$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f1b4d4-c79b-3887-a6fb-13f8536cdf9d.roa File: 28f1b4d4-c79b-3887-a6fb-13f8536cdf9d.roa (raw, json) Hash identifier: 6plbelZA4ZnNFanE97AgzLdeUmtYtQCRvjfn89MIhCU= Subject key identifier: 30:D8:CC:FF:8A:77:C7:0A:75:80:C3:6E:84:E2:BA:09:C4:2D:C2:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F39202FD0DA6B9616600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f1b4d4-c79b-3887-a6fb-13f8536cdf9d.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.62.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f3:92:02:fd:0d:a6:b9:61:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ad875c4d-56b8-40ae-a0d3-6ca6248cae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:9b:2d:5a:a0:d2:42:0c:bb:93:ba:66:85: 0f:71:32:60:78:db:fc:8e:92:f8:1e:2a:c6:e4:a3: 84:0d:79:dc:de:92:6a:26:0d:d3:14:4e:b1:ae:c7: 10:8f:5b:26:3e:ed:1f:49:39:bb:6c:d4:f6:7a:57: 35:cd:9e:d4:3c:7c:73:4b:d8:9f:69:1b:e4:cd:fd: 25:80:4c:ad:58:b5:2c:15:27:41:1a:0b:13:b6:75: c5:a8:61:d9:56:05:57:19:68:07:ec:f4:ec:51:f1: 06:ac:0d:65:4f:52:22:5e:da:89:a7:9c:c5:bf:5d: c8:09:bd:a4:bf:e8:5c:95:92:5f:3d:23:f3:65:90: dc:c4:c6:d6:75:b5:d2:dc:b6:1c:2c:e7:38:1c:88: b7:d4:f9:ac:c6:8e:29:e8:48:c5:b2:34:36:6c:a4: dd:fc:05:5a:d5:53:7f:9e:f9:85:e5:9a:2b:30:37: 14:8f:74:3d:7b:25:b3:6c:90:f4:50:7b:d0:88:19: 69:00:d2:29:ad:a5:90:3b:d7:50:11:61:1f:b2:0d: 7e:16:98:2f:e0:ec:b9:e9:be:16:19:fd:2b:15:a3: 1f:bb:c6:ae:54:7d:6f:67:4f:3f:40:2e:a1:50:c0: a9:3e:97:60:68:7c:b1:86:f8:04:a9:ea:d7:48:f1: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:CC:FF:8A:77:C7:0A:75:80:C3:6E:84:E2:BA:09:C4:2D:C2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f1b4d4-c79b-3887-a6fb-13f8536cdf9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.62.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0f:bb:e6:51:10:1a:69:e1:4a:24:2e:e5:3f:ff:02:e9:6f: aa:e2:9f:f1:1a:45:49:64:97:a4:db:9b:a0:ab:ef:03:af:84: 3a:25:b9:92:58:e9:ea:68:5f:b5:5f:bd:c7:64:ea:43:90:b9: 31:bc:c1:04:58:71:98:36:d9:29:e0:37:67:7f:a8:68:f1:b0: e0:6d:91:a2:3c:a0:8d:f6:5c:4f:17:76:14:70:fa:4b:7e:fb: c5:04:01:26:fa:6f:96:eb:10:64:50:3d:5b:24:ea:5d:87:33: 53:01:a8:61:74:13:46:54:6b:28:c7:c7:45:9f:8d:09:c8:a6: 1c:dc:04:5c:d8:00:45:cf:30:d9:01:f7:52:44:9e:fb:1b:41: 08:4c:8b:c4:59:da:4f:b8:3a:e3:f7:95:2e:4d:b4:2a:07:f9: ca:ea:ea:0c:b0:09:40:9c:42:16:97:fd:b6:c3:b1:b2:30:b6: 73:4f:8b:35:c0:f5:2d:99:b7:a6:f8:07:24:e7:21:68:17:aa: a3:59:ee:5a:bb:07:79:f5:d7:ca:63:61:74:01:2f:7b:16:1e: 27:a4:d9:bd:64:38:50:27:19:57:a7:53:38:e1:6f:9e:c0:72: 80:5a:09:d5:d2:70:7b:1c:e5:85:30:ba:63:48:10:83:e2:f4: 91:10:0c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+POSAv0NprlhZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWQ4NzVjNGQtNTZiOC00MGFlLWEwZDMtNmNhNjI0OGNhZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvGbLVqg0kIMu5O6ZoUPcTJgeNv8jpL4HirG 5KOEDXnc3pJqJg3TFE6xrscQj1smPu0fSTm7bNT2elc1zZ7UPHxzS9ifaRvkzf0l gEytWLUsFSdBGgsTtnXFqGHZVgVXGWgH7PTsUfEGrA1lT1IiXtqJp5zFv13ICb2k v+hclZJfPSPzZZDcxMbWdbXS3LYcLOc4HIi31Pmsxo4p6EjFsjQ2bKTd/AVa1VN/ nvmF5ZorMDcUj3Q9eyWzbJD0UHvQiBlpANIpraWQO9dQEWEfsg1+Fpgv4Oy56b4W Gf0rFaMfu8auVH1vZ08/QC6hUMCpPpdgaHyxhvgEqerXSPHAawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDYzP+Kd8cKdYDDboTiugnELcLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhmMWI0ZDQtYzc5Yi0z ODg3LWE2ZmItMTNmODUzNmNkZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8Pu+ZREBpp4UokLuU//wLpb6rin/EaRUlkl6Tbm6Cr7wOvhDoluZJY 6epoX7Vfvcdk6kOQuTG8wQRYcZg22SngN2d/qGjxsOBtkaI8oI32XE8XdhRw+kt+ +8UEASb6b5brEGRQPVsk6l2HM1MBqGF0E0ZUayjHx0WfjQnIphzcBFzYAEXPMNkB 91JEnvsbQQhMi8RZ2k+4OuP3lS5NtCoH+crq6gywCUCcQhaX/bbDsbIwtnNPizXA 9S2Zt6b4ByTnIWgXqqNZ7lq7B3n118pjYXQBL3sWHiek2b1kOFAnGVenUzjhb57A coBaCdXScHsc5YUwumNIEIPi9JEQDLQ= -----END CERTIFICATE-----Generated at Mon Apr 7 05:47:16 2025 by rpki-client