$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb85a270-358c-3f0f-8595-383cfe591948.roa File: cb85a270-358c-3f0f-8595-383cfe591948.roa (raw, json) Hash identifier: iYR75I7bUO/HQdkwkcUEEygZU8MZHndURST9s7QYnHs= Subject key identifier: 74:10:8A:C0:EE:65:1F:80:0B:06:37:05:9E:F8:52:75:5B:AE:57:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB3C9E7D2DF733EDB80500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb85a270-358c-3f0f-8595-383cfe591948.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 68.34.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:3c:9e:7d:2d:f7:33:ed:b8:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7e647a3d-2b5c-4225-8fdf-35f214a440b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:27:25:a1:af:92:dc:4b:91:d3:81:0f:52:09: 0d:b9:91:d8:e5:ac:ed:5e:b5:db:60:ca:b6:6b:dd: 03:88:fe:26:a4:23:8f:a2:5b:f6:f4:d1:50:09:c5: 06:47:c3:1e:86:c5:6f:35:6c:48:a8:15:97:fc:c3: f7:57:99:7a:46:bf:7c:15:c7:55:0e:b7:e8:3b:eb: 80:06:02:a1:d4:b6:b4:f7:a2:df:1a:ec:d8:88:dc: e2:5f:8f:b2:af:d4:cd:79:d6:aa:97:2d:8f:fb:60: fa:0a:e9:9f:a0:44:b8:1c:bf:c9:af:e1:bc:65:29: e1:d9:4e:23:ad:32:fa:8d:05:6a:b0:94:c3:15:ec: 81:a4:e1:d0:46:45:3b:fa:e9:2e:9a:4b:50:d7:3f: 25:f2:4c:1b:e8:67:f4:ef:37:cc:c3:63:9d:59:1e: 70:79:16:ce:ac:bd:a0:1e:af:73:77:2f:a0:1d:35: 4c:33:8b:57:e2:2f:c0:19:96:84:dd:35:37:f9:d7: db:1c:96:76:98:d7:34:02:09:8c:d9:89:7d:ec:c1: 0e:7f:a5:ac:35:84:f8:ee:34:bd:d5:79:ed:63:37: b0:02:dc:63:1e:24:cc:ff:c5:76:d9:95:ae:0d:dc: c5:81:52:ab:b2:6e:c6:e8:24:be:1b:d9:f4:f8:eb: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:10:8A:C0:EE:65:1F:80:0B:06:37:05:9E:F8:52:75:5B:AE:57:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb85a270-358c-3f0f-8595-383cfe591948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d3:b9:4f:6a:b4:cf:6d:f0:99:e7:6a:9e:ad:c0:1b:03:7e: 26:58:39:12:fe:10:c8:51:91:26:3d:e5:c3:39:84:c6:e6:99: 1d:40:af:20:ea:1e:1d:03:80:3d:c4:11:5d:90:9d:47:71:0d: 52:69:c4:cf:d0:fa:f3:d0:5e:f8:ea:7d:0f:a6:be:25:9f:6b: e8:f4:76:17:e0:02:a2:b5:f7:72:35:e9:78:8a:39:59:f5:b0: 12:e5:10:9b:2a:82:23:26:e5:2a:f3:c4:b3:8e:ab:d5:e8:16: 63:0c:fb:32:d3:45:0b:74:40:2f:97:92:a3:d3:34:d9:7e:10: 45:d6:7d:93:7a:6c:05:6f:1d:77:04:2c:45:8f:aa:03:25:99: a5:65:0f:c3:e5:c8:57:88:53:7a:96:a8:40:a2:eb:45:5c:13: 36:de:c6:01:0b:f9:f7:e2:b0:09:53:53:07:4e:a3:6c:bd:c8: 26:4d:29:a7:2e:a4:a6:0a:04:e7:d6:db:f1:47:28:55:e7:ec: 0b:30:d7:33:1a:cc:fc:09:4e:a2:1d:8a:62:74:8f:82:ce:88: 9f:72:13:5c:97:ce:f6:47:d1:1d:13:d9:63:a8:a9:ee:0a:4f: e3:61:4c:3d:8e:ee:9e:b7:4d:34:92:05:ac:fe:ce:d8:0a:8f: 59:ec:d7:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zyefS33M+24BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk N2U2NDdhM2QtMmI1Yy00MjI1LThmZGYtMzVmMjE0YTQ0MGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCcloa+S3EuR04EPUgkNuZHY5aztXrXbYMq2 a90DiP4mpCOPolv29NFQCcUGR8MehsVvNWxIqBWX/MP3V5l6Rr98FcdVDrfoO+uA BgKh1La096LfGuzYiNziX4+yr9TNedaqly2P+2D6CumfoES4HL/Jr+G8ZSnh2U4j rTL6jQVqsJTDFeyBpOHQRkU7+ukumktQ1z8l8kwb6Gf07zfMw2OdWR5weRbOrL2g Hq9zdy+gHTVMM4tX4i/AGZaE3TU3+dfbHJZ2mNc0AgmM2Yl97MEOf6WsNYT47jS9 1XntYzewAtxjHiTM/8V22ZWuDdzFgVKrsm7G6CS+G9n0+Ov+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQQisDuZR+ACwY3BZ74UnVbrldSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I4NWEyNzAtMzU4Yy0z ZjBmLTg1OTUtMzgzY2ZlNTkxOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3TuU9qtM9t8Jnnap6twBsDfiZYORL+EMhRkSY95cM5hMbmmR1AryDq Hh0DgD3EEV2QnUdxDVJpxM/Q+vPQXvjqfQ+mviWfa+j0dhfgAqK193I16XiKOVn1 sBLlEJsqgiMm5SrzxLOOq9XoFmMM+zLTRQt0QC+XkqPTNNl+EEXWfZN6bAVvHXcE LEWPqgMlmaVlD8PlyFeIU3qWqECi60VcEzbexgEL+ffisAlTUwdOo2y9yCZNKacu pKYKBOfW2/FHKFXn7Asw1zMazPwJTqIdimJ0j4LOiJ9yE1yXzvZH0R0T2WOoqe4K T+NhTD2O7p63TTSSBaz+ztgKj1ns11c= -----END CERTIFICATE-----Generated at Tue Jul 1 03:17:50 2025 by rpki-client