$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa File: f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa (raw, json) Hash identifier: 3lxwUF+8N6ihNazXLHBCFN8KxDcm+DuD+ecVx1cmCNY= Subject key identifier: B6:CE:97:47:2D:52:69:AA:F0:F2:0A:21:7A:B9:89:F9:9F:84:A2:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430B0D813BC1CC8C01CD180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.51.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:b0:d8:13:bc:1c:c8:c0:1c:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c647bd68-5ef7-43d8-be73-16a36e6945d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:44:de:dd:d1:ed:dc:b6:9c:d1:5d:74:9e: 3d:b3:f2:49:97:fb:f8:c5:fe:95:ad:d9:0d:b5:3a: d4:44:f4:aa:ee:fa:54:7d:85:c7:eb:f1:a9:20:be: 77:0e:92:5e:59:30:b1:db:1c:d3:f8:9b:0c:34:f0: 74:63:47:22:48:25:73:c3:f5:76:38:18:bc:df:99: f8:cd:41:95:41:fe:d5:e0:20:32:91:02:01:aa:43: 0e:0c:b2:c8:10:3d:f5:64:91:03:c6:fe:34:5c:92: ae:d0:88:bf:00:6e:d7:09:6a:28:4e:f6:76:c1:21: 65:10:aa:c4:3d:7a:8a:80:9a:73:12:16:a1:8b:fb: 89:55:c9:29:22:8d:23:bd:00:12:f4:1b:46:9d:51: 32:07:c8:4e:ca:2a:bb:8b:e3:35:da:73:3c:62:2c: 8d:8e:ce:8c:02:9a:fb:a9:32:5e:da:f6:75:60:ec: e6:e8:e2:59:26:2c:82:9c:e5:3e:af:61:9f:0f:cf: 59:69:9d:05:8c:00:3a:50:ed:08:d6:c9:1e:92:5a: 85:69:a4:4e:d9:4b:b0:bc:38:62:4e:1a:1a:d9:37: 24:60:58:c3:9a:37:94:8c:f1:a4:7f:cf:c7:d3:2d: c3:06:5c:db:e0:c8:bf:17:40:e7:63:d2:c9:d4:dc: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CE:97:47:2D:52:69:AA:F0:F2:0A:21:7A:B9:89:F9:9F:84:A2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:2d:a0:67:01:5b:b4:45:fb:d1:32:a4:cc:02:3f:be:d0:50: ed:ba:e7:ed:74:50:3a:8e:96:ee:5d:55:33:10:11:11:7a:ce: 0a:6b:ac:78:f7:5e:85:92:02:8f:71:57:be:09:a3:3e:ac:5a: 05:cc:2f:02:95:a4:0a:85:1a:f1:e4:9d:eb:21:c2:43:d9:30: 22:f4:17:6d:19:e9:9a:ce:5e:a5:bf:09:fe:dc:ec:a7:fd:4a: 5e:69:0d:c3:86:e9:fe:fe:b9:70:97:7c:34:03:61:44:d2:4e: 77:e5:e4:6f:01:2a:fc:c3:1f:93:c1:60:54:01:1c:35:49:47: 56:c2:89:42:3e:23:2c:4c:ce:55:da:b2:26:83:eb:32:5c:77: d6:55:3c:ce:05:e8:9b:58:fa:57:16:10:8d:02:61:7d:19:ef: 98:a2:ff:f4:1b:98:92:0c:bf:07:e1:66:5e:7e:40:ae:b1:d0: 77:8e:e6:53:d7:99:41:17:59:c3:66:bd:7f:61:f2:90:a1:70: ed:39:bd:44:28:23:62:ca:a8:f1:7b:fc:a9:f9:03:7e:90:c8: 17:25:97:a5:61:ea:1d:a8:fb:bf:2a:a7:c3:61:04:2b:9c:06: 0b:55:f6:e0:34:cc:bc:aa:a4:45:76:2a:19:91:08:c9:69:1f: 15:c1:e3:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMLDYE7wcyMAc0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzY0N2JkNjgtNWVmNy00M2Q4LWJlNzMtMTZhMzZlNjk0NWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo9E3t3R7dy2nNFddJ49s/JJl/v4xf6VrdkN tTrURPSq7vpUfYXH6/GpIL53DpJeWTCx2xzT+JsMNPB0Y0ciSCVzw/V2OBi835n4 zUGVQf7V4CAykQIBqkMODLLIED31ZJEDxv40XJKu0Ii/AG7XCWooTvZ2wSFlEKrE PXqKgJpzEhahi/uJVckpIo0jvQAS9BtGnVEyB8hOyiq7i+M12nM8YiyNjs6MApr7 qTJe2vZ1YOzm6OJZJiyCnOU+r2GfD89ZaZ0FjAA6UO0I1skeklqFaaRO2UuwvDhi Thoa2TckYFjDmjeUjPGkf8/H0y3DBlzb4Mi/F0DnY9LJ1NzY6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbOl0ctUmmq8PIKIXq5ifmfhKKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhmZTlmZmMtYzkxZi0z NzE0LWFhNGYtNWZkNWZjZjcwN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANEtoGcBW7RF+9EypMwCP77QUO265+10UDqOlu5dVTMQERF6zgprrHj3 XoWSAo9xV74Joz6sWgXMLwKVpAqFGvHkneshwkPZMCL0F20Z6ZrOXqW/Cf7c7Kf9 Sl5pDcOG6f7+uXCXfDQDYUTSTnfl5G8BKvzDH5PBYFQBHDVJR1bCiUI+IyxMzlXa siaD6zJcd9ZVPM4F6JtY+lcWEI0CYX0Z75ii//QbmJIMvwfhZl5+QK6x0HeO5lPX mUEXWcNmvX9h8pChcO05vUQoI2LKqPF7/Kn5A36QyBcll6Vh6h2o+78qp8NhBCuc BgtV9uA0zLyqpEV2KhmRCMlpHxXB44w= -----END CERTIFICATE-----Generated at Wed Jun 4 22:55:57 2025 by rpki-client