$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa File: 220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa (raw, json) Hash identifier: Drth79dfe016gvsw1WVskG9v3yFYr4avRtF1ggF5IoM= Subject key identifier: C5:2C:57:20:D9:74:31:09:5D:6A:5E:A3:A0:A7:B1:3A:C7:E8:EB:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7A181B9C93CB703AD6A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.60.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:a1:81:b9:c9:3c:b7:03:ad:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1f180104-521d-424e-bb0b-453a837e4169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:19:ad:42:b1:29:ee:ef:c8:1c:7e:3b:28: d0:30:7b:33:79:92:c5:eb:c7:d6:80:1a:f5:c0:16: 6a:d5:5a:fd:da:4f:9c:e2:b7:c1:f5:0b:fc:87:29: a0:12:12:09:d3:7d:c1:7a:df:3c:75:42:72:1b:0b: 57:bb:5e:33:54:24:12:06:32:b0:2d:b7:d2:33:e2: 28:0f:c5:51:fc:7e:6c:5c:33:cf:54:99:75:57:a2: 33:5f:65:a4:95:90:32:e4:65:25:7b:69:f8:b2:1e: 79:e1:c5:41:7b:ac:2f:f2:f8:70:65:c8:26:d9:33: dd:40:a9:8d:18:ac:5c:12:3c:bc:0f:54:57:5e:5d: 9f:29:fc:85:2b:c2:01:03:83:ee:a4:0e:97:37:ea: 61:1b:a5:fc:b1:44:32:09:87:a3:52:1d:27:07:4e: a6:27:e1:26:33:51:0f:62:59:64:dc:30:ad:20:aa: ba:61:f0:b6:c5:7b:f0:92:63:69:1c:a4:0a:b9:fa: c9:0f:40:22:61:09:62:c0:06:5f:7e:df:0c:41:67: ce:9d:52:e8:59:e7:db:f6:91:d3:84:e7:e5:3f:1c: 37:f8:55:20:b5:12:80:52:ed:88:fc:2b:0f:2a:d0: c6:bc:06:fe:5f:d2:63:ba:a9:19:24:c9:ec:db:db: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:57:20:D9:74:31:09:5D:6A:5E:A3:A0:A7:B1:3A:C7:E8:EB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ec:38:63:ee:75:78:4a:82:66:40:8e:42:99:cb:29:07:24: 44:6d:f4:70:88:6c:08:5a:5c:d9:6e:37:2b:b2:ee:11:06:0b: 3b:ed:39:ea:1f:a1:f6:54:de:dc:c9:99:54:65:61:d3:09:2d: e5:b8:38:9f:15:39:26:d4:52:e8:15:1b:75:19:bc:6c:a3:7a: 72:7e:09:78:e4:63:2a:1f:89:a7:27:2e:18:4c:91:ef:90:48: 95:cb:d7:51:1c:4e:c5:9e:8e:cf:0d:17:8e:17:6f:be:41:41: ce:2b:68:54:fb:cb:3b:e6:56:8e:81:11:fa:ad:51:95:c5:b0: 9b:1c:f1:01:95:38:25:d0:4d:2a:d9:5b:00:8c:a0:6f:74:7b: bc:38:cf:6e:48:a1:0c:96:24:6e:a8:2c:3c:7e:06:77:79:56: d6:1c:f4:db:0a:53:90:74:33:9f:4c:a5:44:20:2d:da:db:ba: ee:c8:4c:82:d7:41:8b:25:80:ea:3b:6e:3f:e7:d2:0c:dc:05: a6:e2:7f:18:6d:f4:db:88:3d:d6:12:07:4b:38:6a:25:98:c1: cb:65:92:0e:74:f9:4b:12:a4:29:91:52:33:3c:95:7d:ae:2f: fe:c4:18:dd:5e:f5:fc:35:d8:99:35:bb:64:d5:29:bc:ba:b7: 88:76:48:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj096GBuck8twOtaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWYxODAxMDQtNTIxZC00MjRlLWJiMGItNDUzYTgzN2U0MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9kZrUKxKe7vyBx+OyjQMHszeZLF68fWgBr1 wBZq1Vr92k+c4rfB9Qv8hymgEhIJ033Bet88dUJyGwtXu14zVCQSBjKwLbfSM+Io D8VR/H5sXDPPVJl1V6IzX2WklZAy5GUle2n4sh554cVBe6wv8vhwZcgm2TPdQKmN GKxcEjy8D1RXXl2fKfyFK8IBA4PupA6XN+phG6X8sUQyCYejUh0nB06mJ+EmM1EP Yllk3DCtIKq6YfC2xXvwkmNpHKQKufrJD0AiYQliwAZfft8MQWfOnVLoWefb9pHT hOflPxw3+FUgtRKAUu2I/CsPKtDGvAb+X9JjuqkZJMns29uYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUsVyDZdDEJXWpeo6CnsTrH6OuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIwYmZiN2UtMTQ2Mi0z ZTBmLTk5ZTUtNDNiMmYzZWJkMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHsOGPudXhKgmZAjkKZyykHJERt9HCIbAhaXNluNyuy7hEGCzvtOeof ofZU3tzJmVRlYdMJLeW4OJ8VOSbUUugVG3UZvGyjenJ+CXjkYyofiacnLhhMke+Q SJXL11EcTsWejs8NF44Xb75BQc4raFT7yzvmVo6BEfqtUZXFsJsc8QGVOCXQTSrZ WwCMoG90e7w4z25IoQyWJG6oLDx+Bnd5VtYc9NsKU5B0M59MpUQgLdrbuu7ITILX QYslgOo7bj/n0gzcBabifxht9NuIPdYSB0s4aiWYwctlkg50+UsSpCmRUjM8lX2u L/7EGN1e9fw12Jk1u2TVKby6t4h2SOA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:16:09 2025 by rpki-client