$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa File: 5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa (raw, json) Hash identifier: 014OnRKNOiNbivKLdmoHJMRzqE9yk/Yig8Rb9PLLQLg= Subject key identifier: 0E:AF:04:D9:57:BC:0D:74:AF:35:8E:38:89:EA:D9:40:83:67:06:9E Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F432858492CAE8A1CE017CB6E84698F80 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 68.71.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8a:1c:e0:17:cb:6e:84:69:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2a29e899-d93c-4bb2-8ef3-dc560b539aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:54:9a:38:80:07:d6:fe:03:1b:4e:78:95: dd:71:fd:4b:33:92:cc:03:3f:67:14:f6:c9:c2:42: 5f:a2:7c:c9:db:41:e2:b7:e2:5a:46:eb:55:c9:9b: 67:85:3d:af:cb:ac:7f:ff:4a:d0:dc:1a:a3:b4:f8: 96:73:0e:f4:aa:0b:c2:db:04:4c:a0:2c:45:72:7d: b5:4a:7b:4b:41:be:cf:a2:fe:37:8e:75:26:30:14: 91:f9:77:09:c8:f0:05:05:45:87:2b:14:52:25:a0: f5:d6:6a:0a:c8:47:73:56:76:74:74:27:66:e4:b7: 59:37:7c:22:d6:b6:29:9f:71:98:b3:41:bf:de:1a: 16:65:fa:f6:7e:6d:da:b9:33:fc:50:2c:b1:a2:a1: 15:e7:35:0d:fd:a0:f8:64:90:d1:a0:a3:11:b6:5b: 86:da:da:52:34:47:04:04:23:96:72:3c:0b:8f:d8: 0a:6b:fc:f5:4c:7c:ce:a6:54:74:5e:8d:a6:aa:56: 65:a7:a8:81:c5:ba:19:05:31:a0:a9:4a:53:8a:fb: 83:c0:fa:1d:d5:8c:6c:09:64:ca:c9:9e:2d:f9:8b: 75:56:49:41:ba:da:b4:7e:9e:da:c4:17:e3:f1:cb: 50:dc:27:09:36:74:e5:87:d7:55:b6:a8:d2:af:ec: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:04:D9:57:BC:0D:74:AF:35:8E:38:89:EA:D9:40:83:67:06:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5e:15:ed:4c:ea:16:a1:3e:8d:f3:d6:64:c4:8c:74:1c:fb: d1:9a:73:93:83:55:b1:e9:e5:e0:c4:99:d9:fc:04:50:a6:17: c7:b6:83:d4:b6:15:fd:af:c8:cd:57:fd:5a:c2:ca:69:50:f8: 52:8e:1d:ba:5e:02:50:53:a8:1f:39:5d:67:d1:1d:b3:57:25: 5b:0e:a1:bc:ac:6b:a0:43:84:2e:c9:d1:f4:e7:3e:d9:4b:7d: 17:44:fa:5f:b3:49:71:b1:8d:7f:ef:d5:bb:c8:de:33:6d:a4: 61:fa:21:fa:80:42:25:8e:6e:97:69:d3:25:b8:b3:cc:7e:ae: 97:aa:5b:d8:ef:49:19:2c:7f:33:83:8c:02:9a:98:08:be:47: 5c:3c:04:63:15:e8:5f:68:45:61:4d:77:74:4b:7d:01:3f:31: 0a:f1:e3:5c:78:44:2f:1b:73:13:f4:c4:4c:7c:c3:26:b4:33: a4:fc:14:e2:fe:fb:bd:01:6e:db:8d:98:1e:9c:05:0f:86:f7: f3:20:40:e2:a9:42:ec:8f:55:7c:eb:3d:3a:1c:5a:d7:c7:03: 81:13:5d:a0:7a:11:95:ec:33:b0:b7:dd:68:4d:24:3c:b9:ce: 2c:c4:5a:01:20:2c:5c:29:13:c3:ed:86:57:1e:5f:a0:eb:12: 6e:89:7b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrooc4BfLboRpj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmEyOWU4OTktZDkzYy00YmIyLThlZjMtZGM1NjBiNTM5YWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZpUmjiAB9b+AxtOeJXdcf1LM5LMAz9nFPbJ wkJfonzJ20Hit+JaRutVyZtnhT2vy6x//0rQ3BqjtPiWcw70qgvC2wRMoCxFcn21 SntLQb7Pov43jnUmMBSR+XcJyPAFBUWHKxRSJaD11moKyEdzVnZ0dCdm5LdZN3wi 1rYpn3GYs0G/3hoWZfr2fm3auTP8UCyxoqEV5zUN/aD4ZJDRoKMRtluG2tpSNEcE BCOWcjwLj9gKa/z1THzOplR0Xo2mqlZlp6iBxboZBTGgqUpTivuDwPod1YxsCWTK yZ4t+Yt1VklButq0fp7axBfj8ctQ3CcJNnTlh9dVtqjSr+xllQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6vBNlXvA10rzWOOInq2UCDZwaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNTIxNGU4MmItZDFlYy0z NmQ2LWI1OGEtMDRkODQ1YWVkOWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJeFe1M6hahPo3z1mTEjHQc+9Gac5ODVbHp5eDEmdn8BFCmF8e2g9S2 Ff2vyM1X/VrCymlQ+FKOHbpeAlBTqB85XWfRHbNXJVsOobysa6BDhC7J0fTnPtlL fRdE+l+zSXGxjX/v1bvI3jNtpGH6IfqAQiWObpdp0yW4s8x+rpeqW9jvSRksfzOD jAKamAi+R1w8BGMV6F9oRWFNd3RLfQE/MQrx41x4RC8bcxP0xEx8wya0M6T8FOL+ +70BbtuNmB6cBQ+G9/MgQOKpQuyPVXzrPTocWtfHA4ETXaB6EZXsM7C33WhNJDy5 zizEWgEgLFwpE8PthlceX6DrEm6Je8I= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:23 2025 by rpki-client