTlffWU1hGMsIf/V1sEiivhgJfapBcZ+94bVmwbC2twOAU+j 8kWTewF74rB6XciqRcE+nWVzWNli0nib9Vs1Dboj3i7it65H4i38VKr/G6kqOgqd 2/bczJbmoFfqGBEI50MuNFh/Vs0MwD3O67LuovPphPhZEXAevwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErC8I4pi7ZkzwDVwhIziqXjjACIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWQzM2ZhNWUtZWYxMi0z NmMxLTliYzItMzVmMGFlZTFjNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiMgvmQy/VYBc9P0hqpbH/AlhZEvbgoN7JNDcp5+zgUzt2fhKmWD68j 1R5klrzBsDoYXb3i6vR4x4ewYuFI2dB+WUKWj4gFArdfMIUYA/UujnoybMnXr3jh ShmIia82/r29+ydjCyqeBerAyvJMG+G/TyRQjqDuxv0U1AsURx1ZW2KqczUckyz8 KYjeBJILfg53SlO93pvn6NqFNkp3WYfa8c+Nul7vZpz0wA526H965VWJ2gGZFXlM lwB+mX/YkDtlPFNoskMStUW55wJUSqvTHjTHRyEiEYjG8XGzASBVlpLSUgT9LX2V W//kpz2ZTTG1C68v/JOCMHxyuIgNZkc= -----END CERTIFICATE-----Generated at Tue Jun 3 06:02:16 2025 by rpki-client