$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa File: e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa (raw, json) Hash identifier: LbxzGKMPrzlgPRNPTPycL5PQwTkmiIXvR8upZ/qIeQA= Subject key identifier: 66:A1:8D:2B:D9:BE:22:5C:BA:58:99:6C:C5:B2:AA:67:5D:38:A7:00 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584A1730002E56457BEE7468D280 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 13213 IP address blocks: 68.169.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:00:2e:56:45:7b:ee:74:68:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=07be039e-e929-48f1-a771-b831c09b1632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:20:90:ad:b3:b7:d8:0e:c0:09:7a:a7:91: 07:db:5f:bf:a7:04:53:78:31:70:4c:bd:24:7e:08: 16:de:47:45:ac:44:60:f5:ec:4f:27:3d:3e:ab:e6: f2:bb:79:d3:67:0b:63:14:c2:d2:eb:9d:49:30:6c: be:70:6a:02:4b:88:3f:85:8e:7c:e6:26:0b:07:f9: 5c:0d:81:5b:c3:af:c8:ad:a3:e9:7f:ad:79:22:ef: 2c:c8:ed:aa:a8:12:03:a1:56:78:91:7f:83:fa:61: b2:bb:5e:1a:b1:da:bc:32:d1:cc:a5:e2:53:82:2d: cb:5c:f3:a2:de:c4:94:1f:53:83:fe:49:6f:a4:ee: a6:d5:61:80:ff:07:2e:74:c2:be:c6:43:31:80:fa: 4e:dd:d5:dc:0f:12:ef:13:2c:f8:cd:68:c4:b3:68: 86:21:bd:ac:27:de:d5:df:07:0d:84:28:5d:b2:2c: 6b:0b:1b:c3:94:34:fc:b8:c1:54:d1:bf:c1:37:ee: 9d:c9:f4:16:01:ea:48:15:4d:56:35:ad:64:73:ea: 20:d1:10:e4:07:c9:16:b0:f0:54:09:4b:07:c9:c8: 05:10:e4:76:1a:54:a6:da:cd:f0:31:e9:3f:eb:2b: e3:15:06:a7:61:00:c3:80:ca:04:8d:51:16:89:af: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A1:8D:2B:D9:BE:22:5C:BA:58:99:6C:C5:B2:AA:67:5D:38:A7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 68.169.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:66:13:33:9e:86:09:23:06:55:08:6d:d6:29:a9:9e:8e:2e: 04:7f:f9:61:5f:80:a0:3f:c2:74:32:18:4e:c1:fa:d8:56:19: 7f:6e:7f:b3:e5:b5:1e:c4:1a:fd:b9:4b:49:f8:09:34:09:98: 8d:09:a0:08:fe:6a:38:97:63:33:d1:09:bc:b4:84:5a:92:7b: 73:de:17:6d:c8:64:67:b5:23:94:81:96:75:68:6c:f9:e5:51: fa:d0:1d:92:4d:97:5e:0f:38:36:31:4e:b3:72:0c:a2:a0:38: 66:a8:33:1e:a2:fe:95:7e:d6:a9:70:17:62:49:f6:7b:e0:ea: 12:07:ac:8c:45:8c:01:4a:cf:87:ff:cf:eb:a0:16:48:86:7d: c6:f8:b3:52:a0:80:a4:c5:fe:cb:e3:0b:61:a1:e9:4d:2d:e3: c1:76:f3:26:0b:6a:c7:95:49:1e:03:0b:40:e8:58:77:0b:ca: 73:2d:d1:11:f8:b5:da:a6:1e:7b:62:37:3e:ab:78:b4:48:0c: 26:b5:03:16:a2:64:a8:79:38:a2:22:6c:99:a3:fc:26:fc:c5: 72:fe:fb:f6:be:e9:a7:a6:a6:0e:97:31:32:d3:a4:61:44:ba: 0f:62:90:0b:5b:15:89:fb:ed:55:ef:ab:46:04:f5:5f:d3:f2: 87:09:69:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAAuVkV77nRo0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk MDdiZTAzOWUtZTkyOS00OGYxLWE3NzEtYjgzMWMwOWIxNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWcgkK2zt9gOwAl6p5EH21+/pwRTeDFwTL0k fggW3kdFrERg9exPJz0+q+byu3nTZwtjFMLS651JMGy+cGoCS4g/hY585iYLB/lc DYFbw6/IraPpf615Iu8syO2qqBIDoVZ4kX+D+mGyu14asdq8MtHMpeJTgi3LXPOi 3sSUH1OD/klvpO6m1WGA/wcudMK+xkMxgPpO3dXcDxLvEyz4zWjEs2iGIb2sJ97V 3wcNhChdsixrCxvDlDT8uMFU0b/BN+6dyfQWAepIFU1WNa1kc+og0RDkB8kWsPBU CUsHycgFEOR2GlSm2s3wMek/6yvjFQanYQDDgMoEjVEWia9RmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGahjSvZviJculiZbMWyqmddOKcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZTNkOWVkOWQtMmQ5Ny0z N2Q3LWIwYzItYWY4ODM0MjFhZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhmEzOehgkjBlUIbdYpqZ6OLgR/+WFfgKA/wnQyGE7B+thWGX9uf7Pl tR7EGv25S0n4CTQJmI0JoAj+ajiXYzPRCby0hFqSe3PeF23IZGe1I5SBlnVobPnl UfrQHZJNl14PODYxTrNyDKKgOGaoMx6i/pV+1qlwF2JJ9nvg6hIHrIxFjAFKz4f/ z+ugFkiGfcb4s1KggKTF/svjC2Gh6U0t48F28yYLaseVSR4DC0DoWHcLynMt0RH4 tdqmHntiNz6reLRIDCa1AxaiZKh5OKIibJmj/Cb8xXL++/a+6aempg6XMTLTpGFE ug9ikAtbFYn77VXvq0YE9V/T8ocJaSE= -----END CERTIFICATE-----Generated at Sun Jun 15 12:04:18 2025 by rpki-client