$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa File: 65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa (raw, json) Hash identifier: oEmboqYqAEwYRCmQYZGDGbDlFN/WLu5yMWKrY99gHug= Subject key identifier: 5F:95:42:7B:A7:6C:C7:07:22:DF:C6:22:AE:2B:1D:0F:F6:7C:39:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB3BA8E4C6F2B3DACFCF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.32.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:3b:a8:e4:c6:f2:b3:da:cf:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=97a8a559-f031-419c-b52b-e1e17c97c95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:0d:dd:f3:16:82:bb:61:4d:fb:38:05:ec: b9:ce:44:2a:2d:6a:19:85:93:67:1c:f1:dd:53:67: 30:14:13:aa:3f:8d:93:0a:e0:d2:3d:ae:9a:52:17: 17:26:e5:3e:17:75:d5:10:c9:0d:7c:6a:e8:c2:9f: 16:da:5a:04:70:a9:94:65:a8:d0:2a:dd:e4:ff:8d: 1d:21:eb:33:6a:71:f4:fc:0e:d1:c1:bd:77:5b:75: d4:83:5b:ea:81:01:01:3f:8f:94:60:6a:d8:3b:a0: 92:b6:10:02:fc:5e:4c:41:55:02:0f:6d:84:8c:2c: a3:fd:a1:31:55:77:b6:cd:62:3c:2f:ac:71:5c:d0: 15:eb:6f:2a:cc:a5:7c:e2:35:dc:ce:37:16:9f:af: eb:a5:40:4b:11:fc:3c:04:8a:6a:8a:04:8c:17:87: 42:71:a2:da:6d:a8:ee:03:a8:3a:97:6d:f9:ee:4f: 2f:7f:d7:e5:58:3d:f0:1a:75:49:da:10:a6:96:36: 59:71:58:43:b0:9a:57:b8:06:8f:8d:3f:45:fd:56: 04:24:a9:8e:42:e2:ab:ee:4e:d6:c9:54:9d:58:75: fc:10:f1:5c:ad:c8:67:ea:da:44:ea:46:62:b3:e3: 27:59:62:3e:6e:00:29:c1:98:7c:5a:72:eb:4b:d7: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:42:7B:A7:6C:C7:07:22:DF:C6:22:AE:2B:1D:0F:F6:7C:39:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5b:2b:3a:13:b0:b8:0a:fd:f9:14:3f:70:09:f3:ae:9a:53: 25:c2:ce:14:c4:70:59:91:b9:04:a4:c5:da:ff:9b:f6:42:f2: 8f:44:3e:4d:23:f3:54:9f:37:2f:75:67:50:73:50:71:87:c1: 1e:64:4a:98:ce:80:7e:ce:e9:7a:ab:89:71:97:c6:69:84:90: 07:11:81:30:6f:35:d8:da:8c:4b:61:bc:dc:15:17:9c:91:0c: 1c:31:23:88:2b:87:f4:16:f8:17:07:5f:e5:42:6c:06:9c:17: a9:0f:65:e6:05:57:37:22:3f:c6:f1:70:83:e2:01:83:e5:cc: 66:a4:5b:72:75:eb:15:9e:ff:00:20:7f:55:62:71:50:ea:58: 81:43:98:57:de:ee:7a:95:91:38:74:4d:e6:3e:a3:c4:28:b3: 02:6b:f1:ca:50:9d:59:aa:66:84:0e:0d:b6:c4:e9:a9:84:ba: 2b:13:74:f5:40:da:96:d2:69:80:0c:51:34:ac:92:99:d6:44: ab:4d:e2:de:bd:3c:19:c3:a6:90:a9:f6:62:8d:8b:60:b1:19: d6:a9:0e:64:d3:7c:3f:ce:47:5c:51:0b:bd:40:bb:08:90:67: 80:ee:7d:73:83:5a:58:ff:8c:60:0b:55:77:bc:70:49:01:00: 2f:62:62:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zuo5Mbys9rPzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OTdhOGE1NTktZjAzMS00MTljLWI1MmItZTFlMTdjOTdjOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqYN3fMWgrthTfs4Bey5zkQqLWoZhZNnHPHd U2cwFBOqP42TCuDSPa6aUhcXJuU+F3XVEMkNfGrowp8W2loEcKmUZajQKt3k/40d IeszanH0/A7Rwb13W3XUg1vqgQEBP4+UYGrYO6CSthAC/F5MQVUCD22EjCyj/aEx VXe2zWI8L6xxXNAV628qzKV84jXczjcWn6/rpUBLEfw8BIpqigSMF4dCcaLabaju A6g6l2357k8vf9flWD3wGnVJ2hCmljZZcVhDsJpXuAaPjT9F/VYEJKmOQuKr7k7W yVSdWHX8EPFcrchn6tpE6kZis+MnWWI+bgApwZh8WnLrS9fqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+VQnunbMcHIt/GIq4rHQ/2fDlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjVjOGYzOTUtYWZlNS0z MGI2LTgzNjctZWJhZmU0ZDEzYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFbKzoTsLgK/fkUP3AJ866aUyXCzhTEcFmRuQSkxdr/m/ZC8o9EPk0j 81SfNy91Z1BzUHGHwR5kSpjOgH7O6XqriXGXxmmEkAcRgTBvNdjajEthvNwVF5yR DBwxI4grh/QW+BcHX+VCbAacF6kPZeYFVzciP8bxcIPiAYPlzGakW3J16xWe/wAg f1VicVDqWIFDmFfe7nqVkTh0TeY+o8QoswJr8cpQnVmqZoQODbbE6amEuisTdPVA 2pbSaYAMUTSskpnWRKtN4t69PBnDppCp9mKNi2CxGdapDmTTfD/OR1xRC71AuwiQ Z4DufXODWlj/jGALVXe8cEkBAC9iYuo= -----END CERTIFICATE-----Generated at Tue Jul 1 16:45:16 2025 by rpki-client