$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa File: 4de974c0-a88b-3292-9f16-0430edcbd00d.roa (raw, json) Hash identifier: jA8uzzY60P+ka4FLOe4NFPEuy/IjRSl8qqdYsFkLC54= Subject key identifier: 46:5C:74:F6:8D:56:39:5B:02:2C:2E:7B:03:97:9D:61:E6:CF:4D:BB Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584A0C055F806175D92A7196B480 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 68.71.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5f:80:61:75:d9:2a:71:96:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=30a2d2f8-3bdd-4a12-aac5-d4237f954ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:02:a3:75:7b:9c:b7:09:de:51:2c:47:07: 26:8f:a5:53:ac:82:25:4d:b9:20:d0:f3:08:65:d9: f1:2a:8b:44:4b:e7:1d:59:03:16:f4:01:0e:34:79: 08:ef:f4:b9:bd:b0:a7:92:7a:56:cc:cf:b5:d8:f4: 65:42:38:9d:ec:b8:3d:8b:ac:2e:31:42:45:fa:30: e1:b2:2d:bd:d1:df:2e:c3:c6:c8:aa:2a:68:3b:75: cd:4e:4b:a6:9a:2c:2c:ec:b6:d9:88:95:4f:52:54: 4a:f9:c2:55:91:c3:3e:e7:82:12:74:a6:6d:56:fa: 9c:56:f2:49:32:89:89:68:73:de:6f:36:b6:00:49: 01:55:69:ca:28:5e:bc:68:61:1e:2f:5a:76:f8:f8: f1:2b:e0:85:d1:6d:53:ea:94:32:6a:d5:48:e8:95: 4c:7e:0f:11:a6:75:fb:a4:df:4e:95:8e:c1:01:3f: 1d:46:0f:52:6f:c4:3d:8d:6c:72:58:c7:ba:e0:60: d5:b0:4d:e9:a9:6e:34:d7:08:3d:0c:11:51:d0:12: d5:dd:1f:39:ca:c0:ac:05:91:4b:67:6c:a1:03:12: 63:eb:c3:32:68:0c:9a:12:cf:77:b9:d2:76:13:dd: f5:5a:67:00:7e:8f:29:87:53:22:ca:8d:be:16:7e: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:74:F6:8D:56:39:5B:02:2C:2E:7B:03:97:9D:61:E6:CF:4D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:99:51:30:b0:fe:c4:9f:48:b7:aa:38:94:a8:1c:95:ee:20: ce:bd:d2:a5:dd:40:94:19:9e:d1:31:7b:47:75:1f:52:a9:d9: c0:92:20:be:41:49:d2:99:f0:e9:c9:58:db:fe:82:89:a3:d1: e8:18:e9:dc:11:d3:ca:69:24:88:1f:2e:45:b3:f9:d1:3d:44: f9:0b:c5:b8:ed:a0:9a:59:85:a6:eb:be:0a:93:f9:96:c0:61: b9:8c:9f:cd:6e:b6:bb:6f:05:dc:19:28:c0:1d:52:5c:e0:16: 75:f8:ae:54:87:93:2d:4c:ef:4e:9c:13:24:d3:8c:ef:49:b9: 95:ba:a0:ee:5b:ac:4c:df:9b:d5:82:e4:fd:db:1a:b8:21:ce: 07:7d:02:20:60:9c:88:37:47:3c:96:00:10:68:c8:a9:e7:be: fe:67:1d:9a:3a:f9:20:25:a2:ed:75:57:f9:8e:9f:68:d2:fe: 2e:3c:52:60:6b:97:94:a9:a1:89:18:33:d3:8d:6e:78:03:a9: 84:35:ea:00:09:bc:b0:60:6e:a1:22:31:ef:7a:b4:fa:19:2f: b7:21:84:02:e3:f3:11:60:14:b9:db:01:c8:30:94:95:84:fb: b9:f3:d1:c6:72:45:26:af:e6:90:02:2f:17:fe:08:14:c9:ae: 47:5d:03:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBV+AYXXZKnGWtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MzBhMmQyZjgtM2JkZC00YTEyLWFhYzUtZDQyMzdmOTU0ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl0Co3V7nLcJ3lEsRwcmj6VTrIIlTbkg0PMI ZdnxKotES+cdWQMW9AEONHkI7/S5vbCnknpWzM+12PRlQjid7Lg9i6wuMUJF+jDh si290d8uw8bIqipoO3XNTkummiws7LbZiJVPUlRK+cJVkcM+54ISdKZtVvqcVvJJ MomJaHPebza2AEkBVWnKKF68aGEeL1p2+PjxK+CF0W1T6pQyatVI6JVMfg8RpnX7 pN9OlY7BAT8dRg9Sb8Q9jWxyWMe64GDVsE3pqW401wg9DBFR0BLV3R85ysCsBZFL Z2yhAxJj68MyaAyaEs93udJ2E931WmcAfo8ph1Miyo2+Fn7OowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZcdPaNVjlbAiwuewOXnWHmz027MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNGRlOTc0YzAtYTg4Yi0z MjkyLTlmMTYtMDQzMGVkY2JkMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGZUTCw/sSfSLeqOJSoHJXuIM690qXdQJQZntExe0d1H1Kp2cCSIL5B SdKZ8OnJWNv+gomj0egY6dwR08ppJIgfLkWz+dE9RPkLxbjtoJpZhabrvgqT+ZbA YbmMn81utrtvBdwZKMAdUlzgFnX4rlSHky1M706cEyTTjO9JuZW6oO5brEzfm9WC 5P3bGrghzgd9AiBgnIg3RzyWABBoyKnnvv5nHZo6+SAlou11V/mOn2jS/i48UmBr l5SpoYkYM9ONbngDqYQ16gAJvLBgbqEiMe96tPoZL7chhALj8xFgFLnbAcgwlJWE +7nz0cZyRSav5pACLxf+CBTJrkddA4w= -----END CERTIFICATE-----Generated at Sun Jun 15 09:05:33 2025 by rpki-client