$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0679d9f3-f960-3559-b5a8-1cdf9161c8a6.roa File: 0679d9f3-f960-3559-b5a8-1cdf9161c8a6.roa (raw, json) Hash identifier: u1ZAbS7DCWj1opQfREjwQ001AeDBBbRWY8mI2psoJoU= Subject key identifier: E4:32:59:40:A7:34:82:EA:96:23:72:8C:FF:78:F5:46:AF:D8:FD:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEFD914CD9F605D2F13A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0679d9f3-f960-3559-b5a8-1cdf9161c8a6.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 68.82.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:fd:91:4c:d9:f6:05:d2:f1:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bb9d603e-8ead-414c-9b3e-0e5862e0f5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:ee:f7:ab:7d:6a:df:b1:87:d4:03:59:78: d2:4d:9f:ab:b1:14:42:73:80:4a:bf:1b:e1:26:8b: 8b:e1:de:4a:14:9d:50:9f:2e:9f:d1:bc:bb:59:7e: 4c:bb:c6:06:ed:45:52:e9:7c:14:b0:75:aa:86:3c: 1e:f1:3a:ce:76:31:1a:3e:98:4b:a3:86:a1:ee:d0: 66:69:f3:08:28:c4:0d:3a:5c:27:57:5e:d3:19:67: a4:ec:54:8f:a4:5a:d1:17:06:ee:69:cd:85:55:fa: 74:5c:cb:8b:94:d1:b2:90:12:ef:ca:26:b4:2e:24: 10:4e:d6:a4:b0:9e:cc:0d:7b:8c:df:d1:3f:93:be: 91:1c:b0:05:dc:7a:43:5c:0d:7a:dd:1a:1d:d6:34: 5f:ae:d7:dd:cc:8a:cf:4f:9c:8a:7a:0e:dd:b2:3d: 14:51:1b:59:13:bc:d4:ff:ec:03:75:0b:39:aa:ef: 8d:a7:42:7a:ce:ea:38:5a:e1:de:e4:ba:a1:a3:8e: ca:ce:e6:4b:61:8c:fb:e2:f0:d6:a5:cd:02:4f:c8: 58:fc:0b:24:80:9d:c2:0a:46:54:1d:33:bc:fb:91: c8:56:8f:23:5b:01:0f:ed:19:dd:60:1c:15:60:c9: 36:58:3d:07:f3:32:42:45:b8:f3:47:15:38:d6:62: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:32:59:40:A7:34:82:EA:96:23:72:8C:FF:78:F5:46:AF:D8:FD:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0679d9f3-f960-3559-b5a8-1cdf9161c8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.82.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:89:ec:ac:fe:b9:c8:b6:c4:ff:46:bb:60:06:3d:aa:16:90: c3:59:d3:66:07:6b:db:dd:b7:3f:cd:5e:a0:8d:bc:49:50:28: b6:c6:04:59:11:92:a0:7e:fb:11:74:2e:0c:c7:94:95:b3:ad: 53:15:3e:87:f0:7b:f5:48:90:7e:6f:7c:f7:04:ff:19:95:d0: fe:3b:0e:06:7f:e9:cd:df:7f:48:a2:05:92:47:44:88:5a:b8: 10:a5:f9:d6:d5:c6:56:a4:32:27:e2:b0:61:e8:6e:27:4b:1c: b2:79:65:02:36:f0:c4:87:6d:8a:0c:bb:66:a6:14:9c:b1:bc: 02:80:97:55:a7:2f:77:cf:0a:d0:d3:15:51:f8:89:aa:28:13: d2:93:24:c2:01:8c:78:d3:7e:06:70:f3:63:b8:51:67:5a:b4: ff:10:7f:69:69:88:fb:58:da:a3:27:a7:78:31:39:b8:a2:00: 11:f9:87:27:9d:28:e3:20:23:cc:47:3a:e9:7c:a7:12:6c:85: 19:f2:cd:b0:23:63:ed:1f:93:51:c3:28:84:1c:1d:f1:b0:a1: ce:35:8a:28:d8:6c:b8:27:65:8e:d0:ad:89:82:37:3a:5d:8c: 0a:9d:ba:6e:59:1f:d0:b7:76:9a:f4:69:da:68:e7:65:35:36: ff:c7:2b:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrv2RTNn2BdLxOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmI5ZDYwM2UtOGVhZC00MTRjLTliM2UtMGU1ODYyZTBmNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA107u96t9at+xh9QDWXjSTZ+rsRRCc4BKvxvh JouL4d5KFJ1Qny6f0by7WX5Mu8YG7UVS6XwUsHWqhjwe8TrOdjEaPphLo4ah7tBm afMIKMQNOlwnV17TGWek7FSPpFrRFwbuac2FVfp0XMuLlNGykBLvyia0LiQQTtak sJ7MDXuM39E/k76RHLAF3HpDXA163Rod1jRfrtfdzIrPT5yKeg7dsj0UURtZE7zU /+wDdQs5qu+Np0J6zuo4WuHe5Lqho47KzuZLYYz74vDWpc0CT8hY/AskgJ3CCkZU HTO8+5HIVo8jWwEP7RndYBwVYMk2WD0H8zJCRbjzRxU41mK9LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQyWUCnNILqliNyjP949Uav2P1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY3OWQ5ZjMtZjk2MC0z NTU5LWI1YTgtMWNkZjkxNjFjOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2J7Kz+uci2xP9Gu2AGPaoWkMNZ02YHa9vdtz/NXqCNvElQKLbGBFkR kqB++xF0LgzHlJWzrVMVPofwe/VIkH5vfPcE/xmV0P47DgZ/6c3ff0iiBZJHRIha uBCl+dbVxlakMifisGHobidLHLJ5ZQI28MSHbYoMu2amFJyxvAKAl1WnL3fPCtDT FVH4iaooE9KTJMIBjHjTfgZw82O4UWdatP8Qf2lpiPtY2qMnp3gxObiiABH5hyed KOMgI8xHOul8pxJshRnyzbAjY+0fk1HDKIQcHfGwoc41iijYbLgnZY7QrYmCNzpd jAqdum5ZH9C3dpr0adpo52U1Nv/HK/E= -----END CERTIFICATE-----Generated at Sun Apr 6 23:05:37 2025 by rpki-client