$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdc4fc04-6550-3c1f-b006-906d8420574d.roa File: fdc4fc04-6550-3c1f-b006-906d8420574d.roa (raw, json) Hash identifier: FFRBEHNMrsTgLur5rsfCA12dWJWpzKZIkPGf41XaAmw= Subject key identifier: 12:97:70:0E:9C:46:22:53:E8:58:7B:34:E7:6C:25:74:32:5C:8E:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBC69F37E151E4EFA3C080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdc4fc04-6550-3c1f-b006-906d8420574d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33660 IP address blocks: 68.87.10.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:c6:9f:37:e1:51:e4:ef:a3:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=8b5c65a7-70b1-46e8-90db-adb94493e740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:50:e1:9d:df:a4:a6:cf:8d:0f:82:43:68: af:26:f3:5f:6b:11:c4:19:d8:f4:b5:03:35:b4:7a: 9d:2b:a6:02:ee:d7:63:3d:89:c6:e1:ce:bb:db:43: 93:dc:61:05:a8:e8:94:04:32:b4:f7:f6:33:b5:b6: 23:44:26:9c:3f:4a:c5:d8:b4:a1:6c:05:e3:9f:c7: 2c:1c:0b:94:bc:71:82:aa:e9:9e:91:13:e1:65:2f: a8:ac:10:7c:3a:77:bd:77:91:54:bf:19:09:48:f8: a0:03:c2:4f:7b:48:70:50:d0:76:79:26:92:b0:c5: ec:48:ba:7a:c4:e6:25:fd:af:3a:3b:6c:be:f9:e7: 3a:32:dc:a6:88:68:1e:af:aa:ee:71:ea:5d:9a:0e: 63:f4:01:47:d8:85:2b:3d:39:cd:29:7a:1e:49:0a: 1e:6d:65:14:38:6e:98:6b:33:62:a3:9c:78:e1:3b: f0:a3:f2:a3:80:69:00:40:70:5b:b3:5a:9c:24:a3: ca:fe:75:0c:bc:52:7a:4b:3c:b5:a3:cb:7a:54:5a: 47:dd:be:bd:85:a6:2d:88:33:a1:51:e8:cd:6b:ef: e3:c9:87:e4:06:2b:63:d1:3c:0d:33:15:cb:c9:6f: c9:65:b0:2a:ff:2d:7a:f4:4b:9d:5b:a6:fa:04:c3: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:97:70:0E:9C:46:22:53:E8:58:7B:34:E7:6C:25:74:32:5C:8E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdc4fc04-6550-3c1f-b006-906d8420574d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.10.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ca:3d:d2:cf:09:82:4f:91:2c:e5:33:a7:cb:e0:b9:9f:57: 60:48:1e:d2:29:18:ea:4f:67:b7:60:39:99:4a:71:c3:62:66: 1b:3f:0f:46:a8:d3:98:2b:2d:a7:db:07:27:7c:ce:5a:36:90: 24:ef:40:ec:04:f5:e6:bb:7b:3c:44:31:de:2b:fe:24:fc:90: d6:1b:9c:3a:02:49:b6:b0:44:98:cf:6e:29:82:68:07:72:af: da:15:ee:3d:5c:70:6c:ba:29:cc:97:44:24:bb:6f:97:68:cd: 7a:8b:ed:58:42:cf:82:d4:bd:26:fe:cf:44:e7:f0:65:80:c0: 2d:07:1b:21:20:1d:0c:33:fb:02:84:c3:35:23:ee:e7:1c:76: 2d:22:51:78:4a:aa:2f:b0:b0:7e:6c:d6:2e:ee:60:39:07:e6: 91:38:48:ad:7b:10:57:03:74:dd:f7:51:7c:1d:11:be:65:d0: 0d:cb:64:7a:a0:0f:33:d0:ba:a8:43:96:85:f6:05:2c:2f:d8: 1a:64:75:98:96:bc:c7:89:12:42:25:05:79:f8:bb:dd:39:ad: 5e:1f:3b:9c:df:5f:81:32:ad:80:1e:4a:4e:66:44:2c:8f:c2: 42:a3:54:7a:a8:09:6f:fc:c3:98:10:2f:58:4a:0e:0a:51:94: 17:5e:a7:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpc+8afN+FR5O+jwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OGI1YzY1YTctNzBiMS00NmU4LTkwZGItYWRiOTQ0OTNlNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRRQ4Z3fpKbPjQ+CQ2ivJvNfaxHEGdj0tQM1 tHqdK6YC7tdjPYnG4c6720OT3GEFqOiUBDK09/YztbYjRCacP0rF2LShbAXjn8cs HAuUvHGCqumekRPhZS+orBB8One9d5FUvxkJSPigA8JPe0hwUNB2eSaSsMXsSLp6 xOYl/a86O2y++ec6MtymiGger6rucepdmg5j9AFH2IUrPTnNKXoeSQoebWUUOG6Y azNio5x44Tvwo/KjgGkAQHBbs1qcJKPK/nUMvFJ6Szy1o8t6VFpH3b69haYtiDOh UejNa+/jyYfkBitj0TwNMxXLyW/JZbAq/y169EudW6b6BMNgIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBKXcA6cRiJT6Fh7NOdsJXQyXI5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmRjNGZjMDQtNjU1MC0z YzFmLWIwMDYtOTA2ZDg0MjA1NzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHRFcKADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtyj3SzwmCT5Es5TOny+C5n1dgSB7SKRjqT2e3YDmZSnHDYmYbPw9G qNOYKy2n2wcnfM5aNpAk70DsBPXmu3s8RDHeK/4k/JDWG5w6Akm2sESYz24pgmgH cq/aFe49XHBsuinMl0Qku2+XaM16i+1YQs+C1L0m/s9E5/BlgMAtBxshIB0MM/sC hMM1I+7nHHYtIlF4SqovsLB+bNYu7mA5B+aROEitexBXA3Td91F8HRG+ZdANy2R6 oA8z0LqoQ5aF9gUsL9gaZHWYlrzHiRJCJQV5+LvdOa1eHzuc31+BMq2AHkpOZkQs j8JCo1R6qAlv/MOYEC9YSg4KUZQXXqej -----END CERTIFICATE-----Generated at Tue Jul 1 13:15:41 2025 by rpki-client