$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa File: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json) Hash identifier: z5VSruEky2CP4pU2vebTjGdp6pnXGftstr7J+1deTGA= Subject key identifier: 2B:7D:DC:B2:FA:C2:02:D6:89:B0:48:81:BF:8B:50:9E:24:EE:9B:63 Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F43285849C4D4C3DF9014EE9795812800 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 397293 IP address blocks: 68.69.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c3:df:90:14:ee:97:95:81:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=ff03b713-3a7c-48cf-bc20-c18ccc08207e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:98:34:84:79:2e:6b:94:63:17:ad:8a:69: 58:d5:a8:0b:48:c0:52:54:30:c2:41:58:07:0b:a1: 58:1f:73:b7:0d:d3:1f:3e:f2:cc:ec:17:cf:07:12: 66:be:ff:e1:50:e5:cb:97:ca:cf:7d:0a:8c:f0:d4: 50:e3:87:57:5c:9f:24:49:c1:ad:be:2f:66:e0:d5: 62:9d:6b:b3:10:23:2a:7a:6c:ea:2a:03:74:d8:d3: 71:92:39:65:30:a9:26:16:be:30:35:7b:f6:69:d5: 7b:c9:8b:9e:fd:b3:c0:da:d5:f4:5f:3a:ea:44:4a: 39:74:50:ef:b2:fd:c9:1f:51:3f:70:59:b9:d9:61: 05:f8:c6:2e:d0:7a:6a:cc:fc:91:86:88:06:09:dd: 2e:38:bb:73:80:f9:52:eb:ff:7f:aa:5c:04:43:aa: 08:d9:75:b8:43:35:c8:fa:8b:34:f2:d9:0e:9f:56: a6:92:03:8a:0a:ad:50:77:66:2f:82:c1:e7:8b:aa: 0d:ed:ba:21:a3:ba:71:bb:79:85:41:a1:f5:16:a2: 5e:d3:65:b8:e4:a1:a5:99:1f:8f:af:f3:a4:4d:36: be:4f:e7:2a:7d:fd:07:ba:aa:e5:dd:5b:54:a4:22: b5:ea:13:e2:8a:3e:4c:74:0a:6a:93:7d:8d:94:89: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7D:DC:B2:FA:C2:02:D6:89:B0:48:81:BF:8B:50:9E:24:EE:9B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:eb:d3:ba:50:36:4a:ee:84:98:11:4f:32:47:22:40:03:fe: 59:6e:c7:c3:7d:e4:69:a1:fc:78:b7:40:45:36:64:8f:52:6f: da:09:99:2b:18:6e:3a:ed:d0:70:a7:e5:7b:94:bf:cd:13:43: 83:7f:69:0e:a1:1f:03:f0:c1:87:40:fd:c8:d6:9a:4b:9d:2b: c8:92:67:85:8f:f2:b1:5a:ef:f5:92:8e:30:4d:b0:e4:d1:3f: 33:2f:ef:16:cf:01:10:25:b8:0a:a8:56:f7:d2:1b:e2:dc:2c: 53:01:58:ac:51:e2:8c:03:42:8b:62:e7:8e:98:ff:72:93:d1: 92:9c:bc:20:54:73:c1:06:81:26:2c:1b:8d:f0:b4:13:d1:40: 89:bc:ca:95:72:51:17:76:a2:fc:8c:98:3f:01:f5:b4:4f:02: ca:53:8f:c4:92:fa:b9:f6:c9:aa:20:6a:53:e1:4f:6f:02:d9: 8d:2c:c0:b8:e9:49:c8:1b:bb:00:45:63:74:de:a5:39:bc:d7: 68:2f:8a:17:bf:19:e5:0b:c3:f6:a5:22:e3:0f:54:d8:f8:4a: 08:b0:68:e8:9a:3f:3d:b5:87:a1:e5:69:d9:af:25:38:55:63: 91:75:9e:ae:1b:16:91:3c:31:4f:d9:2b:5f:55:f8:c6:79:d9: 34:61:94:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MPfkBTul5WBKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZmYwM2I3MTMtM2E3Yy00OGNmLWJjMjAtYzE4Y2NjMDgyMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRmYNIR5LmuUYxetimlY1agLSMBSVDDCQVgH C6FYH3O3DdMfPvLM7BfPBxJmvv/hUOXLl8rPfQqM8NRQ44dXXJ8kScGtvi9m4NVi nWuzECMqemzqKgN02NNxkjllMKkmFr4wNXv2adV7yYue/bPA2tX0XzrqREo5dFDv sv3JH1E/cFm52WEF+MYu0HpqzPyRhogGCd0uOLtzgPlS6/9/qlwEQ6oI2XW4QzXI +os08tkOn1amkgOKCq1Qd2YvgsHni6oN7boho7pxu3mFQaH1FqJe02W45KGlmR+P r/OkTTa+T+cqff0Huqrl3VtUpCK16hPiij5MdApqk32NlImNQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt93LL6wgLWibBIgb+LUJ4k7ptjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/r07pQNkruhJgRTzJHIkAD/llux8N95Gmh/Hi3QEU2ZI9Sb9oJmSsY bjrt0HCn5XuUv80TQ4N/aQ6hHwPwwYdA/cjWmkudK8iSZ4WP8rFa7/WSjjBNsOTR PzMv7xbPARAluAqoVvfSG+LcLFMBWKxR4owDQoti546Y/3KT0ZKcvCBUc8EGgSYs G43wtBPRQIm8ypVyURd2ovyMmD8B9bRPAspTj8SS+rn2yaogalPhT28C2Y0swLjp ScgbuwBFY3TepTm812gvihe/GeULw/alIuMPVNj4SgiwaOiaPz21h6HladmvJThV Y5F1nq4bFpE8MU/ZK19V+MZ52TRhlOA= -----END CERTIFICATE-----Generated at Mon Jun 16 09:27:29 2025 by rpki-client