$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d49e38-c518-3f22-8361-237cfe826e6c.roa File: 23d49e38-c518-3f22-8361-237cfe826e6c.roa (raw, json) Hash identifier: CE6fPwXltUFM0t6WvmBn1fGiwTKY7JTQhoOpoqoCjG0= Subject key identifier: E8:40:6B:8B:A3:B1:2B:E4:B0:90:2B:F3:28:39:A8:7C:EF:FC:22:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB08567A90842036157E8DC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d49e38-c518-3f22-8361-237cfe826e6c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 68.82.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:85:67:a9:08:42:03:61:57:e8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=56c51c8d-5104-4c1b-b266-2e73bb4ef7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:72:f8:c7:38:02:41:4a:9f:a8:c8:71:47: d0:e9:1f:e5:70:3e:a5:5d:d2:89:e4:d0:59:ea:17: ed:86:11:28:f9:6b:95:0c:d6:ec:2b:5d:19:3d:ec: a7:8e:01:20:a9:3d:f2:b4:f5:45:d0:d4:16:d2:e0: 44:2e:51:08:9e:bd:40:1e:58:fd:88:be:53:b2:68: fd:11:f7:bb:c1:98:f0:a3:50:31:8d:23:ad:e1:dd: 7a:c7:e8:a7:6e:46:ca:d5:c9:9d:0f:9a:fd:2b:e7: 97:10:0c:16:91:a8:9c:bb:28:9c:95:23:a5:a0:30: 80:21:ed:a5:15:cd:ce:53:e7:da:54:e4:5f:b0:1e: 33:6c:a0:f7:86:3c:5d:34:a4:a6:f1:11:a1:11:5e: 44:cc:55:7e:dd:68:cb:1c:25:5b:b4:71:32:2e:4b: 09:1b:1d:91:cc:35:ed:dd:fa:50:77:a1:30:1d:0b: 25:22:35:b9:81:8f:96:e1:68:93:d4:e1:bd:b8:54: 95:24:f4:61:71:bb:2c:f7:26:62:28:6b:ab:7f:e6: ae:ff:5e:18:82:1d:f4:d8:ab:27:59:fe:4d:dc:18: f4:94:18:34:9a:fc:07:a9:e7:83:7b:7c:82:e4:90: a3:63:9f:9b:cc:da:0a:f6:ef:a6:a5:9f:41:7c:7a: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:6B:8B:A3:B1:2B:E4:B0:90:2B:F3:28:39:A8:7C:EF:FC:22:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d49e38-c518-3f22-8361-237cfe826e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.82.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:af:a6:df:68:5e:7a:e3:64:3a:71:6f:30:80:c8:82:d8:05: 50:a6:3c:40:69:57:85:65:78:a3:d5:90:e8:10:a6:86:b1:d9: 62:a6:6c:73:6f:7e:a8:67:d9:23:40:f0:94:76:ff:74:66:03: be:ab:4b:26:e4:10:0d:95:e6:d1:da:5a:c6:0f:72:b7:95:1c: 81:35:74:ed:1a:d9:ae:d6:a4:76:ea:06:7c:1e:c6:bb:8d:06: d2:8e:1c:a0:48:97:5a:aa:fe:d7:d6:8d:49:fa:75:f9:38:c2: 87:5f:c7:ce:45:42:44:93:10:fe:5f:1b:e8:ea:9d:95:2c:0d: a6:30:71:68:ff:e2:84:b3:cd:19:cc:cf:0d:ac:1d:fa:1a:45: 5f:a6:f8:37:32:c4:6c:cf:ea:6c:2e:65:04:90:9f:ce:f0:df: 54:b2:5a:4e:82:81:43:fc:49:e3:a5:8c:92:35:66:6f:51:96: d6:30:af:2a:8c:31:80:c1:e6:f4:51:e3:01:4a:92:00:d8:cf: 6b:9d:e7:d6:0d:e5:8e:e3:b7:05:41:66:ef:ca:b7:eb:5f:cb: a4:4b:f4:72:70:68:db:47:ee:5b:1a:4f:58:3a:46:f3:f1:83: 88:70:54:01:a3:94:e4:42:8c:79:26:19:51:3a:7e:84:2a:bb: fa:2f:30:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssIVnqQhCA2FX6NwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTZjNTFjOGQtNTEwNC00YzFiLWIyNjYtMmU3M2JiNGVmN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFdy+Mc4AkFKn6jIcUfQ6R/lcD6lXdKJ5NBZ 6hfthhEo+WuVDNbsK10ZPeynjgEgqT3ytPVF0NQW0uBELlEInr1AHlj9iL5Tsmj9 Efe7wZjwo1AxjSOt4d16x+inbkbK1cmdD5r9K+eXEAwWkaicuyiclSOloDCAIe2l Fc3OU+faVORfsB4zbKD3hjxdNKSm8RGhEV5EzFV+3WjLHCVbtHEyLksJGx2RzDXt 3fpQd6EwHQslIjW5gY+W4WiT1OG9uFSVJPRhcbss9yZiKGurf+au/14Ygh302Ksn Wf5N3Bj0lBg0mvwHqeeDe3yC5JCjY5+bzNoK9u+mpZ9BfHqpxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhAa4ujsSvksJAr8yg5qHzv/CJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNkNDllMzgtYzUxOC0z ZjIyLTgzNjEtMjM3Y2ZlODI2ZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmvpt9oXnrjZDpxbzCAyILYBVCmPEBpV4VleKPVkOgQpoax2WKmbHNv fqhn2SNA8JR2/3RmA76rSybkEA2V5tHaWsYPcreVHIE1dO0a2a7WpHbqBnwexruN BtKOHKBIl1qq/tfWjUn6dfk4wodfx85FQkSTEP5fG+jqnZUsDaYwcWj/4oSzzRnM zw2sHfoaRV+m+DcyxGzP6mwuZQSQn87w31SyWk6CgUP8SeOljJI1Zm9RltYwryqM MYDB5vRR4wFKkgDYz2ud59YN5Y7jtwVBZu/Kt+tfy6RL9HJwaNtH7lsaT1g6RvPx g4hwVAGjlORCjHkmGVE6foQqu/ovMOg= -----END CERTIFICATE-----Generated at Wed Apr 9 18:04:45 2025 by rpki-client