$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec459ce8-4b28-3de5-8124-47655b8ce084.roa File: ec459ce8-4b28-3de5-8124-47655b8ce084.roa (raw, json) Hash identifier: CkWO3yBOhNgNK2JuPV59GVKd360LaH7uAPyEPa7j9Yg= Subject key identifier: 66:46:1A:F8:44:0B:AC:1B:70:4A:F9:71:D5:63:78:50:52:BA:86:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBD98689920FCD57BF9900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec459ce8-4b28-3de5-8124-47655b8ce084.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33668 IP address blocks: 68.34.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:d9:86:89:92:0f:cd:57:bf:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=ff85530f-e14c-475c-aea4-d086d4e4fecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:69:c0:20:a4:e5:79:ee:cb:bc:34:2c:fa:6c: 40:12:52:30:aa:39:79:15:d7:f7:80:ae:9c:b1:4c: 75:a5:c7:46:eb:e8:46:8e:01:92:28:ba:41:bc:b3: d6:7b:3f:8a:6f:d5:18:d3:63:f3:88:e5:50:30:d8: 35:0d:d5:0f:43:09:d6:40:c5:17:06:62:b4:aa:ce: 4c:eb:97:85:5c:ad:a8:5a:60:4a:87:2b:09:bc:7e: b9:d7:db:2c:58:bd:1c:ab:2a:60:7b:94:7d:a6:2d: 2d:41:0d:29:fe:7e:28:92:80:e9:b2:cf:e5:62:f0: 70:b3:a1:c5:6f:81:18:6f:55:4c:6f:a0:ff:eb:53: 2b:0e:d7:81:38:46:98:07:24:26:8b:72:e3:cd:57: 80:09:2f:05:91:56:ff:45:02:67:d8:33:8a:3d:63: 89:5f:6c:84:c0:f4:bd:ee:a8:8e:c6:ed:7a:ae:b6: 56:13:3c:02:cc:31:7b:71:24:c4:c0:05:6d:80:f0: 54:88:26:62:82:bb:e0:31:3e:14:d9:28:69:bd:74: 0e:d7:aa:a9:22:cb:81:4d:21:ee:ec:16:3a:70:ad: b9:ca:1b:85:8a:5d:4b:2b:da:b0:7a:8a:be:70:59: 22:c8:21:a0:66:03:a3:01:05:36:ec:5f:5e:93:49: bc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:46:1A:F8:44:0B:AC:1B:70:4A:F9:71:D5:63:78:50:52:BA:86:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec459ce8-4b28-3de5-8124-47655b8ce084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:18:9b:b9:8a:92:3a:34:9f:6d:69:d2:8b:10:ab:52:d5:3c: 36:ff:43:4e:78:2a:22:ec:80:6b:9c:d6:f8:57:d7:f9:f2:4d: 6c:94:5c:b9:ee:4f:c8:6d:de:5f:9f:96:33:8e:4d:9c:97:ea: 24:5b:4c:09:a4:59:75:b7:84:ee:3b:9d:d0:b7:c4:a0:52:0a: 5a:d6:c0:30:d4:d0:67:42:ac:6a:ba:6a:83:63:31:5c:a2:1a: 4b:22:1b:e4:ab:b3:1c:3d:11:93:76:c4:4c:90:99:86:59:94: b6:c8:f3:95:25:30:1f:af:d9:96:ac:61:a0:82:57:8d:24:f4: e9:6e:ee:9b:3f:90:02:2c:6a:d8:d4:26:ab:b1:64:a9:ee:28: e9:81:86:6a:7c:21:ed:61:0d:35:b4:6c:a3:d0:31:19:a2:59: d1:4b:24:17:6c:53:20:90:40:2a:3d:f9:2c:75:6f:6b:33:41: 36:0f:e1:bd:79:04:1d:c9:55:1d:c0:d5:da:4e:4b:9e:e8:9e: 7b:01:30:39:d3:46:f5:75:d4:2b:00:a2:c8:e7:5b:41:45:a1: 3a:cf:29:8e:52:1c:5a:e5:49:c9:55:d3:4a:d9:ff:12:38:24: e3:2c:76:c7:d8:f9:1b:d6:6a:4c:46:9e:8c:d0:ce:52:cc:39: 46:3c:e5:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+9mGiZIPzVe/mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZmY4NTUzMGYtZTE0Yy00NzVjLWFlYTQtZDA4NmQ0ZTRmZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWnAIKTlee7LvDQs+mxAElIwqjl5Fdf3gK6c sUx1pcdG6+hGjgGSKLpBvLPWez+Kb9UY02PziOVQMNg1DdUPQwnWQMUXBmK0qs5M 65eFXK2oWmBKhysJvH6519ssWL0cqypge5R9pi0tQQ0p/n4okoDpss/lYvBws6HF b4EYb1VMb6D/61MrDteBOEaYByQmi3LjzVeACS8FkVb/RQJn2DOKPWOJX2yEwPS9 7qiOxu16rrZWEzwCzDF7cSTEwAVtgPBUiCZigrvgMT4U2ShpvXQO16qpIsuBTSHu 7BY6cK25yhuFil1LK9qweoq+cFkiyCGgZgOjAQU27F9ek0m8hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZGGvhEC6wbcEr5cdVjeFBSuoZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWM0NTljZTgtNGIyOC0z ZGU1LTgxMjQtNDc2NTViOGNlMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERCLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYYm7mKkjo0n21p0osQq1LVPDb/Q054KiLsgGuc1vhX1/nyTWyUXLnu T8ht3l+fljOOTZyX6iRbTAmkWXW3hO47ndC3xKBSClrWwDDU0GdCrGq6aoNjMVyi GksiG+Srsxw9EZN2xEyQmYZZlLbI85UlMB+v2ZasYaCCV40k9Olu7ps/kAIsatjU JquxZKnuKOmBhmp8Ie1hDTW0bKPQMRmiWdFLJBdsUyCQQCo9+Sx1b2szQTYP4b15 BB3JVR3A1dpOS57onnsBMDnTRvV11CsAosjnW0FFoTrPKY5SHFrlSclV00rZ/xI4 JOMsdsfY+RvWakxGnozQzlLMOUY85S8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:46:48 2025 by rpki-client