$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cd91a39-9d7d-34d8-9bb0-bb72fba7d21d.roa File: 5cd91a39-9d7d-34d8-9bb0-bb72fba7d21d.roa (raw, json) Hash identifier: ti2Ku1MoK+Y8EsNUDGAlsr8srGhTdgdduh7S0nIsU2o= Subject key identifier: 45:7B:8B:5D:F8:94:BE:29:A8:BB:BD:49:FB:D5:7C:30:BD:56:A4:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4309CFBB91F01172F9CD500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cd91a39-9d7d-34d8-9bb0-bb72fba7d21d.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.41.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:9c:fb:b9:1f:01:17:2f:9c:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=b9f39c71-c085-45b6-b5cd-b0f3438d9f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:f3:75:ee:58:08:2d:b6:83:62:95:54:bd: 93:70:3b:26:b9:d3:e1:48:4c:b3:91:05:cf:02:de: 71:45:26:99:70:d0:58:76:a2:44:b2:ac:a7:af:4e: 68:80:0d:13:b3:73:50:68:44:93:98:e6:ba:b7:44: d5:8b:a0:39:90:b6:af:2e:a0:70:1b:a1:14:dd:f6: 18:bc:44:a4:15:a4:2d:ff:37:11:03:93:7e:4c:5d: c7:46:14:93:6f:70:28:27:84:6e:a2:2d:48:7f:b6: 76:aa:b1:72:7b:9c:ac:9e:54:8a:80:75:b7:3c:64: e3:08:15:1a:ab:eb:92:57:74:0e:ca:04:de:45:41: ff:fc:6d:e4:29:01:77:76:7a:00:bf:74:26:e6:77: 84:dc:23:51:ae:45:01:cf:70:27:7e:f0:73:9b:27: 6e:bc:bd:c3:d0:59:bf:cc:56:a2:6f:ac:6b:1c:03: 4b:21:b8:1b:e1:29:5d:f5:aa:c8:2c:f9:b6:73:eb: f8:8f:6e:79:dd:ef:e8:c8:6f:eb:b8:40:47:b7:5e: 1f:04:1d:95:b0:55:05:23:af:c8:c2:eb:4c:d7:62: 45:db:c3:be:81:3f:be:77:cd:df:e1:a8:a6:a7:32: 3b:03:05:40:77:dc:c3:b7:73:87:9c:f3:f8:b2:16: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:8B:5D:F8:94:BE:29:A8:BB:BD:49:FB:D5:7C:30:BD:56:A4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cd91a39-9d7d-34d8-9bb0-bb72fba7d21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:00:98:e3:8e:27:84:a0:d6:90:78:82:cb:cf:42:f1:26:53: df:49:37:18:b9:dd:a2:d8:71:ee:dd:60:7f:c0:78:58:b8:b3: d5:ec:51:2a:0a:76:8e:a2:33:ca:77:88:25:c9:51:45:76:c3: 07:97:c2:44:6b:56:6e:2e:66:72:af:70:5d:35:4c:d1:64:59: 1d:8e:57:5b:e2:8e:42:c1:62:22:29:36:a8:57:5f:39:75:a0: a9:19:14:37:b0:9e:e3:f2:10:22:8e:0d:09:35:f5:bd:c3:6d: 92:f5:5a:2c:eb:89:67:5c:85:29:2f:a9:8f:1d:90:86:72:3b: 57:aa:b0:75:94:49:2c:ab:78:4c:40:cb:19:31:36:85:05:2b: f6:3f:84:09:df:6d:a2:26:f0:41:e3:b0:ce:05:51:f8:bc:20: 3d:16:db:d0:f9:59:24:fa:75:52:e9:92:af:5b:31:5e:51:0c: b8:c4:07:22:e5:3f:78:7f:84:42:29:9e:c0:07:79:ad:b8:0b: 7c:75:0b:69:0e:28:39:af:07:29:b8:09:7a:91:e9:7b:0f:2c: 6a:92:99:63:b6:30:52:67:2a:fa:aa:13:ab:b5:9a:a8:3b:19: 79:b2:0f:6b:b3:1d:68:1c:ee:84:c6:90:39:ee:dd:c8:9d:43: 5b:02:01:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMJz7uR8BFy+c1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjlmMzljNzEtYzA4NS00NWI2LWI1Y2QtYjBmMzQzOGQ5Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWjzde5YCC22g2KVVL2TcDsmudPhSEyzkQXP At5xRSaZcNBYdqJEsqynr05ogA0Ts3NQaESTmOa6t0TVi6A5kLavLqBwG6EU3fYY vESkFaQt/zcRA5N+TF3HRhSTb3AoJ4Ruoi1If7Z2qrFye5ysnlSKgHW3PGTjCBUa q+uSV3QOygTeRUH//G3kKQF3dnoAv3Qm5neE3CNRrkUBz3AnfvBzmyduvL3D0Fm/ zFaib6xrHANLIbgb4Sld9arILPm2c+v4j2553e/oyG/ruEBHt14fBB2VsFUFI6/I wutM12JF28O+gT++d83f4aimpzI7AwVAd9zDt3OHnPP4shZMQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV7i134lL4pqLu9SfvVfDC9VqTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNkOTFhMzktOWQ3ZC0z NGQ4LTliYjAtYmI3MmZiYTdkMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8AmOOOJ4Sg1pB4gsvPQvEmU99JNxi53aLYce7dYH/AeFi4s9XsUSoK do6iM8p3iCXJUUV2wweXwkRrVm4uZnKvcF01TNFkWR2OV1vijkLBYiIpNqhXXzl1 oKkZFDewnuPyECKODQk19b3DbZL1WizriWdchSkvqY8dkIZyO1eqsHWUSSyreExA yxkxNoUFK/Y/hAnfbaIm8EHjsM4FUfi8ID0W29D5WST6dVLpkq9bMV5RDLjEByLl P3h/hEIpnsAHea24C3x1C2kOKDmvBym4CXqR6XsPLGqSmWO2MFJnKvqqE6u1mqg7 GXmyD2uzHWgc7oTGkDnu3cidQ1sCAcw= -----END CERTIFICATE-----Generated at Mon Jun 30 11:35:43 2025 by rpki-client