$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/300860fd-ad3b-3481-9526-0554dfbe9355.roa File: 300860fd-ad3b-3481-9526-0554dfbe9355.roa (raw, json) Hash identifier: te2ur3z2x/Vh/EnivT7KnU+ii2eLvKspkiTaoCdRzM8= Subject key identifier: 3A:1C:E2:E7:B1:5E:C7:0D:89:99:A0:F2:C2:7C:61:BE:34:4D:5F:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8BA8B3CFA4516839A4080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/300860fd-ad3b-3481-9526-0554dfbe9355.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 75.68.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:ba:8b:3c:fa:45:16:83:9a:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=756ec770-83f3-4d67-97f5-1f8be97243d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:26:02:91:8d:59:ce:8e:71:23:4e:2d:d7: ee:76:f4:04:67:7f:f2:b6:06:fc:2e:f0:9d:d7:8d: ea:ce:02:83:90:b2:d5:45:52:ae:f6:64:a2:4f:1f: 10:e4:43:70:0c:ba:20:5c:09:76:33:6c:74:6b:fe: 68:d8:4c:de:9d:12:97:93:59:16:07:ce:d3:60:e6: 9a:ff:a7:1a:1a:e2:87:e2:3b:a8:18:06:f5:fd:4b: 85:7f:0d:de:14:f7:3c:45:0c:89:4a:88:52:c7:ea: c1:b3:1b:be:63:b2:1e:04:6a:78:bd:fe:6d:be:da: 4e:c2:7a:90:28:1c:f8:4c:b6:a3:62:7b:1c:63:1f: 49:8a:f0:fd:d6:ab:17:35:99:b8:ea:2c:0c:8f:27: 90:dc:81:95:5c:e0:16:ab:88:05:0f:09:42:e7:35: d9:e1:e1:91:f3:32:c4:bb:47:39:bc:30:bc:eb:82: 89:a6:7e:89:4e:2a:26:76:b2:52:5d:38:58:b6:19: bc:d3:90:f2:3f:95:b8:9c:d0:8a:09:4d:7f:bd:d2: 8d:a2:e7:0a:f0:b4:3d:bf:00:ac:19:4b:2f:5b:7b: 7b:51:30:8f:c6:bb:90:d5:c8:f3:19:0c:1e:26:c8: 95:5d:9c:67:b9:b5:a7:16:d3:7b:93:17:c9:db:fa: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1C:E2:E7:B1:5E:C7:0D:89:99:A0:F2:C2:7C:61:BE:34:4D:5F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/300860fd-ad3b-3481-9526-0554dfbe9355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.68.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b4:6c:7f:e7:a5:75:1c:3b:e5:1f:aa:4b:9e:4a:6f:e8:7e: b9:76:40:dd:59:54:52:09:53:eb:b5:1e:a6:f1:7f:90:83:e4: 72:28:27:a0:2d:e5:e8:a9:50:c7:20:24:f5:26:d9:c1:57:a8: 5b:d2:f7:0a:f8:be:ce:3b:5b:9a:15:8b:5e:3c:de:89:47:4f: 57:af:4d:5f:19:17:3e:9b:9d:80:9b:66:d5:18:2e:93:ba:e7: 97:46:44:b3:06:df:30:eb:0d:69:3d:36:bb:20:de:c0:3c:da: 46:c6:01:e0:9d:28:ea:2f:48:09:2f:15:79:7c:b2:d6:88:10: 06:51:b0:aa:cd:e4:0a:22:36:05:3e:5f:d7:3b:22:f7:ad:a8: 7d:5b:23:28:4a:b9:d3:c1:7b:98:ec:63:80:8e:31:98:7e:51: 1c:1d:90:c0:10:cb:6c:28:37:b5:d7:ca:ec:5f:e4:4d:00:a8: 7f:80:34:f1:22:15:a0:f9:4a:70:31:c9:e5:30:a8:70:1b:6b: d7:9e:6e:63:24:d7:f0:0f:b1:9c:c0:c7:61:08:0f:47:a9:cf: 5a:f2:94:2d:9e:1b:d6:bd:b3:e6:65:1b:34:bf:a4:e1:6a:6c: 9b:3f:82:c1:a6:d4:3b:f9:8d:56:61:79:55:c9:d6:55:c2:88: a7:59:69:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LqLPPpFFoOaQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NzU2ZWM3NzAtODNmMy00ZDY3LTk3ZjUtMWY4YmU5NzI0M2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG0mApGNWc6OcSNOLdfudvQEZ3/ytgb8LvCd 143qzgKDkLLVRVKu9mSiTx8Q5ENwDLogXAl2M2x0a/5o2EzenRKXk1kWB87TYOaa /6caGuKH4juoGAb1/UuFfw3eFPc8RQyJSohSx+rBsxu+Y7IeBGp4vf5tvtpOwnqQ KBz4TLajYnscYx9JivD91qsXNZm46iwMjyeQ3IGVXOAWq4gFDwlC5zXZ4eGR8zLE u0c5vDC864KJpn6JTiomdrJSXThYthm805DyP5W4nNCKCU1/vdKNoucK8LQ9vwCs GUsvW3t7UTCPxruQ1cjzGQweJsiVXZxnubWnFtN7kxfJ2/qkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoc4uexXscNiZmg8sJ8Yb40TV9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzAwODYwZmQtYWQzYi0z NDgxLTk1MjYtMDU1NGRmYmU5MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS0QoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE60bH/npXUcO+UfqkueSm/ofrl2QN1ZVFIJU+u1Hqbxf5CD5HIoJ6At 5eipUMcgJPUm2cFXqFvS9wr4vs47W5oVi1483olHT1evTV8ZFz6bnYCbZtUYLpO6 55dGRLMG3zDrDWk9Nrsg3sA82kbGAeCdKOovSAkvFXl8staIEAZRsKrN5AoiNgU+ X9c7IvetqH1bIyhKudPBe5jsY4COMZh+URwdkMAQy2woN7XXyuxf5E0AqH+ANPEi FaD5SnAxyeUwqHAba9eebmMk1/APsZzAx2EID0epz1rylC2eG9a9s+ZlGzS/pOFq bJs/gsGm1Dv5jVZheVXJ1lXCiKdZaeI= -----END CERTIFICATE-----Generated at Sun Apr 6 12:41:26 2025 by rpki-client