$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c1ec20d-d7bc-3c5d-acaa-fb6baf046f8f.roa File: 1c1ec20d-d7bc-3c5d-acaa-fb6baf046f8f.roa (raw, json) Hash identifier: Rn2QpiB7muluvqibDYyEnk9wD5czYL/Gwy0QsWqDdG4= Subject key identifier: E6:08:8D:2C:02:20:6F:D1:5D:F0:3F:25:B7:1B:98:9B:B8:72:4B:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE9C8EBFE11DC4B489C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c1ec20d-d7bc-3c5d-acaa-fb6baf046f8f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.59.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e9:c8:eb:fe:11:dc:4b:48:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b4af5cd8-5c32-4385-9b79-b98665749b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:f5:c2:07:f2:a6:f7:e7:1b:6f:d1:7e:21: b0:a3:f2:d0:2a:f7:04:ab:95:eb:c2:f8:37:ee:d1: 5a:8a:e4:2e:08:47:0e:6d:c5:17:ce:b0:c9:5d:06: 69:98:66:4e:57:ab:52:30:9e:fe:b7:63:ba:5a:db: 27:9d:61:4f:1a:05:0c:e8:f0:7a:51:79:16:90:b6: 2b:a0:49:32:62:7d:fc:69:c3:f5:96:5f:ab:da:96: a6:e9:ad:ba:8b:18:0f:29:a3:70:b2:88:2c:99:fd: ce:cc:f2:b2:87:22:45:97:1c:02:03:99:21:1f:f0: 64:6d:80:f4:10:db:21:66:32:b2:b6:be:e0:2f:ef: ea:57:13:6c:f1:17:60:dd:2a:cf:96:1b:73:d0:c2: b4:ac:56:92:0b:a6:b0:f3:49:9c:2f:e1:4c:d9:03: e2:d7:97:20:4b:28:47:45:4e:c0:39:c6:e0:51:28: 9e:79:59:d6:c1:c9:0c:f7:f1:7d:61:60:21:8b:7b: c9:ee:dc:26:e9:2e:1c:b7:3c:d9:a4:ac:46:75:1e: 79:f5:e0:13:d9:dd:8e:96:98:c6:1e:03:b7:e0:3e: f8:76:3e:11:65:10:3d:f1:c3:41:66:c3:a6:13:09: 0a:4c:bc:f1:d4:e7:5e:11:04:e7:3d:73:9a:29:4e: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:08:8D:2C:02:20:6F:D1:5D:F0:3F:25:B7:1B:98:9B:B8:72:4B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c1ec20d-d7bc-3c5d-acaa-fb6baf046f8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:da:bd:55:79:d0:a1:b2:75:d0:64:f1:31:f6:4a:55:d2:e6: 3c:b4:69:0d:a9:7c:f5:8e:f1:0b:fa:fc:f9:3b:fa:8c:be:de: 58:b5:0c:2e:d8:63:13:f9:2a:c1:06:d9:2d:6c:ce:da:00:2a: a7:51:8c:15:7c:43:85:9b:55:b8:d9:f0:c7:01:53:be:de:3c: 93:e3:0b:4f:3d:d3:e9:ec:62:da:ea:6e:dd:b4:00:ee:8e:66: 7f:95:4f:37:1a:ba:93:2d:42:02:11:8b:0c:41:4e:e2:fb:97: ca:89:94:21:54:93:f8:31:df:03:a7:20:97:0b:a7:8a:1a:c7: f2:34:76:a6:d2:d1:87:cb:ce:2e:47:c9:c3:b6:9e:cb:b7:73: d6:5b:35:5d:19:5b:16:e3:04:36:c8:ee:74:86:12:82:cb:b5: 7e:79:9e:ef:ef:0e:5c:cf:4d:ae:23:43:ee:b5:8e:66:f9:af: a0:ab:cb:e8:0b:68:f4:45:be:01:f0:b9:cc:f4:cb:49:5b:fa: c9:dd:3e:6a:13:1b:a1:19:67:63:d0:de:06:c4:cd:98:2b:21: b0:2a:0c:1c:f6:f9:ad:a3:f4:69:a3:ad:ed:ef:83:7f:0e:64: 08:0b:8d:2b:1d:de:29:65:2c:d6:24:77:73:04:73:62:79:5a: b2:2c:8b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOnI6/4R3EtInEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjRhZjVjZDgtNWMzMi00Mzg1LTliNzktYjk4NjY1NzQ5YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN31wgfypvfnG2/RfiGwo/LQKvcEq5Xrwvg3 7tFaiuQuCEcObcUXzrDJXQZpmGZOV6tSMJ7+t2O6WtsnnWFPGgUM6PB6UXkWkLYr oEkyYn38acP1ll+r2pam6a26ixgPKaNwsogsmf3OzPKyhyJFlxwCA5khH/BkbYD0 ENshZjKytr7gL+/qVxNs8Rdg3SrPlhtz0MK0rFaSC6aw80mcL+FM2QPi15cgSyhH RU7AOcbgUSieeVnWwckM9/F9YWAhi3vJ7twm6S4ctzzZpKxGdR559eAT2d2OlpjG HgO34D74dj4RZRA98cNBZsOmEwkKTLzx1OdeEQTnPXOaKU5RtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYIjSwCIG/RXfA/JbcbmJu4ckuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWMxZWMyMGQtZDdiYy0z YzVkLWFjYWEtZmI2YmFmMDQ2ZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/avVV50KGyddBk8TH2SlXS5jy0aQ2pfPWO8Qv6/Pk7+oy+3li1DC7Y YxP5KsEG2S1sztoAKqdRjBV8Q4WbVbjZ8McBU77ePJPjC0890+nsYtrqbt20AO6O Zn+VTzcaupMtQgIRiwxBTuL7l8qJlCFUk/gx3wOnIJcLp4oax/I0dqbS0YfLzi5H ycO2nsu3c9ZbNV0ZWxbjBDbI7nSGEoLLtX55nu/vDlzPTa4jQ+61jmb5r6Cry+gL aPRFvgHwucz0y0lb+sndPmoTG6EZZ2PQ3gbEzZgrIbAqDBz2+a2j9Gmjre3vg38O ZAgLjSsd3illLNYkd3MEc2J5WrIsi8s= -----END CERTIFICATE-----Generated at Mon Apr 7 09:41:32 2025 by rpki-client