$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa File: a6a1c456-f3c1-3ef8-a926-e55881541742.roa (raw, json) Hash identifier: Nln3HPLxS7kqNsq9/zRIM1N6Ir2Z3KjP+obX7I2eJ3o= Subject key identifier: A6:3A:16:CF:FD:58:69:92:7B:89:8D:0B:C4:58:C7:F4:7C:B0:4C:72 Certificate issuer: /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4 Certificate serial: 010D0C9F432858499AF47F3528509DFE8E6F25E0 Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 25830 IP address blocks: 68.234.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7f:35:28:50:9d:fe:8e:6f:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=f3a7039d-200a-40ec-a049-be8a3ad523b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:de:b9:09:d4:ec:01:df:ca:09:28:36:69: 60:ff:37:66:15:d7:c2:e0:2f:4f:32:aa:3c:d0:e3: 61:d3:41:9e:7c:15:eb:fe:30:26:96:63:74:ab:be: 4d:be:70:e5:17:d0:d8:45:3d:a4:2c:f0:c1:10:2e: 25:82:c8:b3:9f:f3:de:fe:05:2d:96:22:d9:04:f3: e1:e5:00:2d:2a:82:e2:98:4d:cd:f3:20:13:bd:c9: ab:b0:d7:5a:e2:be:62:8e:5f:3c:55:31:1c:3a:f3: 06:d6:9c:38:ff:95:52:ec:9a:e6:9c:0b:91:f0:51: 69:45:b4:41:94:f9:12:a7:93:bf:00:e3:ea:a0:99: 92:77:3d:6b:39:64:ce:8b:c4:52:03:d9:0c:e9:6d: 72:ea:37:b5:11:51:be:2e:75:3e:21:d9:5a:4b:c7: a8:b9:45:f8:e6:95:23:9c:6a:0b:a6:35:b7:07:e0: dc:7b:85:1e:01:1d:c2:8e:4d:bd:33:7f:10:f0:5b: bb:f4:4e:40:42:bc:ea:62:11:6a:a1:85:ab:01:3b: b4:ac:8c:d8:ec:17:0d:af:0d:6c:7d:62:8d:8b:eb: 47:66:ff:93:87:70:47:3c:4f:dc:b0:13:58:2f:cf: 23:d6:7a:46:65:52:cb:fc:35:bc:7e:62:51:c0:47: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3A:16:CF:FD:58:69:92:7B:89:8D:0B:C4:58:C7:F4:7C:B0:4C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/a6a1c456-f3c1-3ef8-a926-e55881541742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl X509v3 Authority Key Identifier: keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer sbgp-ipAddrBlock: critical IPv4: 68.234.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3e:35:00:46:2e:64:fd:14:3e:8d:3c:f5:cf:17:ca:d5:73: 0f:52:2e:83:13:b2:59:80:38:0f:0a:ea:73:d2:82:d6:b3:34: 91:de:29:7f:ed:6e:05:50:0a:59:2e:c8:88:cc:6b:93:42:ed: fd:1e:fb:ed:d4:2e:e8:88:a7:93:2d:35:84:34:f0:18:ea:30: c1:a7:82:13:fa:08:7c:07:8b:06:1d:5d:c7:20:f0:03:93:64: c9:0b:44:79:47:f8:9b:7d:c7:e6:71:a9:92:31:af:e3:2b:9f: 80:ba:14:6e:69:13:57:8d:10:64:20:15:4a:93:e6:8a:b2:a6: 94:96:48:e8:90:7a:c2:76:6b:94:50:b2:0d:32:c1:61:f1:28: af:a0:f1:a3:31:53:52:f8:fa:cc:45:1f:c8:6b:b9:39:23:4a: ee:e9:4e:e7:43:39:df:17:3c:95:eb:c3:de:0f:77:97:73:6e: 68:78:47:47:0c:a8:47:a0:1d:1b:e1:d4:27:90:9d:7e:8c:ba: 45:b3:2c:90:f6:15:9d:04:72:91:fb:d6:2f:2c:71:8a:50:9f: 89:11:ef:ed:f7:27:8f:9f:6e:0e:41:e8:af:44:fe:e7:0e:e7: e7:6a:ba:0d:8e:15:f8:13:8a:f6:ce:2e:5f:b5:21:e3:4e:72: 70:af:f4:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9H81KFCd/o5vJeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRjY2QzYjMtZGRhNS00NTNmLWI1MGQtMGExZTllNGQ0 ZWY0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjNhNzAzOWQtMjAwYS00MGVjLWEwNDktYmU4YTNhZDUyM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdfeuQnU7AHfygkoNmlg/zdmFdfC4C9PMqo8 0ONh00GefBXr/jAmlmN0q75NvnDlF9DYRT2kLPDBEC4lgsizn/Pe/gUtliLZBPPh 5QAtKoLimE3N8yATvcmrsNda4r5ijl88VTEcOvMG1pw4/5VS7JrmnAuR8FFpRbRB lPkSp5O/AOPqoJmSdz1rOWTOi8RSA9kM6W1y6je1EVG+LnU+IdlaS8eouUX45pUj nGoLpjW3B+Dce4UeAR3Cjk29M38Q8Fu79E5AQrzqYhFqoYWrATu0rIzY7BcNrw1s fWKNi+tHZv+Th3BHPE/csBNYL88j1npGZVLL/DW8fmJRwEe9BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY6Fs/9WGmSe4mNC8RYx/R8sExyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGNj ZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFlOWU0ZDRlZjQvYTZhMWM0NTYtZjNjMS0z ZWY4LWE5MjYtZTU1ODgxNTQxNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRjY2QzYjMtZGRhNS00NTNmLWI1 MGQtMGExZTllNGQ0ZWY0L2FkY2NkM2IzLWRkYTUtNDUzZi1iNTBkLTBhMWU5ZTRk NGVmNC5jcmwwHwYDVR0jBBgwFoAUv8KbwFu17C9/2Z0ujo92iFdsHpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZGNjZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFl OWU0ZDRlZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU+NQBGLmT9FD6NPPXPF8rVcw9SLoMTslmAOA8K6nPSgtazNJHeKX/t bgVQClkuyIjMa5NC7f0e++3ULuiIp5MtNYQ08BjqMMGnghP6CHwHiwYdXccg8AOT ZMkLRHlH+Jt9x+ZxqZIxr+Mrn4C6FG5pE1eNEGQgFUqT5oqyppSWSOiQesJ2a5RQ sg0ywWHxKK+g8aMxU1L4+sxFH8hruTkjSu7pTudDOd8XPJXrw94Pd5dzbmh4R0cM qEegHRvh1CeQnX6MukWzLJD2FZ0EcpH71i8scYpQn4kR7+33J4+fbg5B6K9E/ucO 5+dqug2OFfgTivbOLl+1IeNOcnCv9Kc= -----END CERTIFICATE-----Generated at Mon Jun 30 07:19:58 2025 by rpki-client