$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa File: 09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa (raw, json) Hash identifier: ldhLFN7Fq3rkYo6yc1tgdFv8MfnKGn/L3RMJMn77FgY= Subject key identifier: 6B:60:DE:6A:91:32:7D:94:B8:35:BB:C9:5A:A3:D0:9E:7E:90:E1:DC Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584A2ABAE2A3AFD09D1FCA4DBF00 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 394285 IP address blocks: 68.68.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e2:a3:af:d0:9d:1f:ca:4d:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=293dab49-050e-4afa-a09f-d06635e57e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:d7:0c:d4:ed:d2:64:62:f0:93:a6:91:0d: 2f:02:54:25:88:8a:37:03:58:af:e7:72:31:97:9d: df:9d:1f:8f:4d:df:9d:db:57:c5:09:aa:89:02:ab: fc:65:00:d1:f5:ea:f6:99:06:92:87:ab:a1:de:c4: 38:58:65:47:40:2b:6b:1e:07:54:cd:32:d2:46:a7: e1:a1:21:c2:c8:33:b0:e0:c9:68:79:28:86:c2:19: 68:41:65:c6:9c:48:ed:1d:75:6c:31:91:89:81:20: cf:ee:a8:b3:92:99:19:2a:67:26:04:ca:6b:1d:c1: 6a:10:8f:9e:18:65:29:da:92:60:e4:a1:bc:fe:b6: 50:c9:2a:d8:01:e1:50:01:b8:22:70:65:9c:eb:0a: 63:49:97:be:e8:85:d9:11:d2:40:eb:15:c5:96:29: f6:0d:b0:80:b6:e1:4e:de:39:f3:79:eb:b0:a5:97: a4:b3:4c:45:46:83:57:b5:bb:4d:45:80:75:65:17: 2c:77:67:9c:92:6f:cc:f5:a7:5b:57:6c:82:c9:00: 8e:0a:71:e6:79:44:94:32:5c:1d:22:c3:9f:9a:62: d5:9c:3a:24:dd:63:ef:b1:c4:ec:93:53:2d:77:2d: 2a:05:cc:80:40:08:67:e4:5a:10:7d:8e:be:e7:7d: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:60:DE:6A:91:32:7D:94:B8:35:BB:C9:5A:A3:D0:9E:7E:90:E1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:20:b8:b2:e6:37:8b:21:43:74:c0:0a:d8:83:b0:22:cd:c5: 70:a2:b6:9d:26:cd:56:d5:1a:21:6b:d7:53:34:25:cf:1c:7e: ec:b2:f6:67:e7:e2:69:e2:7e:00:d6:dd:90:0f:d2:62:f9:a7: 78:11:bf:54:28:4c:a9:85:50:b7:1f:30:80:b0:46:ec:c6:f0: 86:ff:e4:5d:21:44:5d:ae:c6:44:c8:c9:83:89:26:ba:0d:f9: 52:cf:af:4e:98:ba:f3:7b:43:85:ec:4f:60:51:21:6c:9c:4c: bc:b6:de:45:6e:d5:92:f3:77:6e:b8:97:d9:1c:e4:98:b7:f1: cf:e9:e6:ca:dd:de:62:a6:b4:8f:73:3c:f0:c1:55:da:40:ef: 7d:01:48:e6:14:89:b4:9b:72:22:0c:1b:d0:e3:36:cb:6c:2c: dd:05:94:f2:58:1e:a6:4c:c1:00:9e:c0:0f:07:fc:ad:fc:40: dd:57:25:c7:b8:77:29:22:9a:51:81:e4:a6:22:e5:1d:58:64: 90:2f:c4:54:6c:ff:a2:b5:60:b7:d6:93:f3:13:4f:a6:0c:13: 77:57:b0:ac:46:42:84:b9:ea:44:db:56:bd:db:2c:91:ae:98: e2:cf:c7:bb:00:a4:cf:eb:c4:89:46:61:71:12:87:c1:36:a3: 0d:ae:08:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuKjr9CdH8pNvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MjkzZGFiNDktMDUwZS00YWZhLWEwOWYtZDA2NjM1ZTU3ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ3XDNTt0mRi8JOmkQ0vAlQliIo3A1iv53Ix l53fnR+PTd+d21fFCaqJAqv8ZQDR9er2mQaSh6uh3sQ4WGVHQCtrHgdUzTLSRqfh oSHCyDOw4MloeSiGwhloQWXGnEjtHXVsMZGJgSDP7qizkpkZKmcmBMprHcFqEI+e GGUp2pJg5KG8/rZQySrYAeFQAbgicGWc6wpjSZe+6IXZEdJA6xXFlin2DbCAtuFO 3jnzeeuwpZeks0xFRoNXtbtNRYB1ZRcsd2eckm/M9adbV2yCyQCOCnHmeUSUMlwd IsOfmmLVnDok3WPvscTsk1Mtdy0qBcyAQAhn5FoQfY6+533uJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtg3mqRMn2UuDW7yVqj0J5+kOHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMDlhYWYyY2QtM2E2OS0z MjFmLTlkYTEtZjgzZDcyZDlhNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAguLLmN4shQ3TACtiDsCLNxXCitp0mzVbVGiFr11M0Jc8cfuyy9mfn 4mnifgDW3ZAP0mL5p3gRv1QoTKmFULcfMICwRuzG8Ib/5F0hRF2uxkTIyYOJJroN +VLPr06YuvN7Q4XsT2BRIWycTLy23kVu1ZLzd264l9kc5Ji38c/p5srd3mKmtI9z PPDBVdpA730BSOYUibSbciIMG9DjNstsLN0FlPJYHqZMwQCewA8H/K38QN1XJce4 dykimlGB5KYi5R1YZJAvxFRs/6K1YLfWk/MTT6YME3dXsKxGQoS56kTbVr3bLJGu mOLPx7sApM/rxIlGYXESh8E2ow2uCHw= -----END CERTIFICATE-----Generated at Mon Jun 16 04:30:40 2025 by rpki-client