$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d0dad65-5f63-3855-a526-0e869324cce6.roa File: 0d0dad65-5f63-3855-a526-0e869324cce6.roa (raw, json) Hash identifier: OOwJQ9RwQs1q5xq/eRwq77tpQN+9Z/9z8cYbN4mOFG0= Subject key identifier: 3C:38:F9:BE:E4:27:50:64:09:9A:FF:23:DC:07:22:96:EB:E1:A0:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE5AF659165939B9C1C60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d0dad65-5f63-3855-a526-0e869324cce6.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.54.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e5:af:65:91:65:93:9b:9c:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e1131c9c-e788-415b-a269-90197b339d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:fc:0b:e3:0a:14:9a:dd:a8:dd:be:30:88: a8:1d:ad:18:fb:88:f5:0e:b0:cf:5d:08:e9:1e:32: 94:ea:26:ba:41:3b:e7:4e:96:ea:93:25:ea:ce:88: e6:c4:ae:58:00:57:3c:26:b5:82:c1:0d:25:61:f3: 6e:7a:9f:78:0b:8b:1f:eb:5b:72:04:35:14:11:eb: 2e:4e:dc:b0:87:80:e7:2f:4a:40:8c:03:e2:b8:01: 4a:20:6d:9d:32:f4:94:db:f2:96:f8:33:cf:cf:5f: 0c:64:35:1d:80:7e:b1:fd:49:aa:05:4d:2b:02:42: be:c2:1e:f3:16:96:e2:f8:9d:f4:81:ff:6a:cf:d0: d7:60:bf:4c:7a:7c:bf:d2:0f:c7:58:20:fa:ca:ff: c4:22:59:cc:ad:9a:98:66:cb:fd:77:37:12:cb:8e: 3d:30:b0:f3:57:1b:97:7b:61:00:91:b0:8b:78:3d: 62:a0:54:c6:7b:99:03:06:81:b9:ac:41:79:4a:13: 3c:42:02:b9:f3:56:42:d0:0c:2d:37:49:7c:80:46: ae:9d:20:d3:4a:b3:ad:c0:d7:ab:96:ea:99:3e:b8: 5f:eb:bc:32:ef:fd:b9:b1:7e:d4:b9:df:95:4f:11: d1:c2:02:3e:07:34:83:eb:76:89:54:c0:42:ae:fd: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:38:F9:BE:E4:27:50:64:09:9A:FF:23:DC:07:22:96:EB:E1:A0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d0dad65-5f63-3855-a526-0e869324cce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:44:c7:a9:01:19:e7:7f:d1:cf:3a:2e:3c:7e:6d:74:78:4e: ba:91:24:4f:b8:96:d6:83:de:4d:9d:36:4f:c8:0a:9d:cf:9d: d2:c7:6f:1c:b2:da:cb:80:c4:24:8e:71:9a:65:2d:7a:c3:87: 41:2e:0b:38:54:f7:09:1d:2a:5c:cd:df:3d:88:d5:e5:da:10: a3:3c:9b:9f:ec:62:7b:a8:dd:4c:5e:0d:8f:34:61:6d:91:88: 01:95:ce:4b:64:3e:ba:12:95:0c:a5:e3:63:4b:98:26:8d:86: 29:04:09:44:4e:c5:29:c1:f8:3f:9e:b7:3d:3d:36:af:aa:b0: e1:c9:13:23:4a:89:97:68:87:24:07:2c:b3:53:b5:56:7d:b2: 17:93:28:bf:ab:2f:3e:d2:d0:c6:21:39:66:2f:dd:44:47:35: f8:14:23:18:c7:94:b6:c5:70:9d:ec:70:42:d2:ea:62:ba:55: 39:54:6d:ec:46:63:d3:7f:07:84:0e:31:4b:5c:b8:ec:09:cd: f5:a0:cb:a2:41:2e:7f:0d:0b:98:3c:88:42:e8:fe:f6:e9:a0: 08:7c:6d:35:9b:48:26:b7:a4:46:23:62:88:7e:ba:08:86:a7: 88:71:c4:11:d4:85:d2:15:56:42:50:75:f6:a5:5d:bd:a3:49: 21:93:f7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOWvZZFlk5ucHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTExMzFjOWMtZTc4OC00MTViLWEyNjktOTAxOTdiMzM5ZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho78C+MKFJrdqN2+MIioHa0Y+4j1DrDPXQjp HjKU6ia6QTvnTpbqkyXqzojmxK5YAFc8JrWCwQ0lYfNuep94C4sf61tyBDUUEesu Ttywh4DnL0pAjAPiuAFKIG2dMvSU2/KW+DPPz18MZDUdgH6x/UmqBU0rAkK+wh7z Fpbi+J30gf9qz9DXYL9Meny/0g/HWCD6yv/EIlnMrZqYZsv9dzcSy449MLDzVxuX e2EAkbCLeD1ioFTGe5kDBoG5rEF5ShM8QgK581ZC0AwtN0l8gEaunSDTSrOtwNer luqZPrhf67wy7/25sX7Uud+VTxHRwgI+BzSD63aJVMBCrv10MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw4+b7kJ1BkCZr/I9wHIpbr4aCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGQwZGFkNjUtNWY2My0z ODU1LWE1MjYtMGU4NjkzMjRjY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBEx6kBGed/0c86Ljx+bXR4TrqRJE+4ltaD3k2dNk/ICp3PndLHbxyy 2suAxCSOcZplLXrDh0EuCzhU9wkdKlzN3z2I1eXaEKM8m5/sYnuo3UxeDY80YW2R iAGVzktkProSlQyl42NLmCaNhikECUROxSnB+D+etz09Nq+qsOHJEyNKiZdohyQH LLNTtVZ9sheTKL+rLz7S0MYhOWYv3URHNfgUIxjHlLbFcJ3scELS6mK6VTlUbexG Y9N/B4QOMUtcuOwJzfWgy6JBLn8NC5g8iELo/vbpoAh8bTWbSCa3pEYjYoh+ugiG p4hxxBHUhdIVVkJQdfalXb2jSSGT96c= -----END CERTIFICATE-----Generated at Mon Apr 7 09:45:35 2025 by rpki-client