$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24872bec-4da3-3b93-aca3-2d66c1612e2f.roa File: 24872bec-4da3-3b93-aca3-2d66c1612e2f.roa (raw, json) Hash identifier: IZ35Zzsynr5Gc7eAmiA62+6q+eOdUx+Kb0dr1TtIHZk= Subject key identifier: F5:6B:DE:6E:F1:F1:63:2D:F9:DE:43:56:0B:69:3A:B6:1F:51:AD:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D97C3F2D47CA9E65AF800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24872bec-4da3-3b93-aca3-2d66c1612e2f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33668 IP address blocks: 68.85.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:97:c3:f2:d4:7c:a9:e6:5a:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d4794c3b-d6fe-4a85-96a4-f24c08a0817c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f1:09:90:f7:0c:fe:82:1b:88:19:e3:c3:90: f1:e6:c1:5f:f2:3f:89:d1:d3:c8:fb:09:fa:e4:60: 01:5d:15:d3:b0:b3:a9:f1:a1:96:9b:2a:4f:44:05: 15:59:bd:d1:1c:4a:8a:52:bb:88:35:f5:5d:de:28: 6c:06:1a:49:f2:1c:ba:ba:73:0f:7a:f3:be:4e:a6: 81:a4:68:60:13:b0:ef:52:1b:f7:e0:de:67:ac:48: 8a:17:31:e3:19:7c:42:f7:a5:8c:43:24:8e:0c:31: 46:25:20:2d:be:2f:5e:fd:46:bb:75:cb:21:0b:f9: 70:58:49:d7:26:5d:0c:b8:0d:84:ea:ef:0f:65:42: 22:b8:f0:67:40:fe:f6:26:6b:4e:30:23:7a:c8:3b: da:fa:22:31:8d:3b:06:1b:7a:64:ce:99:0c:d4:ae: 8d:74:64:2f:df:5b:aa:dd:70:c4:dd:4d:a0:5e:66: 99:79:42:4c:67:59:7d:bc:fc:e2:7f:ab:63:e8:d0: 2c:08:96:e7:83:2e:3c:55:73:fd:fd:b7:c3:80:d7: 2d:fe:aa:e3:f3:53:30:ec:c1:16:85:ff:8f:10:c5: 8e:75:b4:30:80:a9:6d:af:5c:7a:a8:f6:af:35:5f: d4:a1:a4:38:3a:2c:35:34:d8:8a:85:e3:15:ab:42: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6B:DE:6E:F1:F1:63:2D:F9:DE:43:56:0B:69:3A:B6:1F:51:AD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24872bec-4da3-3b93-aca3-2d66c1612e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:be:5a:66:fd:10:36:68:17:71:47:7d:60:0f:82:f4:f6:6f: 05:ec:70:26:80:4c:f9:51:df:41:af:22:1d:e7:0e:e1:7a:40: 2e:99:05:95:cb:10:e5:70:cd:bf:3e:7b:3a:f0:d2:be:62:82: b9:c2:ad:ec:2b:6f:21:74:29:68:86:1f:ad:ac:42:89:c7:7f: 10:b1:4d:a7:ce:18:4c:ba:70:f4:b4:56:20:a0:3c:3b:96:cb: f2:20:38:92:ac:2b:7d:68:fd:db:79:4a:86:8a:83:55:a4:5c: f2:f5:4e:c1:e4:6c:04:eb:c6:5c:a4:85:62:61:3b:35:8d:3f: df:e0:28:af:0a:2c:69:31:6b:2f:b9:41:b2:17:24:c9:34:fe: 66:c7:c7:c4:c3:48:f3:39:21:b4:18:e1:64:41:0f:eb:24:91: c5:3c:df:51:2d:6f:cc:94:63:d6:c2:b3:1b:f2:62:08:69:46: a3:d9:10:db:91:61:5a:1f:55:80:a3:03:4e:ce:e8:24:c9:e0: 07:12:e3:8c:18:aa:fe:61:20:65:a0:e0:d7:70:48:72:37:72: 1d:45:96:99:cf:63:7d:af:ab:b3:b9:65:be:cd:72:47:62:6b: 12:2b:58:02:3e:3e:a0:3a:e9:6b:ee:cd:17:4c:90:79:02:86: e1:45:39:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZfD8tR8qeZa+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDQ3OTRjM2ItZDZmZS00YTg1LTk2YTQtZjI0YzA4YTA4MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfEJkPcM/oIbiBnjw5Dx5sFf8j+J0dPI+wn6 5GABXRXTsLOp8aGWmypPRAUVWb3RHEqKUruINfVd3ihsBhpJ8hy6unMPevO+TqaB pGhgE7DvUhv34N5nrEiKFzHjGXxC96WMQySODDFGJSAtvi9e/Ua7dcshC/lwWEnX Jl0MuA2E6u8PZUIiuPBnQP72JmtOMCN6yDva+iIxjTsGG3pkzpkM1K6NdGQv31uq 3XDE3U2gXmaZeUJMZ1l9vPzif6tj6NAsCJbngy48VXP9/bfDgNct/qrj81Mw7MEW hf+PEMWOdbQwgKltr1x6qPavNV/UoaQ4Oiw1NNiKheMVq0IcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVr3m7x8WMt+d5DVgtpOrYfUa0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ4NzJiZWMtNGRhMy0z YjkzLWFjYTMtMmQ2NmMxNjEyZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFXaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq+Wmb9EDZoF3FHfWAPgvT2bwXscCaATPlR30GvIh3nDuF6QC6ZBZXL EOVwzb8+ezrw0r5igrnCrewrbyF0KWiGH62sQonHfxCxTafOGEy6cPS0ViCgPDuW y/IgOJKsK31o/dt5SoaKg1WkXPL1TsHkbATrxlykhWJhOzWNP9/gKK8KLGkxay+5 QbIXJMk0/mbHx8TDSPM5IbQY4WRBD+skkcU831Etb8yUY9bCsxvyYghpRqPZENuR YVofVYCjA07O6CTJ4AcS44wYqv5hIGWg4NdwSHI3ch1FlpnPY32vq7O5Zb7Nckdi axIrWAI+PqA66WvuzRdMkHkChuFFORA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:39 2025 by rpki-client