$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa File: 94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa (raw, json) Hash identifier: ATOXnMtPyLGhClxChfC40LFr71qTJ8shqVQQzzkvVjI= Subject key identifier: 36:E8:80:A1:D3:15:7C:1A:EC:4A:D8:9E:EB:65:21:26:1A:70:F7:6F Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584A268ABEFBBF8D2DD16542A380 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 62563 IP address blocks: 68.233.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:be:fb:bf:8d:2d:d1:65:42:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=9c9daf1f-ae42-4e8c-85fc-74369262f28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2a:6b:bb:e6:cb:80:c8:d2:4f:4a:0d:a7:71: 23:7c:bb:04:51:b5:ec:58:02:f4:bf:08:2c:4d:45: e2:1c:91:34:c1:9d:53:be:d4:06:e8:c0:98:5f:dd: 90:52:bb:34:d9:3a:71:7c:0c:58:80:f7:79:09:b1: 2f:85:a7:84:90:3d:d2:c5:9d:a4:d9:7d:fc:e5:4f: dd:ea:82:83:1c:97:75:a0:94:dd:ec:27:c0:79:d3: 2f:3f:5d:4a:8e:3f:d9:7b:51:f5:7e:d7:65:9d:21: 3e:9f:93:7e:a7:3b:8b:07:84:df:da:2d:62:de:bb: 38:07:ca:18:53:69:29:6e:d3:49:20:8b:80:b2:6b: 6d:bd:01:7a:0e:d2:29:4b:b5:9e:0a:33:b6:53:fa: e3:51:87:55:92:d2:7a:f4:42:8b:64:eb:42:74:01: d4:19:67:f1:c3:f9:89:f0:f3:7c:e0:1f:de:55:97: cf:4b:9e:fd:02:99:1b:4a:1e:2e:41:a4:54:82:57: 32:ba:0d:e6:fe:81:1a:52:a2:03:77:33:39:b2:3d: 77:bc:1c:36:eb:da:fa:27:00:e3:91:e3:3a:38:fb: 84:ed:ad:d6:39:31:b4:f8:e8:e8:6d:24:0e:a0:f1: 9f:76:59:99:54:86:d4:06:7d:e5:06:21:af:32:62: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E8:80:A1:D3:15:7C:1A:EC:4A:D8:9E:EB:65:21:26:1A:70:F7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:38:ce:6a:57:7a:45:66:b1:e8:ba:1c:f2:6f:bc:6b:9e:dd: 20:d2:79:47:4c:65:06:e4:c4:d6:fb:7e:6f:d2:59:e5:e5:18: 67:5a:34:03:d7:e9:dd:39:e9:37:ea:d6:a8:27:dd:6c:db:aa: 36:ba:2c:e5:d8:d7:f2:51:91:da:19:3a:4a:77:ee:85:ae:c2: 0e:61:3a:7c:56:63:93:00:d6:b0:14:d7:d2:69:3d:d4:19:72: 5e:b2:0e:b5:86:02:61:f0:ac:bd:2f:8a:0e:80:45:1e:5e:a0: ee:52:49:9e:61:97:7c:e8:b4:ef:14:64:ba:d9:21:4b:ab:ac: 9a:af:18:f5:92:ed:40:e8:c2:41:c9:d5:88:f9:2b:1a:9a:4f: a2:ba:99:29:ba:a6:77:20:90:b1:36:1e:d2:aa:17:72:d0:00: 6f:57:cf:41:60:78:d2:ca:d5:69:eb:83:83:77:4e:8d:86:d2: 8e:f2:55:d6:30:f9:fb:51:e2:14:4e:1e:b9:03:08:3f:52:f8: 94:30:ac:0d:80:ee:9e:4a:48:bc:b9:86:4d:08:87:46:35:e2: 23:17:85:13:67:e3:ac:99:aa:e7:de:51:7b:e8:d3:04:68:d9: 33:1a:f9:b5:5e:a8:08:1b:9c:3b:5a:b5:42:7e:d6:f1:08:5a: c7:bd:16:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomir77v40t0WVCo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk OWM5ZGFmMWYtYWU0Mi00ZThjLTg1ZmMtNzQzNjkyNjJmMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Spru+bLgMjST0oNp3EjfLsEUbXsWAL0vwgs TUXiHJE0wZ1TvtQG6MCYX92QUrs02TpxfAxYgPd5CbEvhaeEkD3SxZ2k2X385U/d 6oKDHJd1oJTd7CfAedMvP11Kjj/Ze1H1ftdlnSE+n5N+pzuLB4Tf2i1i3rs4B8oY U2kpbtNJIIuAsmttvQF6DtIpS7WeCjO2U/rjUYdVktJ69EKLZOtCdAHUGWfxw/mJ 8PN84B/eVZfPS579ApkbSh4uQaRUglcyug3m/oEaUqIDdzM5sj13vBw269r6JwDj keM6OPuE7a3WOTG0+OjobSQOoPGfdlmZVIbUBn3lBiGvMmIQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbogKHTFXwa7ErYnutlISYacPdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvOTRjNDAzZTEtNWQ3ZS0z MTYyLThhYTktOGQ4MjE3NGRmZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo4zmpXekVmsei6HPJvvGue3SDSeUdMZQbkxNb7fm/SWeXlGGdaNAPX 6d056Tfq1qgn3Wzbqja6LOXY1/JRkdoZOkp37oWuwg5hOnxWY5MA1rAU19JpPdQZ cl6yDrWGAmHwrL0vig6ARR5eoO5SSZ5hl3zotO8UZLrZIUurrJqvGPWS7UDowkHJ 1Yj5KxqaT6K6mSm6pncgkLE2HtKqF3LQAG9Xz0FgeNLK1Wnrg4N3To2G0o7yVdYw +ftR4hROHrkDCD9S+JQwrA2A7p5KSLy5hk0Ih0Y14iMXhRNn46yZqufeUXvo0wRo 2TMa+bVeqAgbnDtatUJ+1vEIWse9Fmw= -----END CERTIFICATE-----Generated at Sun Jun 29 20:39:54 2025 by rpki-client