$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cd4ed28-4013-33f9-b4b1-a7df67b13034.roa File: 0cd4ed28-4013-33f9-b4b1-a7df67b13034.roa (raw, json) Hash identifier: 28kEOLsPpxFepP4xb7rbpS5ivg0OiIj/nNGCCIo4EgU= Subject key identifier: 60:59:04:3D:75:5D:33:B8:91:48:C9:66:55:EA:4A:7D:EE:8C:FA:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE6EE2C719D935F8A3B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cd4ed28-4013-33f9-b4b1-a7df67b13034.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.54.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e6:ee:2c:71:9d:93:5f:8a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=6185ff31-0a0a-4eb3-b09f-dc5e77f74830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:3a:bc:04:56:36:db:f1:55:c2:9f:a2:d5: 09:8e:4a:46:4e:c6:75:cb:49:4d:c2:8c:77:22:68: b0:00:50:45:ce:19:4b:5b:39:7d:53:e5:92:15:6c: 03:55:39:62:ec:24:87:d9:fa:26:6d:7f:d4:f0:97: 2d:9e:ff:cc:8a:82:76:b8:94:5a:a6:df:68:88:f9: 18:07:3c:c3:36:7d:bc:48:1d:08:74:ed:71:9f:5b: 25:02:9b:7b:fc:56:e1:5d:08:ee:52:0c:df:77:b4: 8e:ca:23:20:70:5a:08:28:0b:d0:0e:02:a3:7f:5f: 6e:90:ce:1b:08:08:c6:4a:36:49:c4:57:ba:bd:ad: af:2b:92:8d:03:a1:cb:15:91:5b:d0:96:bb:ec:10: 44:03:c5:a5:b7:0b:3d:08:8b:03:df:2c:13:af:30: 14:7c:eb:26:ca:45:1c:06:ab:de:49:da:6c:66:64: bb:58:6c:87:48:bf:be:ed:d1:4d:02:aa:be:a7:b6: 2d:49:44:c2:fc:c6:ab:f3:fc:4b:98:0c:8f:84:b8: 67:99:1b:48:de:bc:ca:b2:86:3f:6e:1b:22:9e:ec: 4d:44:5e:0a:b8:66:86:54:45:b8:7d:33:e7:b1:bf: 3a:c2:1d:9b:d7:bb:60:64:7a:2f:b4:97:1d:2e:39: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:59:04:3D:75:5D:33:B8:91:48:C9:66:55:EA:4A:7D:EE:8C:FA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cd4ed28-4013-33f9-b4b1-a7df67b13034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bc:97:ec:9b:ac:da:5f:97:bf:c7:c4:bf:a6:a5:5e:8d:37: c5:2f:ae:1f:f3:6b:08:35:81:f6:06:18:b1:c2:e9:73:ac:83: 73:7e:d1:73:9f:93:29:d1:b6:36:da:02:9c:a3:0c:54:0f:36: 36:88:c4:66:0e:d5:4e:a9:e8:9f:e3:27:9d:64:bb:c0:70:5f: e5:13:32:bd:bf:cf:8a:d2:5b:1b:dc:42:94:5e:26:0b:d8:9f: 0c:a5:f5:af:74:d4:1d:77:bc:a8:c6:83:07:ee:3e:c5:40:17: ec:b7:9a:a2:5c:4e:0a:6a:54:2f:05:59:45:be:1e:f1:13:96: be:ab:c2:e7:ab:ad:84:ea:59:18:5c:0c:9a:cc:f9:02:02:4c: 39:f4:d4:b6:3a:8f:b3:52:1e:cf:c6:4b:97:83:c1:31:d8:92: 8a:f6:47:af:5a:a9:0b:c2:32:23:8c:19:5a:c1:bd:d8:49:2a: ca:dc:07:da:15:bd:a7:20:29:87:20:72:de:5f:d7:6f:44:ca: 83:69:dd:c2:76:9e:12:58:59:b2:3f:6c:67:47:2d:06:8f:52: 20:27:0f:4b:44:8c:cd:1f:37:86:55:b7:9e:02:56:2a:f6:f3: e3:8c:11:24:33:59:fd:fc:79:ac:ad:95:d8:27:99:07:2b:16: 27:ce:17:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebObuLHGdk1+KO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjE4NWZmMzEtMGEwYS00ZWIzLWIwOWYtZGM1ZTc3Zjc0ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYA6vARWNtvxVcKfotUJjkpGTsZ1y0lNwox3 ImiwAFBFzhlLWzl9U+WSFWwDVTli7CSH2fombX/U8Jctnv/MioJ2uJRapt9oiPkY BzzDNn28SB0IdO1xn1slApt7/FbhXQjuUgzfd7SOyiMgcFoIKAvQDgKjf19ukM4b CAjGSjZJxFe6va2vK5KNA6HLFZFb0Ja77BBEA8Wltws9CIsD3ywTrzAUfOsmykUc BqveSdpsZmS7WGyHSL++7dFNAqq+p7YtSUTC/Mar8/xLmAyPhLhnmRtI3rzKsoY/ bhsinuxNRF4KuGaGVEW4fTPnsb86wh2b17tgZHovtJcdLjkIIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBZBD11XTO4kUjJZlXqSn3ujPogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNkNGVkMjgtNDAxMy0z M2Y5LWI0YjEtYTdkZjY3YjEzMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm8l+ybrNpfl7/HxL+mpV6NN8Uvrh/zawg1gfYGGLHC6XOsg3N+0XOf kynRtjbaApyjDFQPNjaIxGYO1U6p6J/jJ51ku8BwX+UTMr2/z4rSWxvcQpReJgvY nwyl9a901B13vKjGgwfuPsVAF+y3mqJcTgpqVC8FWUW+HvETlr6rwuerrYTqWRhc DJrM+QICTDn01LY6j7NSHs/GS5eDwTHYkor2R69aqQvCMiOMGVrBvdhJKsrcB9oV vacgKYcgct5f129EyoNp3cJ2nhJYWbI/bGdHLQaPUiAnD0tEjM0fN4ZVt54CVir2 8+OMESQzWf38eaytldgnmQcrFifOFxk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:01 2025 by rpki-client