$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3215b3-dd72-3e77-8410-54034d26955c.roa File: 8e3215b3-dd72-3e77-8410-54034d26955c.roa (raw, json) Hash identifier: 8ZVoT/8Y1nM3lVYMnpZAsUPOlqkm+t9pFSjAFQt8Ow0= Subject key identifier: 2E:76:F7:56:10:2C:5F:55:25:09:96:E9:89:DA:37:7D:FF:F3:11:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC57E83689AB4BD69EB6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3215b3-dd72-3e77-8410-54034d26955c.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33491 IP address blocks: 68.87.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:57:e8:36:89:ab:4b:d6:9e:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=39fa8e88-1480-472c-bbc9-d052164fa7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:7f:b3:df:0e:3d:14:92:1a:4d:66:87:6a: 65:66:cb:bb:7a:5b:94:f3:d4:30:db:3d:65:b5:93: 44:3f:c8:c1:56:8f:17:36:7a:1d:53:38:25:36:40: 19:5d:c9:3b:d8:19:b0:65:c8:2e:c8:77:34:f3:73: 8d:70:78:92:2b:ab:31:7a:73:6e:9c:e1:94:0d:a0: 5a:d6:fb:b7:61:c2:0d:eb:bc:ed:cc:63:10:62:c1: 06:3a:f7:11:d4:53:60:4c:11:cb:0e:1d:6d:07:e8: 6e:ef:20:8f:ee:15:10:86:ca:3f:7a:2d:49:cd:c1: 77:e6:57:6f:15:d3:be:7c:a7:61:ab:f9:fa:3f:80: d0:1f:90:d7:03:b4:9f:cd:d4:66:08:70:70:c2:21: 7e:96:11:57:83:fd:97:e3:75:3b:5d:58:48:df:bd: 68:97:40:30:6f:b7:46:a5:4f:3d:60:97:f7:51:9b: 87:20:b6:46:d6:17:e0:6f:ec:88:6f:54:e4:4b:44: 4a:45:9d:88:a8:b2:14:6c:fe:3d:d4:d5:33:c0:1d: f7:ea:20:e6:50:69:54:3b:9e:5d:9e:b4:0b:c3:83: 2f:8f:01:f5:90:25:34:4d:9e:ba:c0:c9:a2:03:c3: 8e:06:f6:b2:9a:35:0a:cc:17:20:73:40:d7:f2:d6: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:F7:56:10:2C:5F:55:25:09:96:E9:89:DA:37:7D:FF:F3:11:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3215b3-dd72-3e77-8410-54034d26955c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:76:ad:74:8a:c8:1f:cd:14:ad:b1:d9:f1:72:71:99:d7:d4: a0:dd:f9:34:80:f2:e7:71:6d:ca:72:a4:88:f4:63:4a:7b:dc: e2:f4:56:5b:d9:15:df:18:35:6f:3e:08:ae:56:45:41:32:7f: 35:ba:90:e2:33:27:97:25:d8:c7:dd:92:1a:76:28:21:42:98: 15:c9:9c:24:67:e9:34:40:40:d8:d1:4c:6e:b9:05:da:9a:da: 9a:23:c7:55:a9:87:9c:88:4a:cf:ab:23:22:ff:24:b4:56:d0: e8:34:3f:28:3c:69:27:0b:fc:b5:03:2d:e9:83:1c:a0:90:68: 6e:3e:7e:7d:b3:8d:92:3f:92:8c:2e:0a:37:01:62:f0:4b:6f: b4:f2:0f:5c:96:ca:4d:6b:31:eb:4c:be:f4:3f:45:45:d2:36: ff:2c:32:39:f4:42:82:5e:ab:95:3c:b0:c8:6f:0f:2e:77:ff: 8f:c8:d7:2d:cf:13:92:12:ab:76:e7:d3:24:56:9a:bb:67:6c: 98:8f:64:fb:98:cf:88:12:63:f4:2d:65:8e:bc:51:b3:e6:01: 9b:9c:3f:35:9e:db:3c:bb:0b:37:ff:2c:fd:8b:bd:98:ba:b7: e6:0c:02:75:33:a3:72:32:b4:c4:36:b5:bd:4b:ab:20:80:ba: ae:f6:9b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/FfoNomrS9aetsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MzlmYThlODgtMTQ4MC00NzJjLWJiYzktZDA1MjE2NGZhN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud9/s98OPRSSGk1mh2plZsu7eluU89Qw2z1l tZNEP8jBVo8XNnodUzglNkAZXck72BmwZcguyHc083ONcHiSK6sxenNunOGUDaBa 1vu3YcIN67ztzGMQYsEGOvcR1FNgTBHLDh1tB+hu7yCP7hUQhso/ei1JzcF35ldv FdO+fKdhq/n6P4DQH5DXA7SfzdRmCHBwwiF+lhFXg/2X43U7XVhI371ol0Awb7dG pU89YJf3UZuHILZG1hfgb+yIb1TkS0RKRZ2IqLIUbP491NUzwB336iDmUGlUO55d nrQLw4MvjwH1kCU0TZ66wMmiA8OOBvaymjUKzBcgc0DX8tYGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5291YQLF9VJQmW6YnaN33/8xHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUzMjE1YjMtZGQ3Mi0z ZTc3LTg0MTAtNTQwMzRkMjY5NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh2rXSKyB/NFK2x2fFycZnX1KDd+TSA8udxbcpypIj0Y0p73OL0VlvZ Fd8YNW8+CK5WRUEyfzW6kOIzJ5cl2Mfdkhp2KCFCmBXJnCRn6TRAQNjRTG65Bdqa 2pojx1Wph5yISs+rIyL/JLRW0Og0Pyg8aScL/LUDLemDHKCQaG4+fn2zjZI/kowu CjcBYvBLb7TyD1yWyk1rMetMvvQ/RUXSNv8sMjn0QoJeq5U8sMhvDy53/4/I1y3P E5ISq3bn0yRWmrtnbJiPZPuYz4gSY/QtZY68UbPmAZucPzWe2zy7Czf/LP2LvZi6 t+YMAnUzo3IytMQ2tb1LqyCAuq72m6o= -----END CERTIFICATE-----Generated at Tue Jul 1 01:00:51 2025 by rpki-client