$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39c5f08b-dffe-38be-a55d-e4624da8608e.roa File: 39c5f08b-dffe-38be-a55d-e4624da8608e.roa (raw, json) Hash identifier: bZofunUAh1uQdOxOZUVlAVtIGhkZJIb+1S60pLC4YnU= Subject key identifier: FD:35:88:9A:AF:8D:80:F9:E2:42:52:FD:CB:0A:D9:0E:BA:D3:C4:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7A1A011F6861E42705188 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39c5f08b-dffe-38be-a55d-e4624da8608e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.60.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:a1:a0:11:f6:86:1e:42:70:51:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=396ebc89-2847-41e2-92a6-eefcc87c6cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:88:6e:3d:ee:c1:9f:33:f7:5b:dc:79:52: 09:d1:f5:46:9b:e5:39:0a:58:67:33:f0:98:ff:77: e0:95:10:df:46:20:d2:70:d2:ce:7a:9d:9c:ed:93: f2:09:fd:32:9c:af:e2:10:93:53:18:10:75:6b:83: ac:e8:47:3b:b0:a7:78:f4:e7:cc:cb:f6:c4:40:c1: 36:85:bf:fa:41:86:9e:ef:a4:29:26:c3:6f:11:dd: 58:b2:c1:99:83:1f:50:b9:47:ab:a3:b7:d7:f0:13: c4:aa:a3:75:53:a1:12:13:22:c8:a4:01:73:84:5d: cf:05:94:16:6d:0a:d9:6e:4b:d9:f6:15:9f:5c:8b: 4d:7a:30:55:b6:ff:b0:41:cc:12:a3:c7:66:bf:da: bf:b2:f7:ba:22:88:7e:81:f7:79:c3:a2:45:0f:d3: e3:55:6b:4a:ef:ff:76:fb:2b:99:48:b7:33:a7:bc: 8d:40:66:8f:6c:86:3d:45:ba:e9:6f:dd:4a:d8:1e: 5c:01:79:b8:14:26:e0:b8:58:b7:6d:e9:7b:11:af: 46:7d:a9:e3:d2:12:7f:54:4d:5e:31:1a:97:f0:dc: e3:c9:6a:75:6e:ed:9d:31:23:24:8f:3e:49:91:20: 02:0d:01:a9:18:70:a8:e4:0f:f7:c0:58:21:77:b0: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:88:9A:AF:8D:80:F9:E2:42:52:FD:CB:0A:D9:0E:BA:D3:C4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39c5f08b-dffe-38be-a55d-e4624da8608e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2c:60:da:f1:44:e6:c3:1a:21:e5:ab:80:81:c8:1e:ab:d8: 1e:5e:d6:8d:91:cf:a7:84:b2:7e:66:3d:be:1d:eb:44:05:3e: 51:28:52:d4:49:50:17:69:f7:a2:72:57:10:09:be:b2:90:0e: d9:80:32:55:24:aa:de:3d:fd:09:d0:5a:fa:3f:3a:c8:19:7d: 1c:4c:e1:f3:19:92:9c:27:10:a2:4d:87:07:32:e2:72:59:15: c3:65:00:9e:39:90:5a:1f:10:71:cb:c5:8b:3b:f2:f0:89:10: d3:01:2c:7e:7f:94:84:b8:ce:d6:46:74:8c:51:48:70:38:20: 88:ca:6f:aa:f7:aa:6f:49:c7:e9:bd:77:ac:8f:6d:68:dd:11: 90:b5:75:b3:6c:ab:32:b9:24:96:61:b3:4f:3a:e6:a1:e2:61: 37:6f:7f:10:31:5c:35:6a:96:5b:41:97:56:9d:4d:63:d7:b5: 3b:ce:56:a1:ce:f8:d2:83:a6:43:bd:38:a4:e8:97:e9:86:20: 8c:79:0c:9c:3e:5a:7d:4e:73:9b:5a:47:4e:c1:b1:bf:97:6d: af:d8:59:23:ca:66:ac:33:88:d5:62:0d:6f:79:df:7f:29:2a: cf:39:9c:76:50:3f:ff:f8:97:98:a4:8b:35:3d:a1:31:10:07: 7f:89:1c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj096GgEfaGHkJwUYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk Mzk2ZWJjODktMjg0Ny00MWUyLTkyYTYtZWVmY2M4N2M2Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy6Ibj3uwZ8z91vceVIJ0fVGm+U5ClhnM/CY /3fglRDfRiDScNLOep2c7ZPyCf0ynK/iEJNTGBB1a4Os6Ec7sKd49OfMy/bEQME2 hb/6QYae76QpJsNvEd1YssGZgx9QuUero7fX8BPEqqN1U6ESEyLIpAFzhF3PBZQW bQrZbkvZ9hWfXItNejBVtv+wQcwSo8dmv9q/sve6Ioh+gfd5w6JFD9PjVWtK7/92 +yuZSLczp7yNQGaPbIY9Rbrpb91K2B5cAXm4FCbguFi3bel7Ea9Gfanj0hJ/VE1e MRqX8NzjyWp1bu2dMSMkjz5JkSACDQGpGHCo5A/3wFghd7C29QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP01iJqvjYD54kJS/csK2Q6608SVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzljNWYwOGItZGZmZS0z OGJlLWE1NWQtZTQ2MjRkYTg2MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAsYNrxRObDGiHlq4CByB6r2B5e1o2Rz6eEsn5mPb4d60QFPlEoUtRJ UBdp96JyVxAJvrKQDtmAMlUkqt49/QnQWvo/OsgZfRxM4fMZkpwnEKJNhwcy4nJZ FcNlAJ45kFofEHHLxYs78vCJENMBLH5/lIS4ztZGdIxRSHA4IIjKb6r3qm9Jx+m9 d6yPbWjdEZC1dbNsqzK5JJZhs0865qHiYTdvfxAxXDVqlltBl1adTWPXtTvOVqHO +NKDpkO9OKTol+mGIIx5DJw+Wn1Oc5taR07Bsb+Xba/YWSPKZqwziNViDW95338p Ks85nHZQP//4l5ikizU9oTEQB3+JHCQ= -----END CERTIFICATE-----Generated at Sat Apr 12 15:12:43 2025 by rpki-client