$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fb4781c-b2a1-3d7d-999b-0e7991f43255.roa File: 2fb4781c-b2a1-3d7d-999b-0e7991f43255.roa (raw, json) Hash identifier: CKXicTBYEdyVtiCyCUYJILOtck/5/+qx2ezfPLO+IM4= Subject key identifier: 57:8B:52:7F:32:77:2D:50:59:89:D1:98:47:EC:D3:61:22:19:1A:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE3F7C49ECBFE11D51580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fb4781c-b2a1-3d7d-999b-0e7991f43255.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.53.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e3:f7:c4:9e:cb:fe:11:d5:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4668078a-75de-4efe-b501-4be4658c6415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6f:c7:7d:d8:e7:d6:c4:eb:40:bc:12:43:8e: d7:d8:fe:42:95:6f:5f:56:c7:76:b6:22:8f:21:0b: 03:c9:46:2d:fe:d0:50:5f:af:3f:48:3f:02:c7:8e: eb:b0:14:ea:7a:41:40:0d:a9:d6:c7:fa:6a:2a:c6: 26:48:f8:a2:17:f7:5c:63:8e:5b:dc:1f:6d:18:49: f6:b0:6d:1b:92:6b:8e:d2:02:1d:66:35:f5:35:c6: 88:1b:03:54:a6:f0:71:57:c5:8a:33:04:2f:e3:f4: 1b:db:e9:b3:86:62:6b:4d:40:37:c6:b9:61:9d:6c: ea:88:4f:1b:ba:eb:49:50:bd:31:1b:24:0b:c6:a0: df:dd:15:69:c0:9f:d2:54:ba:13:4e:65:17:8e:5b: ee:e3:e9:0b:16:2d:65:25:0e:54:5a:8e:79:18:0c: 1d:e5:bb:bf:c1:be:dc:39:d9:66:be:54:38:06:1e: 32:c4:b9:3c:e8:66:b6:39:0f:57:d9:4f:bd:54:d5: 8b:e0:21:c7:71:77:f9:f7:e2:17:18:a1:f3:88:fd: e4:d1:9f:45:7b:c0:8c:a1:21:00:e1:68:02:ca:4a: 28:09:85:e3:3d:37:ff:80:14:61:3b:66:6a:b0:17: c7:8f:fb:2c:09:3b:8e:0c:c1:39:14:0d:c1:a5:bb: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8B:52:7F:32:77:2D:50:59:89:D1:98:47:EC:D3:61:22:19:1A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fb4781c-b2a1-3d7d-999b-0e7991f43255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:80:70:83:9a:47:02:59:ad:a3:d8:0c:fb:46:11:5b:4a:71: ef:69:33:1e:ad:7a:37:94:d4:2a:65:be:4e:c7:2a:a9:5b:d8: 12:a5:c7:5f:d8:45:f4:f1:1d:f4:9b:c2:8d:70:c2:53:28:5f: e7:d9:87:8c:bb:a3:5e:49:3c:39:14:95:81:1e:3d:4f:6a:1f: f6:52:72:e9:21:90:c2:e9:b9:8b:06:66:a2:db:70:5d:74:a1: c4:11:05:be:8f:f1:a8:b0:0e:e4:0b:98:47:64:db:f7:34:1b: 4c:5a:a2:be:5a:83:55:26:9b:f1:01:0a:98:31:fc:45:b1:ce: b3:dd:2d:8f:75:fd:48:c0:64:7c:42:06:4d:c2:31:0e:de:43: fd:be:d2:ea:c8:23:13:e6:02:2e:6f:2d:ee:0a:8d:4c:19:c2: 10:17:7f:5b:1f:11:e4:ab:77:bc:7c:1a:5c:d9:ce:7a:98:a0: 51:fd:b3:cd:c6:01:f9:6f:0f:89:69:9b:75:b0:50:6c:8c:83: 23:5f:a2:4c:e7:39:9e:a6:8c:e4:a0:9b:50:6e:00:fd:61:4d: 07:0b:62:5c:66:84:7c:c8:37:75:a1:47:f4:9a:a5:64:79:20: 5b:7d:2b:5d:36:4a:f5:75:33:83:e5:6a:c2:42:df:07:b4:a9: 28:f7:13:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOP3xJ7L/hHVFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NDY2ODA3OGEtNzVkZS00ZWZlLWI1MDEtNGJlNDY1OGM2NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m/Hfdjn1sTrQLwSQ47X2P5ClW9fVsd2tiKP IQsDyUYt/tBQX68/SD8Cx47rsBTqekFADanWx/pqKsYmSPiiF/dcY45b3B9tGEn2 sG0bkmuO0gIdZjX1NcaIGwNUpvBxV8WKMwQv4/Qb2+mzhmJrTUA3xrlhnWzqiE8b uutJUL0xGyQLxqDf3RVpwJ/SVLoTTmUXjlvu4+kLFi1lJQ5UWo55GAwd5bu/wb7c OdlmvlQ4Bh4yxLk86Ga2OQ9X2U+9VNWL4CHHcXf59+IXGKHziP3k0Z9Fe8CMoSEA 4WgCykooCYXjPTf/gBRhO2ZqsBfHj/ssCTuODME5FA3BpbsSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeLUn8ydy1QWYnRmEfs02EiGRrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZiNDc4MWMtYjJhMS0z ZDdkLTk5OWItMGU3OTkxZjQzMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+AcIOaRwJZraPYDPtGEVtKce9pMx6tejeU1Cplvk7HKqlb2BKlx1/Y RfTxHfSbwo1wwlMoX+fZh4y7o15JPDkUlYEePU9qH/ZScukhkMLpuYsGZqLbcF10 ocQRBb6P8aiwDuQLmEdk2/c0G0xaor5ag1Umm/EBCpgx/EWxzrPdLY91/UjAZHxC Bk3CMQ7eQ/2+0urIIxPmAi5vLe4KjUwZwhAXf1sfEeSrd7x8GlzZznqYoFH9s83G AflvD4lpm3WwUGyMgyNfokznOZ6mjOSgm1BuAP1hTQcLYlxmhHzIN3WhR/SapWR5 IFt9K102SvV1M4PlasJC3we0qSj3Ey0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:00:42 2025 by rpki-client