$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa File: 5c98cdaf-5127-33d6-825c-2ee7692727b6.roa (raw, json) Hash identifier: Qpf6vTKLXyaRDdna3D7dD6EildqoWCtm1d3+bSVR43U= Subject key identifier: FF:A9:29:4D:18:97:69:54:F7:04:31:DA:31:8A:73:E0:70:67:30:72 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584A1465563AABEEBD5175A4CD80 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 33208 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:56:3a:ab:ee:bd:51:75:a4:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=159decb5-888d-434b-887f-99d60b431d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:68:06:44:4c:57:f6:20:ea:94:fd:9d:16: 28:fc:0b:2d:48:f5:8e:ec:03:c4:22:15:1f:36:d0: 4a:db:6e:72:5c:f0:a0:f1:53:09:f7:95:05:20:9b: d6:16:6b:ba:35:99:95:b6:88:8f:3a:fb:c7:bb:e0: 10:17:02:c5:ec:d4:8d:cf:ab:98:35:93:e2:6c:a0: 04:bb:ca:74:3b:22:24:1d:38:08:27:5d:57:6c:15: 13:3f:af:64:e0:a6:c3:69:94:11:1b:47:00:b5:e3: a0:e7:22:b2:6c:50:d3:95:d2:d2:60:83:ac:ea:9d: de:6b:58:e4:f4:9c:df:5c:c6:10:3b:f9:1a:22:57: b9:18:1f:b5:34:cf:ef:49:60:dd:2d:52:c2:97:e1: e5:54:24:fb:37:80:1a:81:2c:f9:48:e6:55:1f:31: 4b:d9:21:4d:c2:ea:b9:18:2d:7b:0c:e9:97:d2:1f: 60:67:12:de:34:91:37:59:6c:5d:a8:c1:0e:6b:a0: fa:38:5a:9b:e8:95:71:8f:82:57:2f:d7:8a:65:f5: 9b:0e:19:7a:e9:5c:8b:bf:d2:14:63:90:13:01:36: 7d:7b:a4:7f:9d:03:af:0a:75:70:1c:c6:df:6b:33: 0d:1e:2b:57:6f:8d:26:11:0e:3a:b0:5c:9f:9c:74: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:29:4D:18:97:69:54:F7:04:31:DA:31:8A:73:E0:70:67:30:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b1:b7:99:33:d2:a9:d5:32:19:f4:c5:4a:3e:03:f2:ec:88: a8:0d:b6:32:ba:db:cd:b9:5e:53:62:d7:15:53:f5:91:ba:01: 53:4d:13:bf:ba:d2:0d:27:21:44:5e:30:ed:3b:57:a8:d0:1a: 34:d2:20:22:01:6c:da:8a:c4:e1:1f:ff:a2:ed:51:2d:1f:d9: 69:7e:f9:29:12:6c:13:dd:fb:b7:0e:41:91:e0:9a:c7:6f:11: 23:e3:62:9d:fb:61:d7:3e:71:39:a2:41:3e:2f:4c:09:35:d7: 51:12:ef:2b:04:e6:b2:23:f9:8c:67:da:16:f9:ab:11:5a:13: 18:35:27:e3:96:9a:64:1a:c7:df:ed:0f:c0:26:5e:5b:75:9b: 56:a6:c4:67:82:3b:a4:e8:d4:df:2e:64:26:8f:b1:7d:3e:bb: 79:e5:8d:e0:11:64:55:21:3b:01:22:76:b4:49:0e:bf:67:b3: 9a:14:65:bc:79:8f:11:5c:1e:e5:03:f1:c4:64:2d:db:ed:ba: 4e:1b:67:88:89:af:e4:33:e3:99:a8:42:d3:bf:55:85:df:ea: 23:1b:f2:b6:da:f4:b1:74:d9:c1:e9:06:a5:91:23:18:b0:74: 46:c1:d0:4f:22:40:54:1a:28:70:ff:f8:6b:6a:a9:06:cf:09: cd:96:fe:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZVY6q+69UXWkzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MTU5ZGVjYjUtODg4ZC00MzRiLTg4N2YtOTlkNjBiNDMxZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL9oBkRMV/Yg6pT9nRYo/AstSPWO7APEIhUf NtBK225yXPCg8VMJ95UFIJvWFmu6NZmVtoiPOvvHu+AQFwLF7NSNz6uYNZPibKAE u8p0OyIkHTgIJ11XbBUTP69k4KbDaZQRG0cAteOg5yKybFDTldLSYIOs6p3ea1jk 9JzfXMYQO/kaIle5GB+1NM/vSWDdLVLCl+HlVCT7N4AagSz5SOZVHzFL2SFNwuq5 GC17DOmX0h9gZxLeNJE3WWxdqMEOa6D6OFqb6JVxj4JXL9eKZfWbDhl66VyLv9IU Y5ATATZ9e6R/nQOvCnVwHMbfazMNHitXb40mEQ46sFyfnHRRnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+pKU0Yl2lU9wQx2jGKc+BwZzByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWM5OGNkYWYtNTEyNy0z M2Q2LTgyNWMtMmVlNzY5MjcyN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaxt5kz0qnVMhn0xUo+A/LsiKgNtjK62825XlNi1xVT9ZG6AVNNE7+6 0g0nIUReMO07V6jQGjTSICIBbNqKxOEf/6LtUS0f2Wl++SkSbBPd+7cOQZHgmsdv ESPjYp37Ydc+cTmiQT4vTAk111ES7ysE5rIj+Yxn2hb5qxFaExg1J+OWmmQax9/t D8AmXlt1m1amxGeCO6To1N8uZCaPsX0+u3nljeARZFUhOwEidrRJDr9ns5oUZbx5 jxFcHuUD8cRkLdvtuk4bZ4iJr+Qz45moQtO/VYXf6iMb8rba9LF02cHpBqWRIxiw dEbB0E8iQFQaKHD/+GtqqQbPCc2W/v0= -----END CERTIFICATE-----Generated at Sun Jun 8 06:06:16 2025 by rpki-client