$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa File: 479384b1-d41c-3e4d-83f2-176a5be6410a.roa (raw, json) Hash identifier: q0QZOR1+pqE/aj6DjDHOE5KnkY/evxSy0+d+QcwKPd4= Subject key identifier: 89:DB:BD:7C:22:C8:23:79:72:9D:CC:4C:B0:44:9F:A1:FE:01:C0:CB Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584A0C055F50A1E21C1293020340 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 8987 IP address blocks: 68.71.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5f:50:a1:e2:1c:12:93:02:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3b5696ed-4b40-4a39-ae98-c622ea867e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:a0:2d:e4:e1:40:e0:38:a5:0b:b8:c9:7c: a5:37:bf:33:d7:87:46:8d:95:3b:c6:57:6e:19:b0: 5c:0e:e6:aa:0f:21:9d:89:0b:62:ca:89:ef:81:4e: 82:3b:2e:94:51:7b:42:88:53:db:8a:fe:97:f3:9b: 40:9c:76:0a:92:f7:ff:28:3c:64:26:1a:8b:34:36: 0e:36:a6:be:9b:91:61:0b:96:38:50:79:78:cc:55: a2:d4:cf:64:0d:f1:e1:2d:d0:a5:9a:18:42:aa:34: fe:2e:20:ce:9c:09:a3:8f:93:eb:ab:9d:e7:31:dd: 4a:d5:f8:b1:3f:5b:bd:73:f1:eb:2b:01:56:32:c0: b1:43:a0:df:ec:b5:54:f5:02:cd:d2:e9:e2:6e:2e: 51:3b:63:80:6d:63:97:a2:db:32:ad:9a:87:87:94: 2e:ea:70:1c:13:35:40:8a:b4:1c:51:ae:5f:29:de: a5:05:bb:6f:e6:58:53:5a:15:c7:70:da:a8:f9:9d: 5d:19:ae:f1:8f:93:79:28:a9:c2:ee:89:d8:10:bc: 32:c1:a8:9f:82:da:63:d2:36:23:2f:10:5d:b3:c2: c3:10:43:d9:22:f6:ae:40:68:00:e6:b8:db:08:6b: 24:12:6e:3b:a9:d8:71:07:c1:ae:fa:8e:fb:f7:17: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DB:BD:7C:22:C8:23:79:72:9D:CC:4C:B0:44:9F:A1:FE:01:C0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:8f:20:fc:f0:9c:2a:28:5e:49:a0:7f:6f:c1:2a:d3:19:58: d2:fd:52:b4:a0:36:d6:86:7d:af:c2:c8:51:1d:21:13:c7:d7: 9c:b3:be:80:bc:1a:ae:11:2a:df:5a:48:b3:76:46:4c:c6:08: b5:4c:5d:33:02:cc:4b:76:91:8c:40:0e:4d:9b:79:40:e0:f3: 73:9e:91:32:22:2d:a8:c8:dd:be:07:5d:87:62:c7:d9:88:f3: 84:7b:f1:a7:7f:ce:a9:98:04:c1:18:34:7b:5d:4e:a0:4a:30: 74:70:5c:84:94:fe:f3:ae:49:80:c3:16:4b:fd:c1:ca:59:3d: e7:75:df:ba:4a:b8:97:42:02:5c:c7:51:8a:4d:58:81:3e:01: a9:bc:50:8c:48:5c:67:ad:6a:1f:ab:55:d4:42:25:c5:12:93: 85:2a:d5:68:17:6c:d8:25:eb:c0:6d:9f:2a:ed:01:fc:b1:e4: 1c:4a:a3:a3:2c:6d:a8:02:a2:4d:47:ec:04:3e:a5:df:21:38: 76:ad:be:fb:cd:96:43:a3:be:d3:7b:f1:fc:88:cf:88:2a:6a: 66:22:a1:94:53:3c:43:eb:dd:d1:6d:e9:14:38:46:83:fc:3d: d3:80:89:43:4e:af:89:67:1d:67:d1:c0:89:a7:17:b8:f3:e2: bc:00:12:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBV9QoeIcEpMCA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk M2I1Njk2ZWQtNGI0MC00YTM5LWFlOTgtYzYyMmVhODY3ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvugLeThQOA4pQu4yXylN78z14dGjZU7xldu GbBcDuaqDyGdiQtiyonvgU6COy6UUXtCiFPbiv6X85tAnHYKkvf/KDxkJhqLNDYO Nqa+m5FhC5Y4UHl4zFWi1M9kDfHhLdClmhhCqjT+LiDOnAmjj5Prq53nMd1K1fix P1u9c/HrKwFWMsCxQ6Df7LVU9QLN0unibi5RO2OAbWOXotsyrZqHh5Qu6nAcEzVA irQcUa5fKd6lBbtv5lhTWhXHcNqo+Z1dGa7xj5N5KKnC7onYELwywaifgtpj0jYj LxBds8LDEEPZIvauQGgA5rjbCGskEm47qdhxB8Gu+o779xdC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInbvXwiyCN5cp3MTLBEn6H+AcDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNDc5Mzg0YjEtZDQxYy0z ZTRkLTgzZjItMTc2YTViZTY0MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+PIPzwnCooXkmgf2/BKtMZWNL9UrSgNtaGfa/CyFEdIRPH15yzvoC8 Gq4RKt9aSLN2RkzGCLVMXTMCzEt2kYxADk2beUDg83OekTIiLajI3b4HXYdix9mI 84R78ad/zqmYBMEYNHtdTqBKMHRwXISU/vOuSYDDFkv9wcpZPed137pKuJdCAlzH UYpNWIE+Aam8UIxIXGetah+rVdRCJcUSk4Uq1WgXbNgl68BtnyrtAfyx5BxKo6Ms bagCok1H7AQ+pd8hOHatvvvNlkOjvtN78fyIz4gqamYioZRTPEPr3dFt6RQ4RoP8 PdOAiUNOr4lnHWfRwImnF7jz4rwAEvg= -----END CERTIFICATE-----Generated at Sun Jun 15 06:26:48 2025 by rpki-client