$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa File: 344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa (raw, json) Hash identifier: fMyp322QtGW7A2p4bDgDau85wvbH1Y0eNQQDQJaPKE8= Subject key identifier: 53:36:68:B6:C3:3C:A4:46:30:16:7F:15:15:2C:4B:DD:DC:4B:62:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B7810375710EBD5C827FE Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.34.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:78:10:37:57:10:eb:d5:c8:27:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=22ca4956-3701-45d5-9b9b-02d56869bd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:5f:8c:b3:48:a5:64:ed:1b:a1:dd:7a:0e: a4:a7:13:33:c9:a3:e7:80:a6:6d:6c:23:4d:6e:7b: 8e:35:e4:43:e3:55:5c:8e:00:34:0a:45:83:db:db: f6:bd:cc:d8:4d:cb:f6:df:12:11:3e:ab:4d:95:21: 49:ac:59:07:33:24:5c:4b:d9:28:84:d6:5a:aa:cc: 26:89:00:b0:f1:ac:cd:1b:fa:a8:bc:42:c9:1a:f1: 17:59:c9:fd:05:05:7c:6c:1a:88:be:65:6e:41:74: e7:35:92:eb:72:b2:63:94:77:85:c9:33:5f:c9:51: 63:48:ae:ff:1e:d1:86:5a:9c:f8:a2:d8:33:46:4f: ba:dd:f5:a6:3e:e0:e4:85:5d:ba:89:2b:7a:5d:9c: c4:49:4b:73:26:4d:33:a6:47:f8:7c:63:ec:3b:6a: 2e:ad:ab:49:d5:b1:75:cb:a4:c4:95:80:2e:9d:48: 21:2d:d9:52:76:53:56:89:2b:f7:68:89:7e:1b:2b: c6:61:ad:a5:18:11:d2:38:bd:7d:a0:18:ab:18:0f: 71:3e:83:ed:fa:6f:c8:da:e9:a0:04:30:20:6d:04: a0:48:92:38:48:9d:00:24:40:b9:7f:09:f4:9a:e0: 87:b7:32:99:13:70:1b:ce:09:60:50:6d:3c:2b:83: 32:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:68:B6:C3:3C:A4:46:30:16:7F:15:15:2C:4B:DD:DC:4B:62:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:60:c3:3f:1d:88:cc:f8:36:cd:13:80:ee:19:ce:93:85:1c: f0:c9:49:00:44:ee:60:8c:f8:c6:8d:d4:44:c7:43:fc:c2:ca: 17:c3:be:7f:49:6b:a1:b1:21:df:69:73:7b:41:64:f7:49:55: e2:15:18:c6:60:a2:02:62:7e:bf:d6:bf:9b:ae:c5:09:68:20: d4:74:b6:85:f4:a2:d7:7d:0d:f7:17:8f:97:91:eb:5f:7f:61: 6b:c8:4d:02:9f:14:e1:e0:c5:bd:63:ca:51:c3:04:da:0d:b9: 40:3c:c8:af:73:fe:0c:20:75:66:9c:7e:f2:cb:ad:a9:cf:72: 2d:0c:c6:f3:a2:63:d7:fe:cb:75:0b:bd:c8:d3:68:b9:5b:00: ac:66:c0:a3:c7:84:4c:be:f5:1b:03:08:af:05:4a:98:f0:2d: d8:48:bb:69:de:7f:85:a4:3e:6c:e2:af:d5:52:76:bf:74:7c: e5:96:e7:7d:0a:33:bf:e9:9b:05:de:78:de:ef:54:34:18:ba: e5:1d:34:fe:5e:1a:3c:9f:14:74:9c:50:c5:1b:c5:0d:29:47: 46:3a:3c:88:49:8d:e2:b7:83:08:91:03:3d:21:ec:0b:1e:75: 98:a2:8b:75:4e:8f:22:8f:6a:c6:b5:35:0f:3c:e3:ab:56:dc: cb:cf:a1:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea3gQN1cQ69XIJ/4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MjJjYTQ5NTYtMzcwMS00NWQ1LTliOWItMDJkNTY4NjliZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPBfjLNIpWTtG6Hdeg6kpxMzyaPngKZtbCNN bnuONeRD41VcjgA0CkWD29v2vczYTcv23xIRPqtNlSFJrFkHMyRcS9kohNZaqswm iQCw8azNG/qovELJGvEXWcn9BQV8bBqIvmVuQXTnNZLrcrJjlHeFyTNfyVFjSK7/ HtGGWpz4otgzRk+63fWmPuDkhV26iSt6XZzESUtzJk0zpkf4fGPsO2ouratJ1bF1 y6TElYAunUghLdlSdlNWiSv3aIl+GyvGYa2lGBHSOL19oBirGA9xPoPt+m/I2umg BDAgbQSgSJI4SJ0AJEC5fwn0muCHtzKZE3AbzglgUG08K4MynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM2aLbDPKRGMBZ/FRUsS93cS2KnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ0NjUyZjgtN2Y4Yy0z OGFkLTk3Y2QtYmY2ZDY0MmUyN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpgwz8diMz4Ns0TgO4ZzpOFHPDJSQBE7mCM+MaN1ETHQ/zCyhfDvn9J a6GxId9pc3tBZPdJVeIVGMZgogJifr/Wv5uuxQloINR0toX0otd9DfcXj5eR619/ YWvITQKfFOHgxb1jylHDBNoNuUA8yK9z/gwgdWacfvLLranPci0MxvOiY9f+y3UL vcjTaLlbAKxmwKPHhEy+9RsDCK8FSpjwLdhIu2nef4WkPmzir9VSdr90fOWW530K M7/pmwXeeN7vVDQYuuUdNP5eGjyfFHScUMUbxQ0pR0Y6PIhJjeK3gwiRAz0h7Ase dZiii3VOjyKPasa1NQ8846tW3MvPoYM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:59:08 2025 by rpki-client