$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2280e5a2-e1a6-3762-992b-b9f20f648560.roa File: 2280e5a2-e1a6-3762-992b-b9f20f648560.roa (raw, json) Hash identifier: 1qYRdqyRgGUF2odxf/P0vd1vOzZLBm/X94PoSYaG64o= Subject key identifier: 44:57:24:AC:58:C2:00:78:86:B5:8C:5D:B3:CA:F2:FD:6F:E9:30:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D763DF445E793D6391780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2280e5a2-e1a6-3762-992b-b9f20f648560.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33652 IP address blocks: 68.86.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:76:3d:f4:45:e7:93:d6:39:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=61330b41-8e33-4037-8906-e7f17ad717a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:b8:23:3e:a0:82:bd:c4:6e:76:00:54:bf: 81:5a:90:9c:22:6a:10:1c:cf:b2:26:95:de:98:66: 4e:1d:19:e8:25:5c:db:38:03:91:94:ba:a7:d0:0b: 74:80:4e:66:66:c4:40:db:60:3e:95:f4:6c:6f:37: d7:87:61:45:fc:9d:9e:ea:51:1b:1b:ac:46:df:66: 14:73:6d:81:26:97:e1:f0:c1:ef:44:a1:65:2d:b4: 86:90:54:71:79:06:70:ec:9f:fe:4e:b9:df:51:91: 9f:28:bb:70:74:97:9d:1f:71:33:d6:7e:3c:c2:b1: d9:2c:16:fe:07:e8:ea:12:de:2a:ce:58:59:07:eb: 4f:8d:70:51:02:a5:db:64:64:00:84:81:ae:5d:18: e3:07:38:a0:70:0e:18:51:94:f2:7d:02:b0:ca:d5: b1:97:a3:26:1e:bd:73:cd:17:f0:53:d7:75:52:3e: f5:db:05:af:47:43:fe:ad:83:bd:06:54:fe:64:db: 02:d4:1b:42:fc:e2:f0:04:df:e3:e0:0e:65:7f:fe: 2a:f9:98:47:35:a9:8d:4c:85:c9:78:ae:0c:7f:21: 65:26:4c:2f:b5:47:c6:b9:01:ba:44:4b:fc:f3:8f: 13:b4:e3:7a:b3:80:97:df:15:bd:06:28:6d:4a:23: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:24:AC:58:C2:00:78:86:B5:8C:5D:B3:CA:F2:FD:6F:E9:30:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2280e5a2-e1a6-3762-992b-b9f20f648560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2c:03:44:4f:e0:04:3e:e1:78:34:aa:a9:74:5d:3d:aa:04: 67:ab:f0:78:de:46:36:58:3d:10:7b:ba:81:f7:ba:fb:f2:db: fe:f5:b1:66:a2:c8:ec:de:af:7e:9d:32:30:2f:c0:e2:30:5a: b8:1d:7f:57:20:56:df:5c:0b:50:98:fd:3b:78:85:11:5d:73: 89:47:b8:bd:d2:cf:34:91:81:8e:24:8a:df:4b:69:62:04:0e: 60:85:14:97:4c:61:e9:a3:5e:b3:7b:03:83:2e:8c:f9:3f:38: b4:62:44:db:a5:3b:f8:f6:44:c7:91:51:89:99:3e:9e:36:23: b4:f4:14:f5:38:a7:7f:7f:f8:6c:89:8c:15:7d:64:63:70:0c: 25:f9:6e:4a:62:bf:35:14:77:76:34:99:24:3f:5a:be:f9:f2: 76:82:80:e6:c5:32:bd:38:b2:8c:bc:24:24:49:98:bc:19:c2: b2:eb:11:e7:bf:d2:1a:c9:62:c2:d0:d6:0b:17:a9:43:06:ff: 41:c6:0a:ab:68:37:f0:42:5a:0e:0d:05:8a:86:12:18:38:78: a9:44:2e:91:30:88:ee:b3:1f:91:0d:17:34:e6:09:4c:bc:b3: cf:a9:2a:d9:53:6d:e1:1f:9d:1a:45:03:6c:6e:b9:8b:3f:61: bb:5f:be:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebXY99EXnk9Y5F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjEzMzBiNDEtOGUzMy00MDM3LTg5MDYtZTdmMTdhZDcxN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtq4Iz6ggr3EbnYAVL+BWpCcImoQHM+yJpXe mGZOHRnoJVzbOAORlLqn0At0gE5mZsRA22A+lfRsbzfXh2FF/J2e6lEbG6xG32YU c22BJpfh8MHvRKFlLbSGkFRxeQZw7J/+TrnfUZGfKLtwdJedH3Ez1n48wrHZLBb+ B+jqEt4qzlhZB+tPjXBRAqXbZGQAhIGuXRjjBzigcA4YUZTyfQKwytWxl6MmHr1z zRfwU9d1Uj712wWvR0P+rYO9BlT+ZNsC1BtC/OLwBN/j4A5lf/4q+ZhHNamNTIXJ eK4MfyFlJkwvtUfGuQG6REv8848TtON6s4CX3xW9BihtSiMFnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERXJKxYwgB4hrWMXbPK8v1v6TC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI4MGU1YTItZTFhNi0z NzYyLTk5MmItYjlmMjBmNjQ4NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMsA0RP4AQ+4Xg0qql0XT2qBGer8HjeRjZYPRB7uoH3uvvy2/71sWai yOzer36dMjAvwOIwWrgdf1cgVt9cC1CY/Tt4hRFdc4lHuL3SzzSRgY4kit9LaWIE DmCFFJdMYemjXrN7A4MujPk/OLRiRNulO/j2RMeRUYmZPp42I7T0FPU4p39/+GyJ jBV9ZGNwDCX5bkpivzUUd3Y0mSQ/Wr758naCgObFMr04soy8JCRJmLwZwrLrEee/ 0hrJYsLQ1gsXqUMG/0HGCqtoN/BCWg4NBYqGEhg4eKlELpEwiO6zH5ENFzTmCUy8 s8+pKtlTbeEfnRpFA2xuuYs/Ybtfvhc= -----END CERTIFICATE-----Generated at Mon Apr 7 03:58:18 2025 by rpki-client