$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa File: 10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa (raw, json) Hash identifier: b1azapJOW4SdMUP2J7Z7EIKQLd4HlOwVl9fX1bzb9po= Subject key identifier: 9B:11:4B:F6:99:AB:EA:C3:BC:4D:CB:72:A8:6D:24:0C:4B:4D:FE:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8E6D5CCB9C5787FDB5040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.43.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:e6:d5:cc:b9:c5:78:7f:db:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=23bba3a7-ce71-4068-bf7a-d4c95b3f8e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:96:0d:0c:f2:1b:7c:0a:0e:fd:33:9e:c1: 08:d2:5a:73:d3:f9:64:03:42:99:a8:aa:6a:dd:33: f4:fb:e2:17:24:c2:4b:bc:e8:af:85:26:f2:0a:5b: 75:a5:d4:f4:a8:43:ba:49:e9:96:11:a4:49:86:c8: 38:e9:f1:e0:18:e5:00:bb:b3:93:68:a0:ce:41:56: 3c:5d:10:02:49:83:33:25:bb:93:4f:a4:e2:65:2d: 62:f9:a1:74:21:17:81:c0:ed:0e:20:13:1e:05:c7: 1d:d4:05:70:dc:5b:30:ca:7b:66:e6:ed:93:16:62: 60:b1:8b:56:51:68:ea:97:32:f4:6d:b5:f1:4f:06: 53:87:d1:9e:4c:8a:52:1b:93:88:55:40:2c:17:a2: 59:2d:89:9b:af:fa:8a:fd:34:c7:97:44:eb:b3:ce: a4:8e:93:9c:6e:bb:5a:64:16:93:f1:09:64:25:18: 08:e4:85:1e:23:6a:b4:56:20:80:4c:68:0e:aa:0a: 35:bc:ad:e8:87:a8:47:65:eb:b0:95:cb:f0:e0:b6: 65:4c:46:ea:40:65:8e:19:28:8d:b8:06:1f:5b:8e: 2a:3b:5b:48:6d:50:a0:11:7f:8d:38:82:ae:cc:50: 1e:31:28:59:11:03:e0:6d:f8:12:ee:13:e6:e8:fd: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:4B:F6:99:AB:EA:C3:BC:4D:CB:72:A8:6D:24:0C:4B:4D:FE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e5:aa:fc:98:6b:4f:25:67:8c:af:2b:e0:ca:c2:15:3f:c2: d5:68:44:91:c6:a1:8f:22:6e:94:21:ca:d6:97:3b:20:aa:26: cd:ef:b2:c2:4d:ef:02:e8:84:24:c0:cd:2a:c4:a8:3e:e0:4c: 11:cd:f8:4b:0d:09:a5:04:68:c6:87:03:d0:fb:a1:f2:a4:a7: 90:29:37:39:12:39:ec:f2:6e:18:dd:53:f1:b5:69:10:46:2d: 5d:40:a5:94:38:55:8a:a3:b1:6a:97:6e:21:a6:85:11:13:42: 64:dd:c5:da:bd:40:5a:30:82:e9:52:73:8c:47:d7:f4:55:d9: 14:9f:a9:f5:c6:2d:1d:fe:b4:b0:b5:d0:37:93:63:7e:bb:40: b2:43:22:52:14:0a:a5:de:67:f8:bf:87:d9:44:a9:ba:7f:b9: 05:42:75:6c:34:38:c0:e0:ee:cd:4d:78:c0:44:01:09:17:f4: 0a:32:43:97:68:5a:6a:d4:1a:80:1e:dd:9e:f7:ef:89:69:00: 3b:68:71:b2:45:52:0b:6b:fe:6e:28:ea:b6:85:ee:7c:9d:62: cc:d4:cc:a4:cf:d4:e4:55:e5:6d:cd:0e:f0:ad:d3:f3:10:09: f2:43:cd:2e:8f:a5:d9:ff:01:0c:d3:07:b7:d7:a5:ce:76:45: c6:3f:cf:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+ObVzLnFeH/bUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjNiYmEzYTctY2U3MS00MDY4LWJmN2EtZDRjOTViM2Y4ZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw36WDQzyG3wKDv0znsEI0lpz0/lkA0KZqKpq 3TP0++IXJMJLvOivhSbyClt1pdT0qEO6SemWEaRJhsg46fHgGOUAu7OTaKDOQVY8 XRACSYMzJbuTT6TiZS1i+aF0IReBwO0OIBMeBccd1AVw3Fswyntm5u2TFmJgsYtW UWjqlzL0bbXxTwZTh9GeTIpSG5OIVUAsF6JZLYmbr/qK/TTHl0Trs86kjpOcbrta ZBaT8QlkJRgI5IUeI2q0ViCATGgOqgo1vK3oh6hHZeuwlcvw4LZlTEbqQGWOGSiN uAYfW44qO1tIbVCgEX+NOIKuzFAeMShZEQPgbfgS7hPm6P3ltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsRS/aZq+rDvE3LcqhtJAxLTf6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA5MjFhODgtMTA5Yi0z NmExLTlkZDEtOGJiNjZhN2UwYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGflqvyYa08lZ4yvK+DKwhU/wtVoRJHGoY8ibpQhytaXOyCqJs3vssJN 7wLohCTAzSrEqD7gTBHN+EsNCaUEaMaHA9D7ofKkp5ApNzkSOezybhjdU/G1aRBG LV1ApZQ4VYqjsWqXbiGmhRETQmTdxdq9QFowgulSc4xH1/RV2RSfqfXGLR3+tLC1 0DeTY367QLJDIlIUCqXeZ/i/h9lEqbp/uQVCdWw0OMDg7s1NeMBEAQkX9AoyQ5do WmrUGoAe3Z7374lpADtocbJFUgtr/m4o6raF7nydYszUzKTP1ORV5W3NDvCt0/MQ CfJDzS6Ppdn/AQzTB7fXpc52RcY/zww= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:46 2025 by rpki-client