$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa File: 3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa (raw, json) Hash identifier: qpcbRDejYdkeyHXk6l1JoGF/eDhtaXF7GedKrivpd7U= Subject key identifier: AF:0F:F9:66:A8:81:DF:C6:74:3E:CC:0A:59:F2:71:35:23:5A:6B:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F784F8EA0BF11619189DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.36.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:84:f8:ea:0b:f1:16:19:18:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b133dadb-7e70-4075-8e62-4b279cfbb4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:ec:76:01:7f:36:2c:aa:6d:15:c6:ec:a6: eb:eb:e2:1e:af:d5:b0:56:ea:94:34:81:bd:e5:31: b1:b6:2c:f9:af:35:72:98:e5:8d:ae:42:65:aa:39: 18:a9:17:b5:47:c5:35:38:fa:e5:29:fd:1b:31:ad: f8:b5:e2:b9:7d:bb:0e:fb:4a:11:61:e8:63:ff:fc: 7b:17:ce:cc:d3:9b:48:82:a1:9f:9e:45:51:8a:ae: c6:ba:52:b3:16:9a:7a:f3:7d:68:87:0e:00:82:be: 93:ea:6f:f4:c8:4a:ec:0c:39:44:1b:66:e7:c9:90: a3:11:5f:3f:73:19:d9:ce:6f:bf:5f:0e:af:70:dc: 0c:df:e3:56:57:3c:5a:2f:d4:cb:3c:70:f2:65:49: 16:ce:8c:b6:0d:a2:71:42:05:5f:2f:0c:d9:fa:ed: ab:c9:66:60:2a:bb:71:db:89:76:54:f6:af:66:2f: fc:c3:5c:48:c8:36:07:89:49:0b:9d:26:2a:18:b8: 69:8b:21:e9:ae:46:15:06:e0:98:de:e0:23:ba:a5: e1:7b:66:62:a3:ff:80:3c:12:62:da:1e:bd:37:23: 10:cd:a9:f3:e5:86:54:a5:ab:90:a3:18:e3:a5:eb: 58:9a:e7:f7:e5:fc:e8:6e:b4:63:b5:c6:72:35:47: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:F9:66:A8:81:DF:C6:74:3E:CC:0A:59:F2:71:35:23:5A:6B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1c:44:9e:9c:e1:72:17:aa:71:b2:04:cc:50:b9:df:0a:84: 37:8b:75:07:4f:10:d5:27:70:6a:ca:b6:ee:a1:49:28:47:11: 23:7c:48:cd:13:15:7c:25:aa:63:5e:bb:12:6e:c2:0a:56:4d: d0:b6:31:37:a7:54:c5:6c:e2:e8:52:d9:39:7a:ac:5b:4e:97: 27:cd:a4:29:2f:21:10:03:6e:fd:6e:d4:75:e2:6b:fd:9a:25: d8:83:24:d0:5d:0b:73:a7:cb:c4:39:f7:5c:f3:d7:f2:8d:fd: 68:64:40:4b:80:94:f0:0f:47:38:84:2e:74:46:75:41:03:9f: 7c:bf:c8:d6:76:ec:7c:8a:36:a7:ef:2d:f7:6f:30:d0:70:a6: d5:7a:f6:0b:bb:69:25:20:33:35:96:34:85:05:81:e7:2e:82: 9f:39:97:54:e4:58:83:3f:2a:ad:0e:bc:d8:78:3d:55:23:32: 20:90:f1:a0:7c:26:7d:6a:77:5d:35:09:76:b3:2d:73:d4:7b: 03:48:f6:55:e1:04:91:a4:84:9b:21:ee:eb:12:0e:61:99:03: 41:9f:5c:e9:26:89:6b:35:1c:53:24:a9:65:52:24:06:01:d8: bb:c9:ec:90:d2:d3:b0:81:de:ae:55:5d:25:3b:0f:4f:2e:7a: 35:38:fd:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094T46gvxFhkYncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjEzM2RhZGItN2U3MC00MDc1LThlNjItNGIyNzljZmJiNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKXsdgF/NiyqbRXG7Kbr6+Ier9WwVuqUNIG9 5TGxtiz5rzVymOWNrkJlqjkYqRe1R8U1OPrlKf0bMa34teK5fbsO+0oRYehj//x7 F87M05tIgqGfnkVRiq7GulKzFpp6831ohw4Agr6T6m/0yErsDDlEG2bnyZCjEV8/ cxnZzm+/Xw6vcNwM3+NWVzxaL9TLPHDyZUkWzoy2DaJxQgVfLwzZ+u2ryWZgKrtx 24l2VPavZi/8w1xIyDYHiUkLnSYqGLhpiyHprkYVBuCY3uAjuqXhe2Zio/+APBJi 2h69NyMQzanz5YZUpauQoxjjpetYmuf35fzobrRjtcZyNUf9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8P+Waogd/GdD7MClnycTUjWmuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg4OGMzYjYtYzQ4OC0z YWE4LWI4ZjAtODRkYTViNWM2YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUcRJ6c4XIXqnGyBMxQud8KhDeLdQdPENUncGrKtu6hSShHESN8SM0T FXwlqmNeuxJuwgpWTdC2MTenVMVs4uhS2Tl6rFtOlyfNpCkvIRADbv1u1HXia/2a JdiDJNBdC3Ony8Q591zz1/KN/WhkQEuAlPAPRziELnRGdUEDn3y/yNZ27HyKNqfv LfdvMNBwptV69gu7aSUgMzWWNIUFgecugp85l1TkWIM/Kq0OvNh4PVUjMiCQ8aB8 Jn1qd101CXazLXPUewNI9lXhBJGkhJsh7usSDmGZA0GfXOkmiWs1HFMkqWVSJAYB 2LvJ7JDS07CB3q5VXSU7D08uejU4/fE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:44 2025 by rpki-client