$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f235bc00-bd49-395f-bdaa-ca8158ec2a79.roa File: f235bc00-bd49-395f-bdaa-ca8158ec2a79.roa (raw, json) Hash identifier: LXLVtXEV9Iey6zekWkSVASW7c8ONOSAoYFE3FQj0LVA= Subject key identifier: C2:1E:80:5A:D7:36:61:E7:31:47:8D:42:0C:D5:51:89:5C:A5:7F:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4320591C8FB2A20313F4400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f235bc00-bd49-395f-bdaa-ca8158ec2a79.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.60.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:05:91:c8:fb:2a:20:31:3f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e36c85a7-d35c-4386-8d11-9a3d28ef4d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:48:ab:18:cc:e8:3a:cc:90:8d:b1:a8:65:41: bb:0e:f2:da:56:47:23:59:dd:05:f9:8e:ba:ec:26: ff:59:6f:69:42:9f:f3:ca:f2:2d:ca:6c:81:32:3c: 60:c5:83:f9:05:43:39:a7:87:1b:40:fa:7f:83:66: c6:b0:03:75:b2:18:4f:0c:35:9d:19:33:80:3f:ed: a8:62:fe:34:39:e7:4d:09:74:87:66:46:06:9e:5e: e2:f9:df:ad:8b:37:37:4e:46:54:7e:da:e9:93:77: c8:00:fe:15:75:ab:11:55:42:d6:f4:7f:fd:57:47: bd:0a:c6:03:2c:cf:55:50:fc:43:bc:ec:3d:4d:1b: 4f:8b:82:ef:90:ce:77:6d:5e:61:e5:b1:07:2f:7a: a6:56:91:2a:47:a7:95:45:74:5f:5f:87:4a:5a:19: 60:af:d9:21:6f:ac:39:26:9a:1a:e2:6e:24:f9:9c: ff:e7:82:49:c8:a6:5e:b9:fa:b7:58:22:5b:d7:4d: 65:6f:ae:f0:04:8a:e7:30:36:0e:63:1d:aa:83:0f: 90:cc:c8:c1:d9:bb:2d:90:ca:4f:3b:19:78:ec:ee: 65:3f:90:6b:82:f7:9a:8e:06:d6:37:18:32:ce:c7: b2:24:13:16:ba:8a:89:7c:cd:1b:51:ce:53:18:01: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1E:80:5A:D7:36:61:E7:31:47:8D:42:0C:D5:51:89:5C:A5:7F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f235bc00-bd49-395f-bdaa-ca8158ec2a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:1c:65:88:17:ad:37:23:98:70:04:91:ba:b8:27:08:b1:cd: 0e:a0:21:12:7e:19:53:15:18:c5:05:fd:34:a6:2d:c9:62:58: e9:b7:d4:3f:53:80:9e:d0:4a:67:e2:96:cf:a0:01:94:16:c6: cb:76:79:96:08:76:be:2f:60:52:ea:b2:d3:95:8d:66:ba:d2: d3:d7:a1:35:6f:5f:1b:54:de:c5:46:0d:be:ca:92:56:bc:76: f0:33:84:ff:07:ca:02:0d:c5:9f:b1:c1:d3:ea:16:f1:e9:ca: e3:c4:2b:33:4f:0f:34:cf:61:32:6e:bb:fd:8e:04:01:de:00: 5a:a6:b1:16:c2:e0:37:ef:94:22:73:ee:06:dc:59:20:7e:11: d9:e4:30:32:14:35:91:8b:f7:30:aa:27:b1:78:fc:d3:eb:ef: ff:b4:5f:b7:7f:1c:0e:39:a1:bc:10:09:21:29:3b:c7:c1:90: b2:40:6e:74:2b:94:9b:48:79:45:cf:b8:49:92:d0:0f:d9:35: f5:45:b9:e3:2c:ef:25:16:fc:f1:a3:d4:41:7f:22:15:d9:90: c5:ae:45:f2:b1:a6:ee:9a:40:82:4b:34:dc:53:f1:d2:7c:b2: e7:8e:65:29:88:44:a8:d0:14:97:a5:5c:15:37:77:e6:15:10: ad:cf:f9:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMgWRyPsqIDE/RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTM2Yzg1YTctZDM1Yy00Mzg2LThkMTEtOWEzZDI4ZWY0ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0irGMzoOsyQjbGoZUG7DvLaVkcjWd0F+Y66 7Cb/WW9pQp/zyvItymyBMjxgxYP5BUM5p4cbQPp/g2bGsAN1shhPDDWdGTOAP+2o Yv40OedNCXSHZkYGnl7i+d+tizc3TkZUftrpk3fIAP4VdasRVULW9H/9V0e9CsYD LM9VUPxDvOw9TRtPi4LvkM53bV5h5bEHL3qmVpEqR6eVRXRfX4dKWhlgr9khb6w5 Jpoa4m4k+Zz/54JJyKZeufq3WCJb101lb67wBIrnMDYOYx2qgw+QzMjB2bstkMpP Oxl47O5lP5BrgveajgbWNxgyzseyJBMWuoqJfM0bUc5TGAEYWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIegFrXNmHnMUeNQgzVUYlcpX9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIzNWJjMDAtYmQ0OS0z OTVmLWJkYWEtY2E4MTU4ZWMyYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQcZYgXrTcjmHAEkbq4JwixzQ6gIRJ+GVMVGMUF/TSmLcliWOm31D9T gJ7QSmfils+gAZQWxst2eZYIdr4vYFLqstOVjWa60tPXoTVvXxtU3sVGDb7Kkla8 dvAzhP8HygINxZ+xwdPqFvHpyuPEKzNPDzTPYTJuu/2OBAHeAFqmsRbC4DfvlCJz 7gbcWSB+EdnkMDIUNZGL9zCqJ7F4/NPr7/+0X7d/HA45obwQCSEpO8fBkLJAbnQr lJtIeUXPuEmS0A/ZNfVFueMs7yUW/PGj1EF/IhXZkMWuRfKxpu6aQIJLNNxT8dJ8 sueOZSmIRKjQFJelXBU3d+YVEK3P+Q4= -----END CERTIFICATE-----Generated at Tue Jun 3 06:13:16 2025 by rpki-client