$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c8b37e0-97af-37cd-b301-ab331bf17e69.roa File: 9c8b37e0-97af-37cd-b301-ab331bf17e69.roa (raw, json) Hash identifier: YyaLu5RMum1zr9bPIYoIFaB8dJ8oF6OfsscQfNRNxhE= Subject key identifier: D3:33:90:AA:00:0E:EE:AE:BA:86:06:20:7E:88:30:FE:31:40:C1:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC6041B7968B5E2AEF2640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c8b37e0-97af-37cd-b301-ab331bf17e69.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 68.87.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:60:41:b7:96:8b:5e:2a:ef:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=841ba0e6-e04f-4405-b253-24e6ca5e78fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:71:0b:8f:2f:63:b1:3c:1e:25:9e:ce:8b: 14:22:48:4c:da:ee:15:42:fc:f4:93:2e:89:f4:ad: 70:2a:de:79:28:8d:a1:3b:49:7f:d9:97:dc:2e:69: 41:90:4e:17:4c:e8:7f:4e:92:9b:9d:6e:20:4a:df: f3:65:41:29:88:75:0b:1f:f3:26:d1:7c:c9:ce:fc: c0:b4:54:99:c7:aa:cd:65:03:da:89:10:33:86:df: 10:5c:50:e5:59:a7:fd:22:8d:16:d9:92:30:ba:75: cb:4e:dd:72:3f:97:f9:37:31:83:d6:6b:a5:a1:22: bb:91:ad:5c:a1:53:dc:52:59:1c:a2:fb:57:b9:f8: 42:88:bf:a6:41:f3:60:71:3c:66:f5:bf:87:22:38: 16:ae:d4:c1:4e:0b:b7:09:d3:2a:0a:85:4d:ea:15: 23:96:21:82:1e:25:af:6e:34:5a:11:c0:ad:3a:67: e2:4b:b0:06:59:05:9f:8c:6f:bf:2a:fb:8e:20:97: d5:53:de:52:f6:0c:3e:47:91:3f:1e:09:b0:e0:c8: 1e:7f:01:61:1f:ae:58:11:b4:78:b1:f3:4d:b8:28: 2f:51:4e:4d:75:8f:d5:c8:d6:67:52:7d:cc:d1:27: 41:11:ee:ec:b4:21:7c:df:f0:6c:62:e8:7f:8a:87: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:33:90:AA:00:0E:EE:AE:BA:86:06:20:7E:88:30:FE:31:40:C1:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c8b37e0-97af-37cd-b301-ab331bf17e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:98:ac:f6:6a:3f:dc:8a:1d:55:bb:31:16:8f:1c:e5:8a:cc: fa:1b:10:db:11:c9:e5:72:13:29:2a:92:ee:52:77:74:3c:98: cd:a4:0e:eb:c4:ee:fd:df:1a:08:e1:a2:51:65:db:53:52:ae: c4:9f:fe:f6:3b:7a:34:a3:21:3d:b8:a5:fd:97:8c:ca:78:5c: 11:10:c2:59:25:72:71:89:e1:fe:6f:c0:83:08:2b:f9:c4:65: ae:95:80:9f:de:9a:8d:54:64:bd:d9:fa:1c:49:58:46:fe:83: 2f:9e:a2:09:f4:1a:41:be:6c:01:bf:08:d2:b4:30:13:34:78: 97:4a:b3:43:61:b8:43:16:b5:3b:6d:45:f3:41:1d:8e:0c:b7: 07:a0:25:5d:3e:0a:e1:d1:95:4c:70:bb:f9:9f:82:75:92:57: 27:91:29:ca:f5:c7:cf:78:8e:12:43:31:06:a8:86:b3:f5:ee: fb:c6:c8:7c:e2:99:70:48:2a:5c:5e:be:95:23:64:fc:5e:d3: 5f:4e:f5:72:1a:24:58:f4:7a:58:3f:76:30:91:5d:b7:40:15: 59:5f:cf:ce:9d:80:f6:d1:69:50:a1:96:5b:74:50:c6:2d:14: 54:10:a9:26:56:89:e5:6d:fa:79:af:2a:ce:a0:36:de:3a:a7: ea:e8:cd:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/GBBt5aLXirvJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ODQxYmEwZTYtZTA0Zi00NDA1LWIyNTMtMjRlNmNhNWU3OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqRxC48vY7E8HiWezosUIkhM2u4VQvz0ky6J 9K1wKt55KI2hO0l/2ZfcLmlBkE4XTOh/TpKbnW4gSt/zZUEpiHULH/Mm0XzJzvzA tFSZx6rNZQPaiRAzht8QXFDlWaf9Io0W2ZIwunXLTt1yP5f5NzGD1muloSK7ka1c oVPcUlkcovtXufhCiL+mQfNgcTxm9b+HIjgWrtTBTgu3CdMqCoVN6hUjliGCHiWv bjRaEcCtOmfiS7AGWQWfjG+/KvuOIJfVU95S9gw+R5E/Hgmw4MgefwFhH65YEbR4 sfNNuCgvUU5NdY/VyNZnUn3M0SdBEe7stCF83/BsYuh/ioeT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMzkKoADu6uuoYGIH6IMP4xQMEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWM4YjM3ZTAtOTdhZi0z N2NkLWIzMDEtYWIzMzFiZjE3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKYrPZqP9yKHVW7MRaPHOWKzPobENsRyeVyEykqku5Sd3Q8mM2kDuvE 7v3fGgjholFl21NSrsSf/vY7ejSjIT24pf2XjMp4XBEQwlklcnGJ4f5vwIMIK/nE Za6VgJ/emo1UZL3Z+hxJWEb+gy+eogn0GkG+bAG/CNK0MBM0eJdKs0NhuEMWtTtt RfNBHY4MtwegJV0+CuHRlUxwu/mfgnWSVyeRKcr1x894jhJDMQaohrP17vvGyHzi mXBIKlxevpUjZPxe019O9XIaJFj0elg/djCRXbdAFVlfz86dgPbRaVChllt0UMYt FFQQqSZWieVt+nmvKs6gNt46p+rozbI= -----END CERTIFICATE-----Generated at Mon Jun 30 20:11:16 2025 by rpki-client