$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c34c5a-161d-3801-8f3b-a3e982013b6b.roa File: 60c34c5a-161d-3801-8f3b-a3e982013b6b.roa (raw, json) Hash identifier: +5Cxkfywu0xjZexGYEEVqzwMKU6Ch2L2nXxKrTerwZU= Subject key identifier: B9:C1:42:6D:46:74:A5:69:00:8E:A8:22:B9:8B:48:C4:43:15:89:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB3F7EAAFA95CE6CE9DC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c34c5a-161d-3801-8f3b-a3e982013b6b.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.47.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:3f:7e:aa:fa:95:ce:6c:e9:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=09fd6710-d1d8-4849-b9f7-f8ae0d715904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0f:d8:87:b4:1c:78:64:27:76:14:6a:80:0f: c1:6b:14:ba:94:46:8b:fe:da:bc:3b:49:8f:98:e0: 17:84:00:27:86:0a:94:06:f5:04:9f:76:20:d5:2e: cb:42:d8:c5:64:f2:25:0f:be:6f:b4:97:90:bd:83: 91:5d:0d:84:38:d9:91:35:bc:6b:25:17:64:a4:c5: c6:7f:2c:48:ec:15:f8:79:d6:c2:3c:19:c9:b5:98: 48:a1:50:18:a8:88:6f:d3:3d:c1:cd:3a:10:e3:15: 5e:7b:e3:b1:98:5e:9f:37:90:fb:7d:4c:a3:dd:78: fa:20:8f:96:ae:f6:6e:bb:48:a4:eb:18:8a:44:c0: a8:e0:a6:5b:51:8f:45:49:23:1f:e9:e6:cc:89:23: f6:ba:c2:53:15:03:65:b2:7a:df:08:d4:77:20:c2: 82:f2:e4:79:1d:19:cb:8e:8f:c4:09:04:9a:c6:6c: a7:f0:3f:df:9a:a1:3c:f1:2f:e3:f0:ee:b8:f2:b8: 9e:43:fa:cf:f1:9c:25:13:5e:aa:75:12:ed:78:34: 49:bd:95:40:a6:dd:d0:7b:11:73:91:c8:5a:ff:6b: e8:b1:c3:17:55:88:f0:f0:0d:12:ec:0c:22:bb:5c: e7:6a:28:e5:c8:86:ab:10:1b:56:be:e4:fa:30:7f: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C1:42:6D:46:74:A5:69:00:8E:A8:22:B9:8B:48:C4:43:15:89:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60c34c5a-161d-3801-8f3b-a3e982013b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:bd:3e:8c:fd:95:ec:88:10:b7:27:c8:ec:39:e0:71:5e:1a: d7:f3:c9:52:b4:ce:96:ba:cd:a7:81:61:2c:3b:33:12:f9:42: e9:f1:4a:4b:30:1f:8c:f4:37:b3:3c:91:8c:c9:d0:9c:d2:d9: 67:f2:19:ab:c3:22:49:17:bc:ab:f4:10:91:6b:74:73:56:f5: ab:a5:c0:44:c2:b1:cb:4c:fd:ea:ad:44:d1:09:97:38:7b:99: 0a:92:df:a9:23:88:b5:ac:69:d1:d5:9a:f5:9b:40:e6:34:76: 50:fb:ee:67:9e:fe:a7:2e:87:91:db:9a:2d:2f:49:72:98:6e: 53:58:1c:4e:9c:6a:39:9e:d9:3e:bb:b5:2a:9c:bb:20:e5:a8: 84:7a:18:a2:6b:d3:65:25:86:f0:fa:95:d4:ca:2b:27:96:56: ed:d1:c7:f0:3f:9e:99:e2:c0:a1:cb:1d:84:44:06:51:eb:82: 63:4a:82:8c:02:8f:82:a5:91:c6:5a:08:25:a0:8f:ad:7b:00: 79:43:65:8d:2a:79:07:7c:52:3f:7c:30:2b:6a:19:8c:5d:4b: 1e:5d:a6:7b:93:50:10:18:56:1e:87:7c:af:5c:ae:2a:26:3e: c6:38:14:87:e9:d1:fe:8a:c4:59:30:1d:a2:d6:e6:81:0d:72: 66:7d:ce:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+z9+qvqVzmzp3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MDlmZDY3MTAtZDFkOC00ODQ5LWI5ZjctZjhhZTBkNzE1OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ/Yh7QceGQndhRqgA/BaxS6lEaL/tq8O0mP mOAXhAAnhgqUBvUEn3Yg1S7LQtjFZPIlD75vtJeQvYORXQ2EONmRNbxrJRdkpMXG fyxI7BX4edbCPBnJtZhIoVAYqIhv0z3BzToQ4xVee+OxmF6fN5D7fUyj3Xj6II+W rvZuu0ik6xiKRMCo4KZbUY9FSSMf6ebMiSP2usJTFQNlsnrfCNR3IMKC8uR5HRnL jo/ECQSaxmyn8D/fmqE88S/j8O648rieQ/rP8ZwlE16qdRLteDRJvZVApt3QexFz kcha/2voscMXVYjw8A0S7Awiu1znaijlyIarEBtWvuT6MH8tEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnBQm1GdKVpAI6oIrmLSMRDFYn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBjMzRjNWEtMTYxZC0z ODAxLThmM2ItYTNlOTgyMDEzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKi9Poz9leyIELcnyOw54HFeGtfzyVK0zpa6zaeBYSw7MxL5QunxSksw H4z0N7M8kYzJ0JzS2WfyGavDIkkXvKv0EJFrdHNW9aulwETCsctM/eqtRNEJlzh7 mQqS36kjiLWsadHVmvWbQOY0dlD77mee/qcuh5Hbmi0vSXKYblNYHE6cajme2T67 tSqcuyDlqIR6GKJr02UlhvD6ldTKKyeWVu3Rx/A/npniwKHLHYREBlHrgmNKgowC j4KlkcZaCCWgj617AHlDZY0qeQd8Uj98MCtqGYxdSx5dpnuTUBAYVh6HfK9criom PsY4FIfp0f6KxFkwHaLW5oENcmZ9zic= -----END CERTIFICATE-----Generated at Tue Jul 1 09:02:41 2025 by rpki-client