$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5da361ba-41d6-3cde-9ce6-4c16d4c92e15.roa File: 5da361ba-41d6-3cde-9ce6-4c16d4c92e15.roa (raw, json) Hash identifier: EJJmIFaBxM3SQrg432WgBLEuLIFJAPn5utfLAj5QoPA= Subject key identifier: B9:BB:98:B8:0F:E2:8A:23:90:51:B6:09:45:F6:AD:25:0C:20:49:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C059E34875AD562DE2E7F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5da361ba-41d6-3cde-9ce6-4c16d4c92e15.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33659 IP address blocks: 68.83.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:9e:34:87:5a:d5:62:de:2e:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=a3beb7e0-fd8b-4b4e-97fa-4b1a6d10e5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:1f:fd:ab:89:c7:d3:b9:1a:a5:07:31:53: f2:a1:bf:ef:b8:a0:04:7c:66:0c:20:ea:65:9a:41: 5f:8e:3c:3f:41:bb:87:ff:e0:f9:ad:f5:9e:c9:25: bd:41:bf:c7:78:02:12:7f:3d:2a:40:c5:bc:30:e1: 06:fb:b4:6d:9b:d4:49:c6:d0:d6:0c:50:70:d2:f7: 23:c9:df:41:09:4a:cb:d9:00:ad:52:fa:7f:53:17: b6:08:5c:36:52:f6:a2:cf:62:e5:18:fb:b8:7a:55: e2:91:88:ce:d8:b4:2a:74:a7:70:0c:d5:e5:6c:b5: bc:82:f1:cd:0f:de:c0:08:de:2c:be:d0:07:56:6f: 96:c6:7c:ba:c1:68:b1:fb:ad:e9:83:38:ab:34:23: c9:e1:7d:66:86:6c:3b:8d:9f:c4:80:95:1b:6e:da: 21:90:97:80:06:ad:89:a8:0b:8a:2c:15:e8:bc:f9: 5a:0b:c8:24:b9:fa:e1:fd:35:2d:84:b6:92:cb:7a: 2b:ae:63:f8:3d:03:4b:a9:a5:e0:b6:4b:2f:d0:3d: d7:91:7e:ae:6d:87:5c:9e:07:3b:42:2c:aa:10:af: d4:c3:1a:d0:b3:19:b7:7f:92:31:b9:b5:b7:27:65: e0:07:5e:37:08:5e:ab:af:bd:f8:9a:ce:35:ed:76: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BB:98:B8:0F:E2:8A:23:90:51:B6:09:45:F6:AD:25:0C:20:49:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5da361ba-41d6-3cde-9ce6-4c16d4c92e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:38:30:2d:f3:e3:53:1b:36:55:83:81:87:01:ac:29:fb:21: f8:4f:98:3e:35:89:c0:3d:5d:f1:70:7d:2c:8f:26:03:10:e0: 1f:28:ca:7c:c3:3f:7f:1e:e6:c8:2d:05:e2:5a:aa:61:c5:38: 9a:be:91:d2:8d:bb:aa:af:30:7c:e1:9d:23:3e:f5:b4:71:cd: e9:b2:d8:01:6f:5c:41:ac:a9:43:10:1f:97:a3:bb:e2:9a:a8: b2:c4:b0:98:b2:f9:a8:e4:74:02:29:c9:b8:6b:43:7b:31:e6: 2b:bf:19:c7:cc:10:de:aa:d5:c0:7b:76:51:86:1c:c4:14:7e: a1:25:af:9e:b0:92:65:8e:2b:a3:5a:59:64:46:96:38:22:c5: 4a:3e:b4:ed:dd:93:e0:cf:e3:cc:fd:fb:87:5a:3f:0c:52:9d: ae:a7:db:a6:60:3c:b1:b0:04:07:18:43:96:00:0b:d4:9d:8c: 2d:e5:9f:dc:4d:26:77:48:11:80:69:b9:ea:b6:24:9d:f6:26: c9:b2:3a:6d:db:79:0a:49:41:9f:6d:f1:52:21:87:d3:ef:f4: 31:91:42:57:68:8f:7e:b1:f5:fd:4f:f4:76:9c:e2:7e:a7:45: 43:95:0f:2c:b1:a7:f3:d6:cc:21:97:4f:0f:95:2a:50:08:06: 83:6d:96:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBZ40h1rVYt4uf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YTNiZWI3ZTAtZmQ4Yi00YjRlLTk3ZmEtNGIxYTZkMTBlNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOUf/auJx9O5GqUHMVPyob/vuKAEfGYMIOpl mkFfjjw/QbuH/+D5rfWeySW9Qb/HeAISfz0qQMW8MOEG+7Rtm9RJxtDWDFBw0vcj yd9BCUrL2QCtUvp/Uxe2CFw2Uvaiz2LlGPu4elXikYjO2LQqdKdwDNXlbLW8gvHN D97ACN4svtAHVm+Wxny6wWix+63pgzirNCPJ4X1mhmw7jZ/EgJUbbtohkJeABq2J qAuKLBXovPlaC8gkufrh/TUthLaSy3orrmP4PQNLqaXgtksv0D3XkX6ubYdcngc7 QiyqEK/UwxrQsxm3f5IxubW3J2XgB143CF6rr734ms417XYhEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLm7mLgP4oojkFG2CUX2rSUMIEmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRhMzYxYmEtNDFkNi0z Y2RlLTljZTYtNGMxNmQ0YzkyZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ04MC3z41MbNlWDgYcBrCn7IfhPmD41icA9XfFwfSyPJgMQ4B8oynzD P38e5sgtBeJaqmHFOJq+kdKNu6qvMHzhnSM+9bRxzemy2AFvXEGsqUMQH5eju+Ka qLLEsJiy+ajkdAIpybhrQ3sx5iu/GcfMEN6q1cB7dlGGHMQUfqElr56wkmWOK6Na WWRGljgixUo+tO3dk+DP48z9+4daPwxSna6n26ZgPLGwBAcYQ5YAC9SdjC3ln9xN JndIEYBpueq2JJ32JsmyOm3beQpJQZ9t8VIhh9Pv9DGRQldoj36x9f1P9Hac4n6n RUOVDyyxp/PWzCGXTw+VKlAIBoNtlq0= -----END CERTIFICATE-----Generated at Mon Jun 16 21:34:27 2025 by rpki-client