$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e520b32-1870-36e3-b96e-1c1dc568e537.roa File: 2e520b32-1870-36e3-b96e-1c1dc568e537.roa (raw, json) Hash identifier: X4IuV0g2tVcDnbBKl+OYIj5SgxWCFfM0YaZruePA+h8= Subject key identifier: 3F:37:92:AC:66:B5:66:04:D9:7A:A0:0A:C8:1C:B7:82:A3:EA:06:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE07C0AE7140477DB6580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e520b32-1870-36e3-b96e-1c1dc568e537.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.52.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e0:7c:0a:e7:14:04:77:db:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=bca09cd8-06e5-47d4-bd96-536a8742289e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:f6:2a:12:7d:57:46:40:75:02:91:14:29: ed:29:05:d0:5b:bd:93:fb:b3:33:b0:de:29:1b:2e: ae:e0:93:ff:18:1e:32:7f:d9:cf:82:87:93:b7:03: 2e:cc:29:ca:96:53:80:81:64:9f:dc:f9:d5:d3:83: 6e:69:53:39:ff:b8:07:2c:d1:fc:af:22:1e:ef:48: e3:b4:c3:26:18:0d:91:c9:e0:b4:6f:df:bd:32:6e: 56:63:f8:69:13:67:fb:04:f4:00:d8:6e:a0:e2:2b: 27:55:53:39:9b:7d:ad:7e:5c:6e:0a:1c:db:b7:17: 6f:f9:7c:fc:f9:75:70:69:1d:03:b8:ef:39:be:4d: 7a:2c:ce:e3:1f:43:01:02:79:17:ea:de:75:c5:5b: d2:f9:bc:a1:28:b9:28:fc:ee:a2:53:91:cc:af:9d: b6:d9:39:36:f4:1f:98:cb:b1:bd:f2:ff:53:97:76: 5e:94:fa:46:71:47:3d:1e:6c:1d:29:0b:e5:5a:1b: 62:e7:9e:b7:30:05:9d:80:ab:f2:55:00:d2:f0:08: 29:9d:a3:99:58:b4:7d:47:88:cb:3f:b2:0c:74:d3: 60:b4:38:b3:5e:34:6c:63:cc:f6:a6:fb:5d:86:ff: 96:1f:a1:44:5f:8f:92:02:11:9d:4f:06:55:b0:50: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:37:92:AC:66:B5:66:04:D9:7A:A0:0A:C8:1C:B7:82:A3:EA:06:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e520b32-1870-36e3-b96e-1c1dc568e537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:98:65:2a:99:a4:67:73:3c:9b:81:09:65:e9:78:78:bc:00: 8a:44:4b:c1:09:5f:65:89:bf:15:aa:2e:2a:be:50:c4:fb:14: 28:be:17:8d:73:16:77:d8:15:24:73:62:b5:b0:4c:d3:d0:05: 9a:c5:bc:4c:e1:a7:68:ae:cf:ed:b1:c6:47:d5:a2:2c:88:16: cd:a4:1d:57:a2:17:5b:36:db:87:c7:c6:01:9b:ac:32:ec:c4: 44:22:fa:c6:d1:80:0f:28:c0:b0:a2:8f:89:40:a6:88:b5:d9: 33:1f:86:e8:13:f2:08:84:52:4c:3e:f9:ac:fd:ae:57:9d:d7: 35:e3:52:21:d4:d0:c1:8d:fe:ee:72:8b:04:fb:e8:1e:d6:19: 0b:0a:70:c0:41:e6:e4:44:7c:f5:19:ff:a9:17:c7:14:e8:dd: 38:16:12:7d:aa:13:ca:48:15:85:88:bf:cb:92:21:df:c7:36: 7e:8b:ef:50:26:5e:46:43:ba:06:f0:8f:8e:ae:00:9c:ac:0f: 86:8e:89:51:c9:0d:2c:7a:76:a6:2c:31:06:24:8e:e4:0a:be: 89:48:41:7a:86:8e:da:c8:bc:e7:0b:91:79:04:f4:4b:83:d8: fd:14:af:28:30:48:ea:fc:c9:ef:e6:88:55:58:b5:4d:26:58: cc:6a:20:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOB8CucUBHfbZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YmNhMDljZDgtMDZlNS00N2Q0LWJkOTYtNTM2YTg3NDIyODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIr2KhJ9V0ZAdQKRFCntKQXQW72T+7MzsN4p Gy6u4JP/GB4yf9nPgoeTtwMuzCnKllOAgWSf3PnV04NuaVM5/7gHLNH8ryIe70jj tMMmGA2RyeC0b9+9Mm5WY/hpE2f7BPQA2G6g4isnVVM5m32tflxuChzbtxdv+Xz8 +XVwaR0DuO85vk16LM7jH0MBAnkX6t51xVvS+byhKLko/O6iU5HMr5222Tk29B+Y y7G98v9Tl3ZelPpGcUc9HmwdKQvlWhti5563MAWdgKvyVQDS8AgpnaOZWLR9R4jL P7IMdNNgtDizXjRsY8z2pvtdhv+WH6FEX4+SAhGdTwZVsFCQSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD83kqxmtWYE2XqgCsgct4Kj6gZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU1MjBiMzItMTg3MC0z NmUzLWI5NmUtMWMxZGM1NjhlNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCYZSqZpGdzPJuBCWXpeHi8AIpES8EJX2WJvxWqLiq+UMT7FCi+F41z FnfYFSRzYrWwTNPQBZrFvEzhp2iuz+2xxkfVoiyIFs2kHVeiF1s224fHxgGbrDLs xEQi+sbRgA8owLCij4lApoi12TMfhugT8giEUkw++az9rled1zXjUiHU0MGN/u5y iwT76B7WGQsKcMBB5uREfPUZ/6kXxxTo3TgWEn2qE8pIFYWIv8uSId/HNn6L71Am XkZDugbwj46uAJysD4aOiVHJDSx6dqYsMQYkjuQKvolIQXqGjtrIvOcLkXkE9EuD 2P0UrygwSOr8ye/miFVYtU0mWMxqIGc= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:43 2025 by rpki-client