$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1430be88-295e-3e6d-9ab5-ac6496060876.roa File: 1430be88-295e-3e6d-9ab5-ac6496060876.roa (raw, json) Hash identifier: gU+bBkiZKVWeIbPxesIyHE4kYHwmiDJammHwEw06j3g= Subject key identifier: 61:02:CC:BD:5E:9A:E1:80:1D:F1:5D:FB:1B:DE:9F:E6:A0:81:9B:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CDCF2B4EB9BE719050A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1430be88-295e-3e6d-9ab5-ac6496060876.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.34.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:dc:f2:b4:eb:9b:e7:19:05:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=2d7b5574-3ed9-4af4-8e66-917d215894d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:84:7f:45:45:a6:15:24:69:16:b6:6e:36: 2e:ee:8a:cd:f6:b0:36:a8:d7:38:f4:c0:fe:f3:d1: 06:a8:d0:f3:66:78:7c:28:8e:70:b7:ec:46:7c:f6: a4:7a:c9:72:76:a5:be:3d:7f:fe:7a:c1:9b:bd:09: af:34:8d:3f:fe:ce:7a:fd:9d:9e:69:31:1f:4d:80: 41:d1:d5:45:bc:50:d2:89:c3:14:e2:81:88:08:4f: df:01:3b:38:77:78:59:38:27:84:7a:92:a1:40:e8: cb:ef:fe:a8:e8:97:62:11:df:b4:20:96:fb:ca:8f: f3:b4:73:a2:20:8a:9b:cc:34:d9:71:eb:54:89:86: 14:14:05:ec:64:12:8f:18:79:0f:fb:ad:13:35:68: ef:e1:d1:66:4d:2d:1f:59:84:ae:fb:06:57:30:0d: fb:2c:31:84:b8:f7:30:29:98:9a:dc:1f:b5:b2:63: ba:eb:b3:79:f5:e9:83:c0:1f:38:d3:d6:29:9a:1f: 60:a2:0d:b0:50:bf:71:58:8e:3d:87:36:a6:69:83: f5:bb:8a:ba:55:67:87:f8:be:7d:06:7d:16:d4:14: 2f:6c:bd:b3:bd:a0:1b:32:32:ea:38:fe:66:f4:cf: b0:03:30:9a:56:f5:a0:56:14:ef:6a:d9:56:9c:7a: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:02:CC:BD:5E:9A:E1:80:1D:F1:5D:FB:1B:DE:9F:E6:A0:81:9B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1430be88-295e-3e6d-9ab5-ac6496060876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:74:cb:5c:5d:84:92:16:44:30:6c:e5:aa:54:1e:af:dc:f9: a3:61:6f:10:21:30:d1:cc:ac:ed:a5:d4:7a:b4:a1:d6:72:fe: 5a:78:2c:da:82:f0:12:61:1e:7d:e7:e6:27:c4:9f:83:60:ab: b2:fd:df:93:24:2b:02:66:e6:f9:9b:e9:60:25:36:aa:0e:a1: 2b:b8:af:26:7a:88:c5:c8:c1:5e:8b:31:0f:a2:59:84:0c:bc: 69:c0:08:9b:c9:2d:70:35:6d:c0:cd:44:b0:4f:7b:44:81:7d: 7e:2d:25:86:92:66:ac:b1:d6:88:ab:d0:ac:92:b0:02:2c:2a: 5c:04:60:37:bf:98:c5:3f:46:8e:81:0f:4a:14:f2:75:27:97: 93:dd:0e:2b:83:86:77:86:a5:87:49:a0:47:13:c1:40:a5:79: b9:35:9e:09:a3:6f:eb:ee:ee:ee:72:dd:bd:17:c3:91:5a:d1: 64:79:db:a1:8d:b6:62:35:73:a9:19:95:58:c8:f9:03:95:af: a5:9c:2f:96:f1:ca:11:2a:1f:53:85:8d:d5:2d:ed:9e:c2:1b: 0d:a8:97:83:74:63:e9:59:34:35:29:a7:db:d1:03:d1:30:75: 7e:4a:93:60:f4:f1:aa:bd:49:b2:bd:02:60:28:6e:bf:06:58: 46:1f:f0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebNzytOub5xkFCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MmQ3YjU1NzQtM2VkOS00YWY0LThlNjYtOTE3ZDIxNTg5NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2+Ef0VFphUkaRa2bjYu7orN9rA2qNc49MD+ 89EGqNDzZnh8KI5wt+xGfPakeslydqW+PX/+esGbvQmvNI0//s56/Z2eaTEfTYBB 0dVFvFDSicMU4oGICE/fATs4d3hZOCeEepKhQOjL7/6o6JdiEd+0IJb7yo/ztHOi IIqbzDTZcetUiYYUFAXsZBKPGHkP+60TNWjv4dFmTS0fWYSu+wZXMA37LDGEuPcw KZia3B+1smO667N59emDwB8409Ypmh9gog2wUL9xWI49hzamaYP1u4q6VWeH+L59 Bn0W1BQvbL2zvaAbMjLqOP5m9M+wAzCaVvWgVhTvatlWnHojJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGECzL1emuGAHfFd+xven+aggZvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTQzMGJlODgtMjk1ZS0z ZTZkLTlhYjUtYWM2NDk2MDYwODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV0y1xdhJIWRDBs5apUHq/c+aNhbxAhMNHMrO2l1Hq0odZy/lp4LNqC 8BJhHn3n5ifEn4Ngq7L935MkKwJm5vmb6WAlNqoOoSu4ryZ6iMXIwV6LMQ+iWYQM vGnACJvJLXA1bcDNRLBPe0SBfX4tJYaSZqyx1oir0KySsAIsKlwEYDe/mMU/Ro6B D0oU8nUnl5PdDiuDhneGpYdJoEcTwUClebk1ngmjb+vu7u5y3b0Xw5Fa0WR526GN tmI1c6kZlVjI+QOVr6WcL5bxyhEqH1OFjdUt7Z7CGw2ol4N0Y+lZNDUpp9vRA9Ew dX5Kk2D08aq9SbK9AmAobr8GWEYf8N8= -----END CERTIFICATE-----Generated at Mon Apr 7 09:45:19 2025 by rpki-client