$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12677f14-6e2c-3546-b2e7-36863e2d2f69.roa File: 12677f14-6e2c-3546-b2e7-36863e2d2f69.roa (raw, json) Hash identifier: +yyvrF3kanC3XYvFcgrhDI1qMDMAwEvIOqT/vdtJ1ws= Subject key identifier: 1D:9E:85:F4:84:B7:9B:3B:F3:46:A1:B1:40:98:8F:82:79:6E:33:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCEE53CE96792C7DAD1880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12677f14-6e2c-3546-b2e7-36863e2d2f69.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 20214 IP address blocks: 68.86.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:ee:53:ce:96:79:2c:7d:ad:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=5cdab51c-9f6c-4456-aa57-57389991674d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:bf:20:ea:90:ed:5c:be:d4:be:79:32:20: 06:4c:87:05:82:ba:58:6b:9d:2b:6e:d7:55:62:5a: a1:d6:76:82:08:fe:4b:59:0a:45:16:c1:3b:60:aa: ad:28:60:12:8d:c9:18:6d:37:e0:9c:5a:d8:62:aa: 19:10:22:11:da:cc:de:10:bf:f6:16:3e:73:1c:cb: 65:5e:17:c0:fc:15:a7:5f:ea:ab:d4:9a:45:08:db: ea:07:35:79:60:c1:9d:ce:1b:30:2c:99:a5:8e:20: 21:81:98:11:e4:82:85:cf:51:dc:9e:2b:13:7b:c2: 70:f3:ce:d3:d2:97:e5:c7:a3:90:a0:d1:a6:f5:6e: 79:51:72:b3:8f:51:65:47:b6:0d:e2:1a:09:7b:e0: 7a:a4:27:48:22:06:45:f6:68:4b:11:c9:ad:9e:0d: 18:ae:34:99:3f:98:94:57:0d:3d:1a:c7:1c:66:69: 7c:cb:87:d4:b0:d8:4e:f9:b2:e7:c1:7a:56:ba:f7: 93:2d:6d:c3:60:59:33:04:77:61:be:61:cc:0e:04: 2d:83:83:76:02:ae:d6:f2:33:02:36:17:24:87:99: c0:53:14:cc:a5:5f:2e:99:f8:ef:3d:c8:51:f6:b1: c5:2f:ce:28:01:0b:43:57:ed:90:f5:d0:c0:30:18: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9E:85:F4:84:B7:9B:3B:F3:46:A1:B1:40:98:8F:82:79:6E:33:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12677f14-6e2c-3546-b2e7-36863e2d2f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b3:6f:07:78:9c:a9:08:9a:08:6f:ea:1a:f2:b6:60:bf:b8: 98:93:41:43:e7:cd:a3:3d:84:f5:dc:01:2d:fe:79:40:64:b3: 15:ee:60:d2:cb:b3:5f:ed:a3:06:bb:a2:47:e5:1e:55:23:0c: 34:37:8d:d6:26:3b:aa:8f:9f:f0:77:1b:6b:bf:cf:de:d0:10: 87:63:55:48:30:63:6a:1c:9e:36:79:94:e5:b8:d4:d8:5d:8d: a6:ba:92:a8:ef:50:ed:b2:98:05:bc:6e:fc:3b:d0:96:8e:1d: c1:7a:00:29:b2:00:b5:5f:28:ec:e2:20:73:2d:4e:6d:0a:6f: 23:cd:bd:b3:ad:5d:d5:ab:66:61:2b:65:79:68:90:95:70:72: 6c:fa:7d:1d:d6:d7:7d:7e:8d:09:13:33:4a:c6:da:3d:e6:ae: ee:cc:32:11:24:2d:81:cb:4d:6a:78:df:a6:1e:6e:4e:82:1a: de:7b:d1:d2:d4:70:a0:25:e9:3a:34:a8:33:87:39:fd:fe:e3: 78:38:f1:a5:2d:62:50:9a:e8:6a:5e:d5:f0:6e:a4:e2:02:d4: 10:f7:2b:f2:61:df:ba:9d:a2:f2:fb:1d:99:6d:14:d3:a6:9b: 36:25:18:0f:8b:92:1a:8f:a3:3c:5e:31:ca:f4:28:f6:c2:a1: 4d:c0:d9:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/O5TzpZ5LH2tGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NWNkYWI1MWMtOWY2Yy00NDU2LWFhNTctNTczODk5OTE2NzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S6/IOqQ7Vy+1L55MiAGTIcFgrpYa50rbtdV Ylqh1naCCP5LWQpFFsE7YKqtKGASjckYbTfgnFrYYqoZECIR2szeEL/2Fj5zHMtl XhfA/BWnX+qr1JpFCNvqBzV5YMGdzhswLJmljiAhgZgR5IKFz1HcnisTe8Jw887T 0pflx6OQoNGm9W55UXKzj1FlR7YN4hoJe+B6pCdIIgZF9mhLEcmtng0YrjSZP5iU Vw09GsccZml8y4fUsNhO+bLnwXpWuveTLW3DYFkzBHdhvmHMDgQtg4N2Aq7W8jMC Nhckh5nAUxTMpV8umfjvPchR9rHFL84oAQtDV+2Q9dDAMBhfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2ehfSEt5s780ahsUCYj4J5bjNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI2NzdmMTQtNmUyYy0z NTQ2LWIyZTctMzY4NjNlMmQyZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+zbwd4nKkImghv6hrytmC/uJiTQUPnzaM9hPXcAS3+eUBksxXuYNLL s1/towa7okflHlUjDDQ3jdYmO6qPn/B3G2u/z97QEIdjVUgwY2ocnjZ5lOW41Nhd jaa6kqjvUO2ymAW8bvw70JaOHcF6ACmyALVfKOziIHMtTm0KbyPNvbOtXdWrZmEr ZXlokJVwcmz6fR3W131+jQkTM0rG2j3mru7MMhEkLYHLTWp436Yebk6CGt570dLU cKAl6To0qDOHOf3+43g48aUtYlCa6Gpe1fBupOIC1BD3K/Jh37qdovL7HZltFNOm mzYlGA+LkhqPozxeMcr0KPbCoU3A2Zk= -----END CERTIFICATE-----Generated at Mon Jun 30 22:39:22 2025 by rpki-client