$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399f4747-d52d-3da9-93f9-04c82e7db62e.roa File: 399f4747-d52d-3da9-93f9-04c82e7db62e.roa (raw, json) Hash identifier: Y24y3h5t75yYMpLJiQGooUo+Qy3bF/zKXrl2ZTMFg70= Subject key identifier: D8:29:01:CA:F8:21:84:01:CA:2F:0B:40:DE:18:EE:18:99:E2:94:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430AFEC4423DF500DC2AB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399f4747-d52d-3da9-93f9-04c82e7db62e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.51.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:af:ec:44:23:df:50:0d:c2:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=2bd7598b-6e68-4918-804c-3ab77a1989dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:dc:04:e3:69:9f:c0:6a:98:8c:85:31:db: 1d:34:c8:50:cd:00:56:90:ef:fd:b6:09:7e:14:44: 69:94:28:3a:1b:97:23:e9:aa:ac:82:23:8c:d0:12: 16:68:77:42:f4:9e:57:49:9d:e1:03:67:33:01:fa: 31:1e:e6:1a:e0:f2:b6:5d:b9:17:35:be:cc:65:a7: 11:e2:38:43:c3:c9:cb:11:4d:0a:f5:f7:ed:62:af: 0c:0a:5a:82:de:9b:1c:34:05:02:97:76:69:3d:59: 26:de:0f:a9:21:a7:4f:84:08:19:a6:ea:d1:28:cb: 2d:09:d8:89:89:c2:33:5a:fa:f9:73:8b:a1:16:7e: 62:36:69:cd:94:2e:34:b3:26:06:9b:1d:3c:96:10: 90:5e:a6:4c:50:e4:06:2a:0b:07:83:d8:25:b3:03: 96:a5:69:54:ac:27:d0:a8:b1:7b:e1:fb:f3:aa:87: 90:44:c4:12:0a:1d:17:04:93:ad:23:cc:37:0f:2f: ea:df:2b:b2:b0:76:ac:3a:88:7f:81:41:6d:82:f6: cc:d8:0b:6b:9e:86:fc:37:73:ab:28:89:46:87:36: dc:3b:ce:ee:86:ba:ac:d0:03:57:3f:49:82:1b:a1: 1d:61:6b:54:83:72:bd:89:cc:d5:a1:e3:8c:c0:0d: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:29:01:CA:F8:21:84:01:CA:2F:0B:40:DE:18:EE:18:99:E2:94:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399f4747-d52d-3da9-93f9-04c82e7db62e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d7:7f:7d:d5:29:cb:a6:73:41:8c:7c:28:b9:1f:c2:9d:24: 32:52:e6:68:2b:9e:34:a6:c8:fa:35:c7:37:a7:26:b1:b2:da: 0b:33:8f:b9:4f:e3:e2:2c:6f:5d:16:8e:35:91:28:3c:b8:cc: d8:38:dc:08:51:b0:59:13:5e:ca:04:14:28:06:2a:54:52:ce: 07:74:f0:e4:b4:fa:e6:2e:0b:6f:31:a7:a2:96:d8:05:04:02: 7b:9e:f9:87:50:7a:dd:5a:12:c4:d3:de:0b:81:59:0e:24:17: a1:fa:f2:c4:27:1d:a2:d0:71:eb:86:4e:17:7e:7c:ad:28:8b: 27:14:79:43:1a:c7:3e:d0:94:7e:d7:13:b0:00:9f:66:96:df: b9:98:26:b5:f7:5f:74:81:ae:95:89:34:9a:a6:64:0f:df:25: 0a:0e:e7:bf:ae:2b:37:c6:50:da:c3:fe:a6:fc:8c:24:10:5a: d0:01:0f:61:24:af:71:a5:23:c3:89:9f:8d:eb:23:c8:4f:8c: 82:d5:9d:19:fc:a5:c2:70:08:47:b5:7a:29:a2:c1:2f:38:c0: 46:c8:22:83:89:95:e3:95:b1:ed:0a:ba:fe:fb:98:0b:d3:39: 0f:77:2b:99:9f:8a:cd:de:9a:ae:b3:8d:91:3b:bc:9a:ec:89: 4f:ba:39:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMK/sRCPfUA3Cq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MmJkNzU5OGItNmU2OC00OTE4LTgwNGMtM2FiNzdhMTk4OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ3cBONpn8BqmIyFMdsdNMhQzQBWkO/9tgl+ FERplCg6G5cj6aqsgiOM0BIWaHdC9J5XSZ3hA2czAfoxHuYa4PK2XbkXNb7MZacR 4jhDw8nLEU0K9fftYq8MClqC3pscNAUCl3ZpPVkm3g+pIadPhAgZpurRKMstCdiJ icIzWvr5c4uhFn5iNmnNlC40syYGmx08lhCQXqZMUOQGKgsHg9glswOWpWlUrCfQ qLF74fvzqoeQRMQSCh0XBJOtI8w3Dy/q3yuysHasOoh/gUFtgvbM2Atrnob8N3Or KIlGhzbcO87uhrqs0ANXP0mCG6EdYWtUg3K9iczVoeOMwA0zmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgpAcr4IYQByi8LQN4Y7hiZ4pRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk5ZjQ3NDctZDUyZC0z ZGE5LTkzZjktMDRjODJlN2RiNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfXf33VKcumc0GMfCi5H8KdJDJS5mgrnjSmyPo1xzenJrGy2gszj7lP 4+Isb10WjjWRKDy4zNg43AhRsFkTXsoEFCgGKlRSzgd08OS0+uYuC28xp6KW2AUE Anue+YdQet1aEsTT3guBWQ4kF6H68sQnHaLQceuGThd+fK0oiycUeUMaxz7QlH7X E7AAn2aW37mYJrX3X3SBrpWJNJqmZA/fJQoO57+uKzfGUNrD/qb8jCQQWtABD2Ek r3GlI8OJn43rI8hPjILVnRn8pcJwCEe1eimiwS84wEbIIoOJleOVse0Kuv77mAvT OQ93K5mfis3emq6zjZE7vJrsiU+6OR8= -----END CERTIFICATE-----Generated at Mon Jun 30 09:18:40 2025 by rpki-client