$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa File: 544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa (raw, json) Hash identifier: rNiZ/L2KXJc3kDuDngRGOeXqjcMyyeshHubE5dNoFMg= Subject key identifier: D6:19:21:35:C2:C2:A3:1B:A0:FD:68:00:BC:9E:F5:8E:A2:47:0F:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB3BC631DF05CC467F6400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.32.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:3b:c6:31:df:05:cc:46:7f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=acee19b3-231b-4dd3-b2c4-cf71270a37a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:dc:32:a1:a2:8f:dd:02:ba:55:e4:ed:58: a2:48:8d:80:9b:08:ce:4c:6f:da:68:84:e6:c8:6e: c4:d4:36:47:e8:fe:4a:52:da:50:8c:cb:f7:7a:b7: f1:2e:79:34:ab:31:3c:2a:84:f5:93:d3:2d:2d:e9: 45:01:de:d8:9c:9a:7c:05:54:e5:99:9e:e0:7b:1b: 6b:d1:e6:74:df:9b:c9:19:2c:cc:6b:36:c9:e1:2c: e7:35:2d:84:4d:0e:9c:79:df:33:2b:f6:6c:f1:c7: 1a:70:3d:6e:8f:65:e1:c3:1a:88:9e:a5:46:41:21: f5:34:79:e1:e1:54:b0:ab:1f:07:88:c7:ef:25:a6: 65:40:14:17:86:35:29:7a:e5:97:01:c8:25:ff:60: 83:09:a7:72:e1:55:c2:19:eb:9a:3b:f6:fa:93:05: d8:dd:e3:94:3c:7b:30:1b:26:b5:9a:93:57:8c:88: cf:2a:86:a9:66:19:c5:a5:a1:d8:da:34:dd:d4:7d: fa:bd:5c:69:0d:4b:fa:d0:08:e4:0c:0c:6b:a0:c2: b8:e0:c8:88:e8:d4:1e:9a:fa:c5:dd:85:14:bf:dd: 07:97:af:5f:1b:62:31:1f:b4:f7:0b:a4:31:bb:92: 5a:9c:e4:82:5d:47:fa:a6:c9:03:b8:cf:d1:f7:94: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:19:21:35:C2:C2:A3:1B:A0:FD:68:00:BC:9E:F5:8E:A2:47:0F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544c91b8-0df5-3f31-841e-442a6ddb8a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5b:c2:ef:93:a1:4a:3c:f7:70:c3:65:5b:e7:69:2a:9d:f7: 0f:0c:a1:40:2d:98:26:18:77:4a:54:52:62:62:3d:b0:b4:20: 3d:75:c8:45:e8:00:64:e6:8c:97:4d:d5:59:67:8a:8f:d3:ab: 69:b0:13:35:54:6f:34:a7:e2:6f:bf:e5:a4:a9:1d:82:b5:69: 84:7d:31:a1:2c:55:00:bb:15:23:0c:41:7d:a2:d1:b0:d1:0b: 2d:ec:2a:0c:e9:b7:6f:dc:01:86:95:11:f7:92:cb:c0:45:89: 88:c0:f8:4e:b1:ef:ab:57:73:da:4d:ea:cd:34:eb:15:34:5e: a4:a6:c6:d7:f8:69:dc:1e:00:8e:8d:c2:53:03:e9:a8:e1:05: 61:e7:c0:03:33:3f:0a:52:6c:ad:66:b7:bc:60:f4:de:01:b0: 8a:f1:35:59:37:e1:7e:0f:c1:08:08:0f:ea:e3:54:fe:d1:fd: c6:6c:4d:1e:3a:e7:ff:74:6d:5c:ff:3c:55:24:b4:9f:d1:05: 5d:db:f9:2d:58:74:dd:8a:0a:01:22:27:7c:d6:24:02:68:53: 95:6e:7a:54:b4:be:8d:62:0c:f6:dc:af:4b:60:64:04:b4:a6: 81:50:da:da:44:a9:0c:d8:2f:2b:a8:4f:3b:47:b5:fb:bf:83: a0:26:96:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zvGMd8FzEZ/ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YWNlZTE5YjMtMjMxYi00ZGQzLWIyYzQtY2Y3MTI3MGEzN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt97cMqGij90CulXk7ViiSI2AmwjOTG/aaITm yG7E1DZH6P5KUtpQjMv3erfxLnk0qzE8KoT1k9MtLelFAd7YnJp8BVTlmZ7gextr 0eZ035vJGSzMazbJ4SznNS2ETQ6ced8zK/Zs8ccacD1uj2XhwxqInqVGQSH1NHnh 4VSwqx8HiMfvJaZlQBQXhjUpeuWXAcgl/2CDCady4VXCGeuaO/b6kwXY3eOUPHsw Gya1mpNXjIjPKoapZhnFpaHY2jTd1H36vVxpDUv60AjkDAxroMK44MiI6NQemvrF 3YUUv90Hl69fG2IxH7T3C6Qxu5JanOSCXUf6pskDuM/R95SAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYZITXCwqMboP1oALye9Y6iRw/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQ0YzkxYjgtMGRmNS0z ZjMxLTg0MWUtNDQyYTZkZGI4YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCDyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhbwu+ToUo893DDZVvnaSqd9w8MoUAtmCYYd0pUUmJiPbC0ID11yEXo AGTmjJdN1Vlnio/Tq2mwEzVUbzSn4m+/5aSpHYK1aYR9MaEsVQC7FSMMQX2i0bDR Cy3sKgzpt2/cAYaVEfeSy8BFiYjA+E6x76tXc9pN6s006xU0XqSmxtf4adweAI6N wlMD6ajhBWHnwAMzPwpSbK1mt7xg9N4BsIrxNVk34X4PwQgID+rjVP7R/cZsTR46 5/90bVz/PFUktJ/RBV3b+S1YdN2KCgEiJ3zWJAJoU5VuelS0vo1iDPbcr0tgZAS0 poFQ2tpEqQzYLyuoTztHtfu/g6AmloQ= -----END CERTIFICATE-----Generated at Mon Jun 30 17:20:24 2025 by rpki-client