$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa File: fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa (raw, json) Hash identifier: k9xxXRthHIz5OVFWTgW6xBqPbfOJQXbwRQQPeuyXu2g= Subject key identifier: 02:0B:1C:5B:2A:F0:A1:68:B5:73:90:5B:A8:5D:EF:3D:95:DE:4E:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431F88C5E6467A263D70BE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.42.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f8:8c:5e:64:67:a2:63:d7:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=505e958b-500f-4002-9146-7074e73645c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:01:e7:26:43:c1:8c:46:bc:b3:64:b9:37: 45:ae:2a:ff:4a:72:34:8b:bf:7b:93:43:7d:b9:1b: 34:36:07:c3:4b:d5:20:f7:ef:5a:8e:51:8f:53:1d: db:08:7d:03:b6:0e:ae:65:a1:ce:a2:4e:c2:b1:f1: 5e:08:fc:43:2e:f1:91:0f:66:c8:b3:c8:4e:d9:8f: 13:df:2e:2d:31:d5:9f:9b:d8:8d:7f:20:c0:cf:76: ef:4c:de:79:0e:32:b9:e8:9a:89:2c:3d:55:ec:a1: 46:c2:f0:9e:20:e8:36:63:9f:02:f7:0c:3f:52:fd: db:a6:c0:26:a6:f2:6f:ab:d9:70:1f:45:c7:17:c7: 62:d9:fa:bc:a5:b2:05:a0:26:2a:f8:de:fc:e9:ec: e1:aa:7d:35:3e:24:55:c8:52:0b:1e:25:23:8b:21: c3:bc:e9:59:60:56:7f:3d:f9:2c:21:93:98:8d:3c: f6:97:25:29:e6:5f:76:6f:c0:13:bf:e6:74:a1:45: df:7a:15:c4:4d:87:5a:90:bd:0a:89:4f:5b:cd:22: 1b:b3:25:d1:c3:e9:c3:36:a6:b5:9e:82:67:bb:26: f6:39:28:7d:5a:28:7d:5d:ad:88:d5:24:3f:f3:4f: b1:b9:fe:08:12:95:63:4d:f0:6d:c9:bc:2d:fa:27: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0B:1C:5B:2A:F0:A1:68:B5:73:90:5B:A8:5D:EF:3D:95:DE:4E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:77:d2:1b:85:d9:4d:39:a8:4c:01:2a:fa:16:2f:cc:4d:8d: e0:26:33:a8:bd:a3:65:74:b0:8f:d7:d6:da:bc:ff:2b:8f:f0: 89:df:de:3f:4e:8d:1d:7f:21:44:89:f9:06:01:f4:e3:e2:59: 75:7a:a4:c3:42:0f:8c:de:c2:ef:d0:91:1d:c8:07:52:4c:f6: e6:58:e7:fc:e3:cc:44:eb:e5:0e:ee:36:8e:9a:ba:db:df:c4: b6:5d:47:64:0d:83:97:60:08:27:93:bb:ae:a2:cc:91:04:87: 61:99:da:af:92:13:57:06:7d:2d:a4:ca:1d:5b:83:80:35:06: a9:6c:83:cf:46:0b:da:c3:56:02:4c:99:f3:04:e4:84:ce:41: 4b:1e:9e:60:01:f7:a5:43:24:c9:96:9c:76:ef:90:2f:89:b2: 16:97:29:72:de:82:66:02:97:32:70:00:05:98:82:d7:18:bb: dd:11:67:ee:fd:11:0d:58:71:17:42:61:42:eb:68:5b:b1:d8: db:5e:70:26:10:24:05:92:d0:e3:8c:58:2e:0f:1e:0a:90:7b: d8:2e:0c:10:09:f5:93:c7:a4:47:cb:f0:bb:5e:9d:21:e3:9b: 1e:2b:db:3d:1a:08:92:3d:98:ca:64:8a:d8:4c:9c:16:ad:35: 7c:56:86:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMfiMXmRnomPXC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTA1ZTk1OGItNTAwZi00MDAyLTkxNDYtNzA3NGU3MzY0NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh0B5yZDwYxGvLNkuTdFrir/SnI0i797k0N9 uRs0NgfDS9Ug9+9ajlGPUx3bCH0Dtg6uZaHOok7CsfFeCPxDLvGRD2bIs8hO2Y8T 3y4tMdWfm9iNfyDAz3bvTN55DjK56JqJLD1V7KFGwvCeIOg2Y58C9ww/Uv3bpsAm pvJvq9lwH0XHF8di2fq8pbIFoCYq+N786ezhqn01PiRVyFILHiUjiyHDvOlZYFZ/ PfksIZOYjTz2lyUp5l92b8ATv+Z0oUXfehXETYdakL0KiU9bzSIbsyXRw+nDNqa1 noJnuyb2OSh9Wih9Xa2I1SQ/80+xuf4IEpVjTfBtybwt+ickqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAILHFsq8KFotXOQW6hd7z2V3k4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmM4YWI4YzctMjc4OS0z NzA1LThlYzgtY2EyZDU3Mzg5NDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE130huF2U05qEwBKvoWL8xNjeAmM6i9o2V0sI/X1tq8/yuP8Inf3j9O jR1/IUSJ+QYB9OPiWXV6pMNCD4zewu/QkR3IB1JM9uZY5/zjzETr5Q7uNo6autvf xLZdR2QNg5dgCCeTu66izJEEh2GZ2q+SE1cGfS2kyh1bg4A1Bqlsg89GC9rDVgJM mfME5ITOQUsenmAB96VDJMmWnHbvkC+JshaXKXLegmYClzJwAAWYgtcYu90RZ+79 EQ1YcRdCYULraFux2NtecCYQJAWS0OOMWC4PHgqQe9guDBAJ9ZPHpEfL8LtenSHj mx4r2z0aCJI9mMpkithMnBatNXxWhrk= -----END CERTIFICATE-----Generated at Tue Jun 3 06:02:25 2025 by rpki-client