$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e08850b-ffe2-3a7b-927d-05546537ea2f.roa File: 1e08850b-ffe2-3a7b-927d-05546537ea2f.roa (raw, json) Hash identifier: n9qxpp7FUPIuBYntITEGS714fbTy0dqek6RVG3gDWac= Subject key identifier: 86:3B:67:61:34:BA:D4:66:11:00:12:E3:6E:48:DE:66:FE:C9:0D:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F787C1C82AF1F37C050500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e08850b-ffe2-3a7b-927d-05546537ea2f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.37.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:87:c1:c8:2a:f1:f3:7c:05:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=34c7fb49-ee89-468e-a508-ca4945d44432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:56:23:1a:d0:ad:8a:b9:8e:b4:b8:48:28: de:b4:1e:f9:db:4b:57:8b:56:05:d1:5e:47:a1:8e: a1:ef:b2:56:05:11:69:59:ee:54:48:4b:19:d7:83: 24:e0:d6:0e:6e:55:1e:a4:a0:42:87:68:90:fd:55: 1a:4e:bd:05:7b:c2:27:30:be:c5:10:b0:79:3a:e1: b0:89:19:82:46:de:ef:9d:cd:ee:e0:84:09:89:17: 32:ad:bd:3b:b7:30:f6:e6:12:48:ce:50:14:1b:eb: d6:73:e7:a1:69:7e:13:13:88:f5:0d:61:b7:91:36: b1:46:b2:14:18:22:58:2b:84:10:52:41:8d:f6:51: 33:68:57:88:ed:47:e0:9b:ae:f5:57:1c:34:f8:79: a3:68:7b:ae:db:eb:67:64:42:91:69:52:3f:cd:9c: 76:0a:9a:07:c6:8a:d8:5d:b1:5f:35:84:fd:ab:d8: 81:41:e5:d8:22:87:5b:25:1f:3f:ad:38:22:79:d8: e8:a8:f4:04:d2:3a:fe:5c:a9:68:a4:16:8f:8e:d1: 1a:4a:a3:9f:43:01:80:0d:35:ce:83:b9:fd:ad:01: 37:c9:70:40:45:2f:0d:65:ee:e0:71:08:d4:b4:4f: f7:e5:90:7d:bd:6d:62:8f:82:f3:2b:63:2b:c5:96: a7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3B:67:61:34:BA:D4:66:11:00:12:E3:6E:48:DE:66:FE:C9:0D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e08850b-ffe2-3a7b-927d-05546537ea2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3b:37:80:f1:bd:91:2f:5c:83:5b:9a:b3:79:8c:e4:9c:ff: 33:a3:c5:33:3a:b2:54:17:df:86:b6:c3:a2:47:20:6d:99:f1: e3:b6:f2:74:c4:48:af:fa:2d:0d:15:04:48:93:5f:24:c3:07: f3:0a:c9:7d:2d:9f:22:35:d6:cf:4f:04:99:da:1e:39:31:bc: fd:04:b2:1d:60:b4:0a:8e:85:3d:90:77:5e:4f:d4:c1:80:83: f8:6a:92:1a:86:43:46:b8:98:35:cf:f3:3e:0d:d3:40:79:0a: 79:59:c0:66:35:2d:bf:1d:00:72:8b:aa:8c:46:cf:fa:7a:d2: eb:4d:44:96:db:1d:5c:3b:eb:0d:24:06:a5:36:d5:7d:a3:93: e0:58:11:73:79:36:20:d9:46:61:05:81:55:fc:bd:41:11:8e: 12:14:7f:d5:fb:70:bc:03:7d:5e:82:ca:2b:6f:20:50:40:53: b6:45:05:89:08:bf:aa:84:e3:ed:06:7e:ac:5a:89:88:ae:54: cf:d9:53:ad:0f:08:29:f4:70:5d:2b:b1:94:ac:d2:32:c2:c7: dc:bb:3f:2e:51:ad:c0:5b:4f:b9:75:c8:c3:83:f7:c1:90:19: f5:3d:76:3b:0c:36:15:77:27:1a:eb:6e:1b:f4:f1:77:4a:e1: 76:c1:43:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094fByCrx83wFBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MzRjN2ZiNDktZWU4OS00NjhlLWE1MDgtY2E0OTQ1ZDQ0NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNZWIxrQrYq5jrS4SCjetB7520tXi1YF0V5H oY6h77JWBRFpWe5USEsZ14Mk4NYOblUepKBCh2iQ/VUaTr0Fe8InML7FELB5OuGw iRmCRt7vnc3u4IQJiRcyrb07tzD25hJIzlAUG+vWc+ehaX4TE4j1DWG3kTaxRrIU GCJYK4QQUkGN9lEzaFeI7Ufgm671Vxw0+HmjaHuu2+tnZEKRaVI/zZx2CpoHxorY XbFfNYT9q9iBQeXYIodbJR8/rTgiedjoqPQE0jr+XKlopBaPjtEaSqOfQwGADTXO g7n9rQE3yXBARS8NZe7gcQjUtE/35ZB9vW1ij4LzK2MrxZanGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY7Z2E0utRmEQAS425I3mb+yQ39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWUwODg1MGItZmZlMi0z YTdiLTkyN2QtMDU1NDY1MzdlYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg7N4DxvZEvXINbmrN5jOSc/zOjxTM6slQX34a2w6JHIG2Z8eO28nTE SK/6LQ0VBEiTXyTDB/MKyX0tnyI11s9PBJnaHjkxvP0Esh1gtAqOhT2Qd15P1MGA g/hqkhqGQ0a4mDXP8z4N00B5CnlZwGY1Lb8dAHKLqoxGz/p60utNRJbbHVw76w0k BqU21X2jk+BYEXN5NiDZRmEFgVX8vUERjhIUf9X7cLwDfV6CyitvIFBAU7ZFBYkI v6qE4+0GfqxaiYiuVM/ZU60PCCn0cF0rsZSs0jLCx9y7Py5RrcBbT7l1yMOD98GQ GfU9djsMNhV3Jxrrbhv08XdK4XbBQ8o= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:40 2025 by rpki-client