$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa File: 4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa (raw, json) Hash identifier: 8kSebTnpl09NcbpyD6nukx+feRyTnVT5t8r0eh4Mq0A= Subject key identifier: 2A:67:20:7A:64:83:13:A9:66:43:56:39:34:03:4F:7B:E2:66:7E:35 Certificate issuer: /CN=515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d Certificate serial: 010D0C9F43285849F87A93F73674CACB55311AC0 Authority key identifier: 54:05:9B:E9:C5:4F:4D:A3:1C:AD:F9:79:AB:E7:ED:6E:63:A9:C6:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 399445 IP address blocks: 68.69.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:93:f7:36:74:ca:cb:55:31:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=476af6ab-1bcc-4732-a80a-64f06c028700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:d0:00:64:de:51:ea:5c:ac:7a:f9:12:00: 2f:89:80:22:14:17:9c:f6:5b:de:8a:02:06:92:a4: 2b:8b:7b:d3:e0:49:58:7b:0c:90:b5:c4:19:12:63: 39:4a:85:af:2f:a8:83:44:a6:0e:0b:ee:8e:36:3f: 75:72:6d:e6:f0:3f:0c:a1:ff:01:2c:08:13:86:96: 63:87:fe:85:53:7d:a6:cc:65:fc:00:15:ec:34:ff: 34:41:c2:c0:20:39:c9:89:62:01:80:0e:8e:95:5b: 68:43:c9:d8:4b:b6:94:56:4d:cf:dd:19:77:39:79: fc:2c:6e:d5:4e:bb:b0:6c:ef:3d:64:2b:c2:06:d5: 74:93:b2:6b:0c:b8:ca:77:54:d7:dd:de:af:9d:02: cd:f9:2c:34:70:8e:03:55:37:5a:db:67:7d:95:39: d8:c5:a3:4d:fe:51:aa:d0:2b:1f:1b:f0:ab:d2:8e: cd:3b:37:e2:49:34:57:2f:59:36:5f:b5:be:55:c5: 57:c6:57:fd:79:b1:53:2b:8a:4c:fe:ac:31:90:50: e6:59:dd:ea:2a:0d:fd:b6:d4:cf:54:69:f7:3f:c7: 28:df:98:18:24:84:43:ed:e6:5f:c5:82:a9:4c:ee: 8e:b9:42:8c:f2:f2:01:79:86:3d:3d:6e:92:f2:1f: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:20:7A:64:83:13:A9:66:43:56:39:34:03:4F:7B:E2:66:7E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.crl X509v3 Authority Key Identifier: keyid:54:05:9B:E9:C5:4F:4D:A3:1C:AD:F9:79:AB:E7:ED:6E:63:A9:C6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:df:4b:6a:bd:b8:d3:e0:6e:a8:a7:94:08:6b:b6:ec:9a:69: 29:cc:c9:87:26:98:ea:a3:a9:e7:db:01:60:87:a6:99:13:7c: 22:9a:86:3e:15:02:e2:cc:a5:e4:38:9d:1c:ae:c5:4d:cc:6c: 37:58:29:c0:6b:52:5f:0a:51:e3:b6:08:86:d2:b1:54:a7:cf: 38:48:7a:fe:e1:b0:9c:e4:7a:a6:d3:4d:fc:4b:26:31:37:a0: c4:e5:e6:ce:fd:16:c6:1d:51:fb:43:63:4a:8f:f3:4b:46:0d: b9:f5:61:06:2e:35:23:ed:ab:7a:f9:00:23:79:11:47:8f:db: e4:f7:db:40:0c:1a:a7:6a:9e:af:03:a2:bf:fa:c8:46:0c:a3: 51:4f:07:72:a0:3e:be:23:65:06:98:08:f8:20:50:b9:60:c0: e0:bd:37:ee:2d:9e:43:14:f0:09:94:cc:10:9e:fd:51:58:27: 57:c8:15:0c:cc:2c:4a:0a:32:c0:35:02:f7:9e:4c:fd:2a:66: bd:3c:a3:45:c3:bb:ab:08:10:a2:a5:b7:60:cc:e1:c8:c0:fe: ff:5b:d8:5b:3c:c3:71:fa:13:b5:35:68:12:32:d0:95:cf:07: 8f:02:b2:18:6d:69:ea:3c:95:2f:41:5e:07:4c:49:64:ac:be: 64:45:51:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4epP3NnTKy1UxGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE1Y2QzY2YtNGM0Ny00MTJlLThjM2QtYzliYTRmYTBm YjZkMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NDc2YWY2YWItMWJjYy00NzMyLWE4MGEtNjRmMDZjMDI4NzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt7QAGTeUepcrHr5EgAviYAiFBec9lveigIG kqQri3vT4ElYewyQtcQZEmM5SoWvL6iDRKYOC+6ONj91cm3m8D8Mof8BLAgThpZj h/6FU32mzGX8ABXsNP80QcLAIDnJiWIBgA6OlVtoQ8nYS7aUVk3P3Rl3OXn8LG7V TruwbO89ZCvCBtV0k7JrDLjKd1TX3d6vnQLN+Sw0cI4DVTda22d9lTnYxaNN/lGq 0CsfG/Cr0o7NOzfiSTRXL1k2X7W+VcVXxlf9ebFTK4pM/qwxkFDmWd3qKg39ttTP VGn3P8co35gYJIRD7eZfxYKpTO6OuUKM8vIBeYY9PW6S8h/X8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpnIHpkgxOpZkNWOTQDT3viZn41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MTVj ZDNjZi00YzQ3LTQxMmUtOGMzZC1jOWJhNGZhMGZiNmQvNGUzOGM4YzUtNjJiNi0z MWFkLTg2MGEtNzJkNGE2Y2YwY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTE1Y2QzY2YtNGM0Ny00MTJlLThj M2QtYzliYTRmYTBmYjZkLzUxNWNkM2NmLTRjNDctNDEyZS04YzNkLWM5YmE0ZmEw ZmI2ZC5jcmwwHwYDVR0jBBgwFoAUVAWb6cVPTaMcrfl5q+ftbmOpxlQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MTVjZDNjZi00YzQ3LTQxMmUtOGMzZC1jOWJh NGZhMGZiNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPfS2q9uNPgbqinlAhrtuyaaSnMyYcmmOqjqefbAWCHppkTfCKahj4V AuLMpeQ4nRyuxU3MbDdYKcBrUl8KUeO2CIbSsVSnzzhIev7hsJzkeqbTTfxLJjE3 oMTl5s79FsYdUftDY0qP80tGDbn1YQYuNSPtq3r5ACN5EUeP2+T320AMGqdqnq8D or/6yEYMo1FPB3KgPr4jZQaYCPggULlgwOC9N+4tnkMU8AmUzBCe/VFYJ1fIFQzM LEoKMsA1AveeTP0qZr08o0XDu6sIEKKlt2DM4cjA/v9b2Fs8w3H6E7U1aBIy0JXP B48Cshhtaeo8lS9BXgdMSWSsvmRFUTs= -----END CERTIFICATE-----Generated at Sun Jun 15 16:06:55 2025 by rpki-client