$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a22e8a3-3e40-363b-aa0e-86009563bc6b.roa File: 7a22e8a3-3e40-363b-aa0e-86009563bc6b.roa (raw, json) Hash identifier: AHLqOB6obDyqFEUV/IAMwZxCC/xjCgSILE0uD/TK1N0= Subject key identifier: 15:C3:87:A6:5A:97:D5:61:F9:E8:55:4B:CD:AC:89:C9:48:AD:72:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430B2482349AFA8258EDF90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a22e8a3-3e40-363b-aa0e-86009563bc6b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.54.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:b2:48:23:49:af:a8:25:8e:df:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f86cb1e3-5cfe-43c8-a1fa-3a8a433360f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:63:37:33:66:62:66:0d:3a:7a:a3:3e:78: 16:7b:99:b0:a3:02:a9:3c:44:1c:ab:11:86:d1:a9: 94:c8:da:06:94:8a:5b:f4:58:56:f2:a8:99:78:65: e7:f5:75:a1:65:71:b8:2c:26:e3:f6:36:94:49:05: 54:9c:9b:81:8c:a0:41:d5:64:51:b2:8b:44:3c:15: 13:70:25:0c:29:8b:ea:47:55:be:64:a1:db:bb:33: 40:dc:de:28:69:21:f6:f3:71:6a:0b:4c:b1:b4:be: 65:73:be:bc:cc:f9:8a:1c:b6:f7:60:fb:4d:0d:fe: 67:ee:c5:00:e8:e3:39:1c:f6:af:f3:0f:ad:2a:ca: a4:d0:0e:97:97:99:89:9d:5e:09:1a:16:66:f2:d5: ce:c9:f0:63:36:b8:2d:84:f9:e9:41:e9:4e:19:54: df:b3:3f:1e:b7:4a:6e:96:d4:8f:d6:06:d9:64:42: cc:21:7f:95:b8:a5:fd:0d:ce:82:ac:8c:c6:66:fe: e2:3c:e8:37:54:ab:3e:9a:80:11:e6:96:0a:bf:86: d1:95:9a:d1:8e:0f:fa:cc:ff:18:64:59:50:1e:79: 10:a8:d7:6b:61:33:7c:1f:7c:1f:d9:33:49:9d:17: 2f:65:d6:fa:eb:01:a2:9e:c4:8f:1c:d6:1b:2a:79: 40:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C3:87:A6:5A:97:D5:61:F9:E8:55:4B:CD:AC:89:C9:48:AD:72:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a22e8a3-3e40-363b-aa0e-86009563bc6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e8:f3:ff:c2:bc:bc:13:6b:f5:10:96:45:b9:c8:02:a6:b1: 16:6e:5a:aa:2b:85:47:42:f5:41:b3:4f:c9:91:65:63:cf:2c: 97:05:e8:78:9a:22:0e:d1:63:9c:8c:78:cd:2d:09:f0:06:06: a4:47:d8:58:87:d6:ff:11:12:62:18:c5:31:f1:41:96:a6:ca: d9:9d:0f:e0:db:6d:37:07:7a:52:17:c7:2c:f4:36:49:e2:6c: 0b:e8:80:35:b3:e8:1f:ae:ec:52:97:49:ff:bd:39:10:94:7a: 1e:86:c8:3d:96:8e:56:e2:c8:49:3c:b0:59:4d:b4:b4:dd:52: 8f:87:84:48:d5:a7:5d:48:86:1a:40:53:e8:8d:4c:d0:13:72: 9d:28:32:ad:42:30:38:d2:7f:7e:13:23:d2:13:c7:11:e7:76: bb:27:8e:8a:b4:31:fe:96:59:2b:0a:fa:8d:b1:15:ee:37:9e: 88:02:49:43:0f:f9:1d:f3:62:24:73:ad:1f:a2:f2:5b:a7:e8: e2:74:26:ed:66:75:be:83:fa:6e:7a:14:e5:0a:94:30:91:fb: bf:5b:6a:ce:a9:76:9a:eb:fc:b1:87:61:2b:45:e0:33:7e:0d: 6f:fd:dc:21:27:d7:ee:42:c6:23:aa:66:6d:77:0b:e4:ec:03: c1:76:65:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMLJII0mvqCWO35AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Zjg2Y2IxZTMtNWNmZS00M2M4LWExZmEtM2E4YTQzMzM2MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMdjNzNmYmYNOnqjPngWe5mwowKpPEQcqxGG 0amUyNoGlIpb9FhW8qiZeGXn9XWhZXG4LCbj9jaUSQVUnJuBjKBB1WRRsotEPBUT cCUMKYvqR1W+ZKHbuzNA3N4oaSH283FqC0yxtL5lc768zPmKHLb3YPtNDf5n7sUA 6OM5HPav8w+tKsqk0A6Xl5mJnV4JGhZm8tXOyfBjNrgthPnpQelOGVTfsz8et0pu ltSP1gbZZELMIX+VuKX9Dc6CrIzGZv7iPOg3VKs+moAR5pYKv4bRlZrRjg/6zP8Y ZFlQHnkQqNdrYTN8H3wf2TNJnRcvZdb66wGinsSPHNYbKnlApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXDh6Zal9Vh+ehVS82siclIrXKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2EyMmU4YTMtM2U0MC0z NjNiLWFhMGUtODYwMDk1NjNiYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvo8//CvLwTa/UQlkW5yAKmsRZuWqorhUdC9UGzT8mRZWPPLJcF6Hia Ig7RY5yMeM0tCfAGBqRH2FiH1v8REmIYxTHxQZamytmdD+DbbTcHelIXxyz0Nkni bAvogDWz6B+u7FKXSf+9ORCUeh6GyD2WjlbiyEk8sFlNtLTdUo+HhEjVp11IhhpA U+iNTNATcp0oMq1CMDjSf34TI9ITxxHndrsnjoq0Mf6WWSsK+o2xFe43nogCSUMP +R3zYiRzrR+i8lun6OJ0Ju1mdb6D+m56FOUKlDCR+79bas6pdprr/LGHYStF4DN+ DW/93CEn1+5CxiOqZm13C+TsA8F2ZcA= -----END CERTIFICATE-----Generated at Mon Jun 30 03:00:57 2025 by rpki-client