$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3ab32d-e79c-3d87-b07c-5f5af0d5b55e.roa File: 1a3ab32d-e79c-3d87-b07c-5f5af0d5b55e.roa (raw, json) Hash identifier: 4+hHsNNdzyPn1OA4tYPiehyn77KCD2+s/sU7Ih1XI2M= Subject key identifier: 31:25:1F:EE:61:6C:65:B0:68:EF:57:A4:1F:F4:12:C4:04:1C:4C:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF4FAEE5F8FA22EACB8140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3ab32d-e79c-3d87-b07c-5f5af0d5b55e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.51.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:4f:ae:e5:f8:fa:22:ea:cb:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=64a0c365-1572-40be-a5b2-d6a843169a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:69:b6:c4:5b:d2:8a:f5:76:ad:ff:ee:8e: 24:a0:c3:0d:9e:8e:b5:ce:bb:b6:3a:f1:06:a2:4e: 27:41:68:4c:7e:b7:90:b8:f8:43:16:f2:ca:b6:52: cf:7d:33:5e:58:2c:fb:d3:f5:18:48:52:85:4a:52: 58:39:55:4b:b0:8c:bb:94:ba:29:a1:4b:b6:25:1d: 7b:60:f0:79:70:42:8d:7c:d4:5b:87:2f:ce:c9:0e: 36:9a:a7:64:bb:ec:6c:38:9e:aa:c2:29:8e:bc:57: 97:f2:97:74:f7:af:fe:5e:5a:c7:70:a5:d1:aa:02: 9c:e0:8f:e0:ee:df:9b:3d:68:ba:c4:c5:66:f0:24: e4:61:37:12:a5:49:3f:72:91:af:e8:a7:cb:73:a9: 95:06:36:f8:cf:a5:fb:d6:76:a1:57:54:ca:49:07: 92:0e:cd:c5:35:87:ef:2b:ac:78:46:b4:79:a4:c7: 7e:6c:45:de:ad:d7:eb:59:90:2c:04:70:2c:e1:f1: 56:94:fe:0b:6a:a8:51:2a:ea:ad:9b:f8:3c:0e:75: df:91:4a:21:10:3a:bd:63:de:a1:dc:7a:3b:e6:dc: f2:24:88:3e:db:18:87:70:a2:8a:15:83:a9:1f:b7: 3c:46:ff:94:66:fb:ea:f4:46:d2:a2:e6:2c:09:cb: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:25:1F:EE:61:6C:65:B0:68:EF:57:A4:1F:F4:12:C4:04:1C:4C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3ab32d-e79c-3d87-b07c-5f5af0d5b55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:93:12:ce:f6:fd:77:ea:a0:1d:12:fa:9f:5c:05:03:3d:9e: d4:dc:09:2c:5e:45:c3:b0:cd:8b:92:1d:3b:67:b8:ca:f1:6d: 72:b2:17:e8:fa:35:64:fc:9b:b5:e7:03:d8:19:1b:99:6b:35: 51:a1:ae:33:13:40:56:ee:e4:14:a9:68:af:ab:b5:75:07:ec: ba:ba:34:b8:b7:0b:ba:fe:d6:37:fa:f4:6d:12:67:da:7b:3b: 21:65:2f:34:9b:89:89:13:e8:e4:90:b1:de:54:86:96:91:f2: 77:36:14:b5:ec:26:de:67:da:6a:7e:25:6f:d3:4a:25:5d:b2: a4:6c:33:64:bb:84:c4:98:63:3d:c3:c7:6c:c4:20:31:d6:a3: c9:ef:35:b1:ce:33:c6:2a:55:d2:bb:f0:0b:5b:51:2d:d6:35: ee:84:81:38:01:48:72:52:8c:e8:41:e8:a8:c3:de:17:13:6f: 2d:f3:4a:5e:10:13:15:47:4e:4b:bf:ad:29:20:3a:eb:e1:06: d7:77:09:cd:76:f5:2a:28:4c:3e:56:c7:a8:f6:e6:10:e6:68: c4:5b:63:4e:2d:5d:f1:21:55:76:bb:9b:36:7d:e0:a4:00:8a: 5d:44:0d:b6:a9:82:82:61:01:b4:06:46:6c:d1:f9:10:17:37: ce:87:b7:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr0+u5fj6IurLgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjRhMGMzNjUtMTU3Mi00MGJlLWE1YjItZDZhODQzMTY5YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3etptsRb0or1dq3/7o4koMMNno61zru2OvEG ok4nQWhMfreQuPhDFvLKtlLPfTNeWCz70/UYSFKFSlJYOVVLsIy7lLopoUu2JR17 YPB5cEKNfNRbhy/OyQ42mqdku+xsOJ6qwimOvFeX8pd096/+XlrHcKXRqgKc4I/g 7t+bPWi6xMVm8CTkYTcSpUk/cpGv6KfLc6mVBjb4z6X71nahV1TKSQeSDs3FNYfv K6x4RrR5pMd+bEXerdfrWZAsBHAs4fFWlP4LaqhRKuqtm/g8DnXfkUohEDq9Y96h 3Ho75tzyJIg+2xiHcKKKFYOpH7c8Rv+UZvvq9EbSouYsCcvZ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDElH+5hbGWwaO9XpB/0EsQEHEx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWEzYWIzMmQtZTc5Yy0z ZDg3LWIwN2MtNWY1YWYwZDViNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDNFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqTEs72/XfqoB0S+p9cBQM9ntTcCSxeRcOwzYuSHTtnuMrxbXKyF+j6 NWT8m7XnA9gZG5lrNVGhrjMTQFbu5BSpaK+rtXUH7Lq6NLi3C7r+1jf69G0SZ9p7 OyFlLzSbiYkT6OSQsd5UhpaR8nc2FLXsJt5n2mp+JW/TSiVdsqRsM2S7hMSYYz3D x2zEIDHWo8nvNbHOM8YqVdK78AtbUS3WNe6EgTgBSHJSjOhB6KjD3hcTby3zSl4Q ExVHTku/rSkgOuvhBtd3Cc129SooTD5Wx6j25hDmaMRbY04tXfEhVXa7mzZ94KQA il1EDbapgoJhAbQGRmzR+RAXN86Htxc= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:54 2025 by rpki-client