$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa File: ef6ef0be-d7e9-316c-ac17-32c51d629568.roa (raw, json) Hash identifier: jEdRxm4RmS5Ddp85BB3PXD/qHoubA8Y9MROvFhw2wN4= Subject key identifier: D4:91:B6:57:CB:18:C0:C5:C0:25:97:05:63:51:CD:FD:AB:31:12:EA Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584A1035476E64E27D32F99F4400 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 25843 IP address blocks: 68.168.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:47:6e:64:e2:7d:32:f9:9f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=0feea1ea-c82e-4d13-b9ca-62f9f69e865e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e7:00:1a:03:ad:62:4b:16:bf:cb:f2:99:9b: 9f:4c:90:20:01:c1:98:1f:07:9c:db:6a:93:6e:c4: 35:9e:c2:ec:6d:f0:de:f3:0e:d1:94:44:0b:37:9a: 65:a1:dc:0c:0a:21:5a:a1:9e:6c:46:f2:77:60:7c: 3f:9b:a2:19:11:74:a8:86:aa:fa:7b:4c:39:0b:33: d7:af:70:5a:a2:a7:2c:8a:18:d7:5a:ce:10:67:fb: 87:08:e8:04:50:25:dd:7c:6d:d5:65:60:da:de:ff: 11:a3:4f:fc:9a:9d:10:45:42:20:0c:49:15:0d:ad: 15:ba:c4:72:ab:14:ad:44:5f:17:f8:2e:69:3c:51: f8:99:e5:2c:6a:4a:07:97:62:f7:c6:e5:2a:22:82: 5d:e8:f8:3d:1e:98:d4:2c:b0:79:87:86:ff:e4:bb: 5a:db:75:1e:79:d6:44:2f:55:fa:4d:99:39:de:1f: 22:33:2b:6b:51:dd:24:c5:ad:ee:ca:64:f9:fb:ed: d4:04:75:86:47:fc:6d:31:8a:5d:df:6d:c6:75:eb: 6d:c5:84:bb:13:5f:68:ea:8d:bb:83:5e:75:cc:42: 05:e1:ca:81:ae:bb:8e:73:ec:2c:cd:fa:b2:72:2d: dd:5d:21:13:2f:c8:3b:28:c6:84:ca:4a:7f:76:24: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:91:B6:57:CB:18:C0:C5:C0:25:97:05:63:51:CD:FD:AB:31:12:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:29:b6:c2:44:d9:c1:f8:c7:93:7f:b5:0e:cc:05:84:9c:3d: 76:49:dd:e0:1f:55:f3:e5:e5:64:14:f8:f2:34:fb:7a:7d:0a: e7:7d:f4:a5:78:25:21:ff:f1:94:40:75:fc:e8:eb:b2:02:d9: f5:d5:ff:10:c0:1d:f4:1d:30:63:b9:01:24:8a:5f:6c:6f:75: 77:38:51:86:d1:cd:4d:15:31:0b:93:15:90:77:48:8d:ff:d1: b0:80:ff:36:62:39:ae:d0:55:55:68:78:c1:a1:e0:1d:c1:1a: f7:30:75:85:d9:e6:52:c3:c4:0c:71:33:67:ea:c3:89:a8:00: c2:cb:f3:16:34:ec:de:a2:16:27:38:41:89:7b:dc:41:c8:36: 93:f6:f5:02:dc:f8:04:d9:e5:43:a2:bf:a4:be:8f:a1:88:5b: e6:19:46:d0:a5:38:f9:7c:48:9b:5f:f6:a8:dd:06:52:db:6d: 91:b4:02:ea:9b:cb:50:89:09:3b:0e:5b:90:21:99:25:0b:25: c1:63:a7:58:bf:cb:3b:69:ee:21:4d:de:d9:19:79:b0:7a:6b: 20:5f:83:fc:45:59:48:a3:b3:29:c2:3c:8f:51:4c:b5:ed:1b: e8:aa:4c:40:b1:3b:33:3c:96:ac:4c:78:c8:8d:cd:17:79:e3: 14:42:b5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUduZOJ9MvmfRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MGZlZWExZWEtYzgyZS00ZDEzLWI5Y2EtNjJmOWY2OWU4NjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgucAGgOtYksWv8vymZufTJAgAcGYHwec22qT bsQ1nsLsbfDe8w7RlEQLN5plodwMCiFaoZ5sRvJ3YHw/m6IZEXSohqr6e0w5CzPX r3BaoqcsihjXWs4QZ/uHCOgEUCXdfG3VZWDa3v8Ro0/8mp0QRUIgDEkVDa0VusRy qxStRF8X+C5pPFH4meUsakoHl2L3xuUqIoJd6Pg9HpjULLB5h4b/5Lta23UeedZE L1X6TZk53h8iMytrUd0kxa3uymT5++3UBHWGR/xtMYpd323GdettxYS7E19o6o27 g151zEIF4cqBrruOc+wszfqyci3dXSETL8g7KMaEykp/diSHEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSRtlfLGMDFwCWXBWNRzf2rMRLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZWY2ZWYwYmUtZDdlOS0z MTZjLWFjMTctMzJjNTFkNjI5NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkptsJE2cH4x5N/tQ7MBYScPXZJ3eAfVfPl5WQU+PI0+3p9Cud99KV4 JSH/8ZRAdfzo67IC2fXV/xDAHfQdMGO5ASSKX2xvdXc4UYbRzU0VMQuTFZB3SI3/ 0bCA/zZiOa7QVVVoeMGh4B3BGvcwdYXZ5lLDxAxxM2fqw4moAMLL8xY07N6iFic4 QYl73EHINpP29QLc+ATZ5UOiv6S+j6GIW+YZRtClOPl8SJtf9qjdBlLbbZG0Auqb y1CJCTsOW5AhmSULJcFjp1i/yztp7iFN3tkZebB6ayBfg/xFWUijsynCPI9RTLXt G+iqTECxOzM8lqxMeMiNzRd54xRCtdc= -----END CERTIFICATE-----Generated at Tue Jul 1 10:22:48 2025 by rpki-client