$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa File: bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa (raw, json) Hash identifier: rAzV0VtfdARRo8lVYDn2lNdawOP81YYFDCLDWn3BJEk= Subject key identifier: 3A:16:2C:74:45:8D:14:9D:2D:F0:B4:67:0C:21:56:44:25:58:3A:0D Certificate issuer: /CN=ca4cb307-c1ce-4780-8903-6931cc40426b Certificate serial: 010D0C9F4328584A374AC62D8A5D69F222418AC0 Authority key identifier: C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 54804 IP address blocks: 68.179.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c6:2d:8a:5d:69:f2:22:41:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca4cb307-c1ce-4780-8903-6931cc40426b Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=d200c6f0-e092-471a-99d8-4690b6160acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:0c:eb:80:1c:47:eb:5d:fd:b1:a1:60:99: ac:a1:96:e5:91:ec:1e:f3:a7:0c:52:7f:31:eb:a4: 06:be:c2:d1:41:75:be:be:8c:8d:f0:1f:a2:3e:27: fb:bc:cd:ff:c4:8b:52:36:03:a9:3a:55:27:c4:ad: 6a:46:76:05:7c:6f:c9:53:f1:4d:57:5d:7e:18:b6: 07:09:18:2f:72:17:7a:13:20:57:86:cb:36:c5:f2: c0:14:75:b4:ee:cd:31:ae:8a:25:25:82:97:d7:00: 44:ae:d4:d6:92:1b:22:46:bd:66:e0:cd:ed:b6:b7: 57:25:c4:3c:84:9e:53:c9:a6:19:02:86:8b:dc:8a: e0:e6:2f:9a:2a:6b:0a:23:1c:b0:c2:cc:f9:c7:87: 7a:14:ee:1d:36:81:1a:6d:b4:8c:63:f2:19:ff:d8: 4a:18:53:37:f5:a7:19:92:57:c7:a7:8a:cb:9d:f0: 0c:08:e9:b8:df:84:2d:cd:a8:17:ba:53:c7:14:d3: 01:94:72:58:dd:b5:bc:da:b6:91:be:d2:a3:4b:d9: 72:49:f1:a3:83:5e:24:52:05:b1:84:00:6b:60:01: c4:5a:e7:2c:a8:0c:18:0f:24:49:26:43:6b:c7:37: f0:6f:f3:86:1a:f3:17:e1:1d:29:8c:78:5e:5e:0d: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:16:2C:74:45:8D:14:9D:2D:F0:B4:67:0C:21:56:44:25:58:3A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl X509v3 Authority Key Identifier: keyid:C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer sbgp-ipAddrBlock: critical IPv4: 68.179.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6d:dc:61:5f:fa:41:96:0a:6c:6e:3e:88:d8:81:c7:08:66: 5b:46:2a:d2:a7:73:3a:98:bd:5e:0b:76:cc:55:44:ba:1e:ff: cd:1e:69:7b:6c:62:cd:d5:91:a2:4a:4b:53:80:cd:62:d4:e8: ba:e2:1a:d2:a8:09:51:bb:d6:7a:6a:bd:d9:6e:a3:ed:2c:9a: 8d:19:32:c8:7b:7d:6b:f3:b5:f7:aa:45:59:9a:da:5d:09:82: 26:f6:68:63:48:07:53:d3:07:89:a1:7f:97:b2:61:f6:4a:bb: 9e:4a:f2:96:ce:07:08:c6:db:8a:94:3a:c3:8d:a3:3b:ed:43: e8:98:17:cb:de:0e:bb:80:e3:f3:9b:3a:1a:9a:09:d1:9c:dd: 2a:67:f5:a0:88:cb:0d:b9:8f:28:e0:39:64:2b:95:fb:48:dc: e5:61:fe:6d:8d:4f:de:77:7c:1a:e0:11:64:ce:7c:9f:59:d1: 85:5f:96:37:a6:70:ce:2f:9f:2b:82:2f:03:f3:60:92:76:12: 96:d0:e1:83:83:fb:27:35:ed:77:d7:78:5e:08:04:51:e6:f9: 89:52:8e:6a:ac:be:0d:18:31:70:f0:b8:55:e0:e9:c6:83:60: 00:41:22:54:e0:a5:f4:b3:5b:ca:84:66:2d:ba:0b:db:03:fa: 8a:be:63:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsYtil1p8iJBisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E0Y2IzMDctYzFjZS00NzgwLTg5MDMtNjkzMWNjNDA0 MjZiMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZDIwMGM2ZjAtZTA5Mi00NzFhLTk5ZDgtNDY5MGI2MTYwYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdgM64AcR+td/bGhYJmsoZblkewe86cMUn8x 66QGvsLRQXW+voyN8B+iPif7vM3/xItSNgOpOlUnxK1qRnYFfG/JU/FNV11+GLYH CRgvchd6EyBXhss2xfLAFHW07s0xroolJYKX1wBErtTWkhsiRr1m4M3ttrdXJcQ8 hJ5TyaYZAoaL3Irg5i+aKmsKIxywwsz5x4d6FO4dNoEabbSMY/IZ/9hKGFM39acZ klfHp4rLnfAMCOm434QtzagXulPHFNMBlHJY3bW82raRvtKjS9lySfGjg14kUgWx hABrYAHEWucsqAwYDyRJJkNrxzfwb/OGGvMX4R0pjHheXg3ucQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoWLHRFjRSdLfC0ZwwhVkQlWDoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRj YjMwNy1jMWNlLTQ3ODAtODkwMy02OTMxY2M0MDQyNmIvYmJkYjViY2MtOWZiOC0z OTQ1LTlkZjctZDg1MzMwYjkzMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2E0Y2IzMDctYzFjZS00NzgwLTg5 MDMtNjkzMWNjNDA0MjZiL2NhNGNiMzA3LWMxY2UtNDc4MC04OTAzLTY5MzFjYzQw NDI2Yi5jcmwwHwYDVR0jBBgwFoAUxu2XOQiELdkPbJH7bIKD7dQ/p/cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRjYjMwNy1jMWNlLTQ3ODAtODkwMy02OTMx Y2M0MDQyNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1t3GFf+kGWCmxuPojYgccIZltGKtKnczqYvV4LdsxVRLoe/80eaXts Ys3VkaJKS1OAzWLU6LriGtKoCVG71npqvdluo+0smo0ZMsh7fWvztfeqRVma2l0J gib2aGNIB1PTB4mhf5eyYfZKu55K8pbOBwjG24qUOsONozvtQ+iYF8veDruA4/Ob OhqaCdGc3Spn9aCIyw25jyjgOWQrlftI3OVh/m2NT953fBrgEWTOfJ9Z0YVfljem cM4vnyuCLwPzYJJ2EpbQ4YOD+yc17XfXeF4IBFHm+YlSjmqsvg0YMXDwuFXg6caD YABBIlTgpfSzW8qEZi26C9sD+oq+Y9Q= -----END CERTIFICATE-----Generated at Tue Jul 1 18:06:09 2025 by rpki-client