$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4abc1496-85f4-3025-8a4c-31d04168ba05.roa File: 4abc1496-85f4-3025-8a4c-31d04168ba05.roa (raw, json) Hash identifier: 4zRn7SigxOql0Eeemo+S2FDyXgOTpXqtwM5sJhiXQSw= Subject key identifier: 65:56:DE:85:73:F2:37:94:95:63:C6:06:CD:3B:55:44:2D:FE:AE:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCA781C5A722BC3C19C620 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4abc1496-85f4-3025-8a4c-31d04168ba05.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.86.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:a7:81:c5:a7:22:bc:3c:19:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=6bc66dfe-c303-46e8-bbb1-686c8109f74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:51:67:40:79:0a:a3:28:88:1c:25:1d:0d: b0:d5:07:ac:0c:98:72:41:16:0e:e3:1f:b0:f2:e6: ff:5b:1b:f7:40:af:01:15:0b:3b:8c:62:f6:ca:ab: 52:d8:35:59:fb:53:bd:ac:c0:ee:fa:4b:49:d8:f6: 0a:b3:f6:f9:f0:61:0a:e2:94:f7:91:fc:6d:4b:52: 1e:c5:9b:7b:bd:55:e1:6d:6e:d6:95:3d:ed:f8:2a: b4:29:a7:a4:77:ac:6a:e7:44:09:89:9a:93:25:93: 20:49:f2:8d:85:88:e5:94:9a:ce:a7:41:81:b2:ab: d9:b8:f2:62:5b:8d:f2:98:4a:32:24:ff:0a:8a:b9: 71:c5:d3:23:18:d8:29:43:b3:77:1c:19:35:a2:f9: 81:78:a6:a6:f9:db:13:b5:9e:e1:8e:79:13:8d:9f: d4:f5:ee:66:1e:41:86:57:9f:56:4d:e7:37:03:ca: 23:95:a3:01:49:91:3b:ba:60:98:64:2c:48:f6:34: 35:eb:5d:a6:d0:26:8d:cb:b7:80:c0:b4:3a:86:76: 4a:ba:2a:14:ec:7a:c3:bf:8e:ea:98:72:29:77:26: 9f:8e:40:f3:4c:21:b9:69:2e:08:15:62:c3:d3:c9: f8:b0:73:5a:3a:7c:af:c4:d0:f0:3e:b4:ea:27:bf: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:56:DE:85:73:F2:37:94:95:63:C6:06:CD:3B:55:44:2D:FE:AE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4abc1496-85f4-3025-8a4c-31d04168ba05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c6:44:f0:d2:eb:f3:e7:b4:8e:4e:5c:44:d5:91:53:99:27: 3d:06:ca:51:f7:85:30:d6:aa:84:63:a2:ab:83:48:dc:57:97: 57:60:3e:3a:e0:12:18:fa:0f:49:48:78:48:2b:22:41:0f:c3: 17:9f:d6:44:e9:8e:61:00:e4:4f:7e:d2:e5:13:b9:a9:51:78: f5:96:44:fa:23:a2:3f:4b:12:4e:cd:36:26:2d:dd:04:e8:ee: b9:33:1a:7f:d1:96:12:d7:a5:ab:9f:4e:00:e3:0a:1a:71:7f: 14:b1:6f:8a:ad:4b:2d:37:d0:a4:db:7a:58:f5:3d:64:8d:fd: b8:83:68:b7:58:20:24:dd:c1:c1:7a:98:f3:92:b9:aa:79:3e: f5:60:80:5d:12:32:75:6d:da:54:90:44:69:40:66:6e:ce:8b: 24:d2:30:55:56:38:58:4e:55:6a:c2:c2:c9:2b:b7:e4:9c:e7: f1:04:ad:82:5e:38:ae:b7:b4:9a:25:1c:61:5f:52:5e:fa:e9: 75:5a:18:61:35:6e:74:58:b9:c9:1f:6f:30:e4:17:aa:16:cd: a8:61:e0:0b:6b:db:d5:68:d2:5f:09:68:c1:9c:cf:b5:37:ca: 19:98:bb:50:f7:b4:56:74:26:c3:65:00:b5:26:b4:e9:1d:b0: 4f:52:ee:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/KeBxacivDwZxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NmJjNjZkZmUtYzMwMy00NmU4LWJiYjEtNjg2YzgxMDlmNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nhRZ0B5CqMoiBwlHQ2w1QesDJhyQRYO4x+w 8ub/Wxv3QK8BFQs7jGL2yqtS2DVZ+1O9rMDu+ktJ2PYKs/b58GEK4pT3kfxtS1Ie xZt7vVXhbW7WlT3t+Cq0Kaekd6xq50QJiZqTJZMgSfKNhYjllJrOp0GBsqvZuPJi W43ymEoyJP8KirlxxdMjGNgpQ7N3HBk1ovmBeKam+dsTtZ7hjnkTjZ/U9e5mHkGG V59WTec3A8ojlaMBSZE7umCYZCxI9jQ1612m0CaNy7eAwLQ6hnZKuioU7HrDv47q mHIpdyafjkDzTCG5aS4IFWLD08n4sHNaOnyvxNDwPrTqJ7+GQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVW3oVz8jeUlWPGBs07VUQt/q7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFiYzE0OTYtODVmNC0z MDI1LThhNGMtMzFkMDQxNjhiYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/GRPDS6/PntI5OXETVkVOZJz0GylH3hTDWqoRjoquDSNxXl1dgPjrg Ehj6D0lIeEgrIkEPwxef1kTpjmEA5E9+0uUTualRePWWRPojoj9LEk7NNiYt3QTo 7rkzGn/RlhLXpaufTgDjChpxfxSxb4qtSy030KTbelj1PWSN/biDaLdYICTdwcF6 mPOSuap5PvVggF0SMnVt2lSQRGlAZm7OiyTSMFVWOFhOVWrCwskrt+Sc5/EErYJe OK63tJolHGFfUl766XVaGGE1bnRYuckfbzDkF6oWzahh4Atr29Vo0l8JaMGcz7U3 yhmYu1D3tFZ0JsNlALUmtOkdsE9S7sg= -----END CERTIFICATE-----Generated at Tue Jul 1 00:25:38 2025 by rpki-client