$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb3a236d-70dc-346a-99c0-600d85aae08b.roa File: bb3a236d-70dc-346a-99c0-600d85aae08b.roa (raw, json) Hash identifier: YnOj1ncVlxBszFYtEqs3vgvYZC8n9a55/wcVhwt1iMY= Subject key identifier: 0F:86:D3:EA:09:D9:65:2A:5D:FD:93:4E:7D:AC:0D:17:9A:F3:57:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC01AD5241304288570500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb3a236d-70dc-346a-99c0-600d85aae08b.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 68.46.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:01:ad:52:41:30:42:88:57:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=57ddb112-ab9a-45f1-93b5-b80d0ccf4974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:d5:99:30:ea:8c:eb:b4:aa:10:79:99:f5: 53:1a:e0:32:93:41:ef:c5:29:a2:c5:82:cc:13:7d: 9a:96:c0:8d:d4:d8:03:af:58:a3:e9:24:15:6e:c4: c2:31:91:1c:f3:49:3e:35:d3:94:09:00:c4:bf:b9: 8f:18:43:21:57:74:21:bb:0f:e1:28:68:f7:4c:7f: 7b:5f:f2:00:f1:10:a5:ad:aa:53:b2:ae:08:1e:1d: 1a:c2:d4:a5:4d:3e:70:89:5e:f1:dd:2d:92:f6:b0: 4f:0a:0e:15:24:9c:fd:82:e2:f4:61:3c:51:3b:75: 51:6c:64:fa:be:c5:46:0d:e2:5a:a8:6a:3a:6a:57: fd:1a:36:8c:b4:41:8c:60:63:2c:41:1b:3e:83:bd: ee:39:6b:df:1b:90:32:d8:e3:58:98:b5:32:57:e5: fe:51:2c:1b:f8:ad:6f:b3:68:30:e8:93:e2:cc:25: 86:8f:93:be:a7:6c:14:71:70:05:ef:55:fb:6c:d9: bc:dc:82:5c:d3:f2:0f:99:ed:9f:53:d6:92:5a:57: 4c:10:9b:f4:75:67:3e:bd:93:dd:ed:99:51:76:ed: a2:47:c0:48:33:2a:70:e7:31:75:3f:0a:6b:8c:f7: 05:cc:e3:80:22:f2:ae:dd:9f:7c:3f:71:8d:96:83: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:86:D3:EA:09:D9:65:2A:5D:FD:93:4E:7D:AC:0D:17:9A:F3:57:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb3a236d-70dc-346a-99c0-600d85aae08b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.46.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b0:e1:58:30:bd:2c:05:e6:db:75:ff:55:76:aa:51:aa:20: b4:3d:71:e0:95:ac:04:ea:69:6a:2a:2a:22:62:15:e7:0c:9e: 7c:9b:93:4a:78:05:a8:09:22:e3:21:39:e3:2e:f5:0b:9d:40: 0a:e0:f9:b5:ea:ee:4c:3e:c4:0a:d8:81:80:45:cc:03:43:05: 7b:df:f8:e8:2f:ee:84:21:91:4d:68:e9:75:10:ea:3c:8f:fd: dc:53:c2:2d:15:ba:d2:60:1a:74:8f:67:7a:b6:77:a9:fa:99: 47:94:af:29:35:53:43:09:0a:62:fb:da:ff:16:e0:1c:f8:f3: 76:0b:fc:8b:9a:d1:be:b3:53:6b:5d:ed:9d:df:dd:e7:15:e8: 69:4e:45:1e:d1:24:81:ee:71:8d:86:b9:33:be:84:70:62:fa: 0c:c9:d0:f3:15:4c:29:c8:94:e8:00:e2:53:d2:45:75:e3:40: 7e:de:28:18:f1:d9:a5:41:42:f3:25:67:2e:78:04:6d:80:85: fa:78:45:38:3e:0c:9f:f1:2d:a7:55:5c:4f:7e:58:66:73:fa: 44:9e:67:7b:37:ae:ab:34:d0:c1:93:4a:8a:f4:8f:42:f5:51: a7:48:09:61:89:a3:b1:90:1b:3f:b1:dc:ac:0f:93:3e:24:6e: 6a:f6:67:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/AGtUkEwQohXBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NTdkZGIxMTItYWI5YS00NWYxLTkzYjUtYjgwZDBjY2Y0OTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk/VmTDqjOu0qhB5mfVTGuAyk0HvxSmixYLM E32alsCN1NgDr1ij6SQVbsTCMZEc80k+NdOUCQDEv7mPGEMhV3Qhuw/hKGj3TH97 X/IA8RClrapTsq4IHh0awtSlTT5wiV7x3S2S9rBPCg4VJJz9guL0YTxRO3VRbGT6 vsVGDeJaqGo6alf9GjaMtEGMYGMsQRs+g73uOWvfG5Ay2ONYmLUyV+X+USwb+K1v s2gw6JPizCWGj5O+p2wUcXAF71X7bNm83IJc0/IPme2fU9aSWldMEJv0dWc+vZPd 7ZlRdu2iR8BIMypw5zF1PwprjPcFzOOAIvKu3Z98P3GNloNRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+G0+oJ2WUqXf2TTn2sDRea81dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmIzYTIzNmQtNzBkYy0z NDZhLTk5YzAtNjAwZDg1YWFlMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaw4VgwvSwF5tt1/1V2qlGqILQ9ceCVrATqaWoqKiJiFecMnnybk0p4 BagJIuMhOeMu9QudQArg+bXq7kw+xArYgYBFzANDBXvf+Ogv7oQhkU1o6XUQ6jyP /dxTwi0VutJgGnSPZ3q2d6n6mUeUryk1U0MJCmL72v8W4Bz483YL/Iua0b6zU2td 7Z3f3ecV6GlORR7RJIHucY2GuTO+hHBi+gzJ0PMVTCnIlOgA4lPSRXXjQH7eKBjx 2aVBQvMlZy54BG2Ahfp4RTg+DJ/xLadVXE9+WGZz+kSeZ3s3rqs00MGTSor0j0L1 UadICWGJo7GQGz+x3KwPkz4kbmr2Z/s= -----END CERTIFICATE-----Generated at Tue Jul 1 08:17:32 2025 by rpki-client