$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa File: 7844817c-1df2-3500-a8f6-4c397d045ffc.roa (raw, json) Hash identifier: U8GgQXiHSccEqjnv+0WwdfOdN4DpDntYjhYvAAN5w+4= Subject key identifier: 98:9F:C4:35:85:BF:0C:DE:35:F1:82:6C:46:E9:46:94:47:2D:7B:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430A2F7AD5DD7FA5DC09C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.43.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:a2:f7:ad:5d:d7:fa:5d:c0:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5ff0be3e-e26d-4b05-a719-91e60cc1f394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:4f:a8:1a:99:b9:c5:cf:fc:51:33:ec:61: f4:9d:08:44:6c:a0:9d:28:85:76:90:22:06:08:ff: 49:63:b0:71:a2:a3:1e:a9:6f:94:db:85:8a:ac:9d: c6:78:31:9b:c4:a3:27:76:89:f4:8e:2d:a8:6f:8a: d7:2c:9e:71:c0:44:29:9c:f0:f4:82:2c:8b:10:35: 40:d8:1d:b2:c1:e3:78:33:19:68:9d:95:f7:2e:fd: 1f:44:f9:5f:40:bb:f1:49:4e:2f:4f:2d:b3:85:7a: 12:99:37:59:a0:12:43:37:a0:49:44:97:64:59:da: 76:32:9d:4a:2e:13:1a:30:02:35:0c:23:c3:23:81: 28:6c:3f:81:3a:f0:0d:da:4e:35:d3:51:8a:3a:6f: 9b:b5:4d:37:6e:69:74:b1:c2:9d:62:85:7f:83:94: 7b:5e:51:97:f5:fe:3f:c4:68:87:ce:aa:4d:28:a2: 80:ca:9b:df:dd:13:ee:76:e2:1b:d8:40:57:81:b1: 85:bc:0b:93:29:d3:e7:21:31:23:f8:d7:07:c3:27: b2:d4:fc:a1:30:ae:07:21:df:88:47:48:f9:5e:68: ac:41:c1:e2:7c:57:2e:cf:a0:6b:2b:f2:af:e5:21: 65:77:bc:cf:71:ed:e6:30:0e:a9:2a:22:7d:0f:7c: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9F:C4:35:85:BF:0C:DE:35:F1:82:6C:46:E9:46:94:47:2D:7B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:dd:44:5d:03:6a:51:eb:27:d6:01:04:60:e9:cb:53:b6:1c: 94:95:4f:4f:0b:52:df:88:7b:83:5d:91:6e:2a:73:58:1e:a2: f9:07:1f:e2:12:83:63:59:89:77:5f:a8:39:77:e7:83:76:1e: 56:58:f5:e2:91:92:b1:de:f3:10:8e:dd:0c:ea:9e:26:53:39: ed:fe:4a:c5:b5:82:33:5b:2d:4c:95:be:0e:44:7e:2b:96:15: 8c:f0:28:f5:4c:ae:6a:c4:09:f7:75:e5:ce:18:0a:b4:53:04: b9:55:0e:f2:4e:c2:3e:10:cf:1b:86:52:3f:77:1a:1d:42:d3: 77:b0:50:75:21:d2:9d:bc:d6:08:20:43:cb:02:b0:1c:3e:0b: 35:7c:f4:2a:1b:53:ca:76:42:40:97:ac:74:30:07:28:7c:2e: c8:f3:37:69:d5:ed:f8:07:ea:df:e1:0f:34:45:33:62:af:48: cd:7f:24:bd:7b:db:58:ea:22:b0:f6:af:8e:72:05:23:20:32: db:94:d9:f7:3f:59:a1:45:d9:e7:e9:1e:6c:ca:81:0b:a0:ce: 27:01:0a:cb:b6:a0:82:81:9d:24:04:07:01:45:cb:ba:48:d5: c7:68:38:2f:99:93:8a:a2:df:40:70:19:b1:78:d7:e6:bb:0a: e2:e2:2f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMKL3rV3X+l3AnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWZmMGJlM2UtZTI2ZC00YjA1LWE3MTktOTFlNjBjYzFmMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/5PqBqZucXP/FEz7GH0nQhEbKCdKIV2kCIG CP9JY7BxoqMeqW+U24WKrJ3GeDGbxKMndon0ji2ob4rXLJ5xwEQpnPD0giyLEDVA 2B2yweN4MxlonZX3Lv0fRPlfQLvxSU4vTy2zhXoSmTdZoBJDN6BJRJdkWdp2Mp1K LhMaMAI1DCPDI4EobD+BOvAN2k4101GKOm+btU03bml0scKdYoV/g5R7XlGX9f4/ xGiHzqpNKKKAypvf3RPuduIb2EBXgbGFvAuTKdPnITEj+NcHwyey1PyhMK4HId+I R0j5XmisQcHifFcuz6BrK/Kv5SFld7zPce3mMA6pKiJ9D3wWwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJifxDWFvwzeNfGCbEbpRpRHLXthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzg0NDgxN2MtMWRmMi0z NTAwLWE4ZjYtNGMzOTdkMDQ1ZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrdRF0DalHrJ9YBBGDpy1O2HJSVT08LUt+Ie4NdkW4qc1geovkHH+IS g2NZiXdfqDl354N2HlZY9eKRkrHe8xCO3QzqniZTOe3+SsW1gjNbLUyVvg5EfiuW FYzwKPVMrmrECfd15c4YCrRTBLlVDvJOwj4QzxuGUj93Gh1C03ewUHUh0p281ggg Q8sCsBw+CzV89CobU8p2QkCXrHQwByh8LsjzN2nV7fgH6t/hDzRFM2KvSM1/JL17 21jqIrD2r45yBSMgMtuU2fc/WaFF2efpHmzKgQugzicBCsu2oIKBnSQEBwFFy7pI 1cdoOC+Zk4qi30BwGbF41+a7CuLiL+k= -----END CERTIFICATE-----Generated at Mon Jun 30 02:24:14 2025 by rpki-client