$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa File: 8235dfbe-b3ab-3735-aab7-c2955069fad0.roa (raw, json) Hash identifier: I/rECPFiGgdtQmBaoKP97hyrRufxS44vIHm8p/vxtqE= Subject key identifier: 92:7E:3B:8C:6A:B4:F1:50:63:B4:3F:B3:01:84:F8:A4:EC:89:7F:33 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584A0C055F712C43B6733AB37540 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 68.71.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5f:71:2c:43:b6:73:3a:b3:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=9d1f21a8-2263-4f24-9beb-dee530c6936f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:00:c1:24:68:74:2e:81:3c:e6:1d:df:3b: 4c:47:a1:8e:fd:d4:14:ae:34:67:6d:cd:b0:17:5a: d3:f3:02:c7:f2:51:d4:cf:69:80:54:78:cc:e1:61: 08:ea:86:3f:45:07:f2:1a:ca:f5:2c:44:83:cc:ba: e6:66:89:63:24:06:d8:5b:a1:12:d4:68:96:07:45: fc:9d:11:d8:bf:9d:27:57:5f:d5:e4:6f:33:44:55: 31:c1:f9:ec:d6:f5:14:b2:7e:0b:f7:7d:f5:6d:23: db:d9:81:12:f4:5e:6d:84:63:3d:45:33:94:94:9d: 6e:06:80:3a:97:61:ee:24:52:ac:b7:0b:7f:a0:73: d0:6b:81:95:24:2e:0e:9a:68:00:b9:05:3a:24:76: 94:77:6d:47:67:11:b4:35:0a:be:9f:fa:0f:59:f3: 20:13:72:47:8c:28:6d:bf:96:32:22:aa:70:54:04: f1:14:1c:61:16:cf:d0:28:7c:60:34:b1:e5:51:32: cf:5d:0e:a9:a7:03:19:c2:59:c7:3d:9d:9a:a1:12: bd:3e:e2:b7:40:c6:dc:96:fb:38:97:c9:fd:77:08: 30:bf:a4:5f:09:cb:41:fe:8e:8f:b9:01:e2:77:9e: eb:a3:7a:1d:73:8f:24:87:d6:dc:2c:a1:d8:66:0a: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7E:3B:8C:6A:B4:F1:50:63:B4:3F:B3:01:84:F8:A4:EC:89:7F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:57:f1:a3:55:a9:4a:07:be:e0:79:85:99:51:33:48:17:3b: 4b:51:b5:16:62:c0:6a:5d:7f:43:9c:ae:9c:b6:28:d0:6d:0d: e7:66:2b:f3:d6:16:63:54:89:ce:4a:c9:ae:57:49:8c:15:2d: f1:93:23:b7:26:5f:44:bb:e5:b7:1d:82:a1:18:e2:f2:42:08: f4:8e:69:29:6c:4e:21:7b:71:29:67:9e:a9:ed:51:52:65:3e: a6:20:6f:8d:5b:87:1f:ae:19:47:bd:03:3a:d4:45:0e:d4:0e: 65:eb:8b:f2:cc:f3:cb:2a:99:00:98:bb:e6:ed:c3:e9:4a:3b: ea:8a:06:ec:f4:ad:fc:3c:1e:e2:9c:f5:23:5f:c2:35:d3:65: 6a:e9:b4:7f:eb:ca:47:e2:86:52:3d:62:eb:09:3d:5b:48:c7: d6:69:c3:22:c0:4a:55:6c:fa:3e:5f:26:75:82:d8:29:0f:35: de:3c:87:2c:86:33:50:f7:88:76:2b:77:f5:e1:c9:25:ac:fa: 55:1d:47:bc:6b:19:01:03:f4:70:28:7a:e8:7b:7c:49:9c:55: ae:eb:07:2c:48:33:68:f3:46:fb:63:e8:b3:f5:e1:d9:0e:e1: 40:41:44:b0:31:9c:25:b6:a7:f4:e1:77:d0:ec:db:05:3f:2e: 16:2c:2d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBV9xLEO2czqzdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OWQxZjIxYTgtMjI2My00ZjI0LTliZWItZGVlNTMwYzY5MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKEAwSRodC6BPOYd3ztMR6GO/dQUrjRnbc2w F1rT8wLH8lHUz2mAVHjM4WEI6oY/RQfyGsr1LESDzLrmZoljJAbYW6ES1GiWB0X8 nRHYv50nV1/V5G8zRFUxwfns1vUUsn4L9331bSPb2YES9F5thGM9RTOUlJ1uBoA6 l2HuJFKstwt/oHPQa4GVJC4OmmgAuQU6JHaUd21HZxG0NQq+n/oPWfMgE3JHjCht v5YyIqpwVATxFBxhFs/QKHxgNLHlUTLPXQ6ppwMZwlnHPZ2aoRK9PuK3QMbclvs4 l8n9dwgwv6RfCctB/o6PuQHid57ro3odc48kh9bcLKHYZgr3xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ+O4xqtPFQY7Q/swGE+KTsiX8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODIzNWRmYmUtYjNhYi0z NzM1LWFhYjctYzI5NTUwNjlmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5X8aNVqUoHvuB5hZlRM0gXO0tRtRZiwGpdf0Ocrpy2KNBtDedmK/PW FmNUic5Kya5XSYwVLfGTI7cmX0S75bcdgqEY4vJCCPSOaSlsTiF7cSlnnqntUVJl PqYgb41bhx+uGUe9AzrURQ7UDmXri/LM88sqmQCYu+btw+lKO+qKBuz0rfw8HuKc 9SNfwjXTZWrptH/rykfihlI9YusJPVtIx9ZpwyLASlVs+j5fJnWC2CkPNd48hyyG M1D3iHYrd/XhySWs+lUdR7xrGQED9HAoeuh7fEmcVa7rByxIM2jzRvtj6LP14dkO 4UBBRLAxnCW2p/Thd9Ds2wU/LhYsLes= -----END CERTIFICATE-----Generated at Sun Jun 29 08:51:36 2025 by rpki-client