$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa File: 3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa (raw, json) Hash identifier: +YPVungBAkqVoSOxxitwuSA/jrEsDh/f5bEFlo1q+S0= Subject key identifier: 4D:E0:86:77:04:90:19:E0:25:12:63:9D:26:1B:62:2A:63:2A:66:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C95EE625F394C34B1B6A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 68.35.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:95:ee:62:5f:39:4c:34:b1:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=b24f5464-1a47-4d79-b50b-d42e2e83f57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:ef:6e:9f:a0:7f:b9:14:33:cf:4c:3b:48: aa:fd:1b:1e:19:1c:ec:58:3e:4d:22:58:bc:a4:17: 51:45:a5:2d:0d:06:8d:ab:de:8d:8b:a1:ea:26:97: b0:2f:a2:e9:87:61:0d:cb:e8:56:92:96:46:91:d4: c4:fe:d2:69:8e:10:1e:85:1d:b1:08:bc:98:01:d4: 2c:d5:38:dc:d5:23:7c:85:4c:07:7c:da:d8:69:61: 72:fb:93:83:1e:18:49:2a:7b:4f:61:d4:fb:d8:38: ef:7f:9a:73:77:35:cc:cf:80:b4:1b:04:1e:74:9c: 78:02:b7:92:eb:cf:d9:c7:a3:33:cb:b9:74:93:4e: 70:e9:75:bc:7c:2f:79:48:24:2a:5e:47:cc:a3:70: 95:2e:e6:e7:b1:89:49:f3:45:a2:8c:85:a3:cc:08: c1:8f:73:5c:2e:e6:d0:2a:61:90:06:b1:6f:fc:c3: eb:d2:58:ae:c5:72:76:42:1a:5b:57:5f:1c:93:3f: 9a:ea:2a:54:6d:35:90:f2:d7:6a:17:a2:de:60:5e: 04:a7:2b:aa:c0:ad:ee:b0:00:c0:42:7c:0a:75:0f: ba:c5:fb:11:00:fb:c0:ba:5b:ea:31:23:5a:cd:7b: 1e:df:d1:25:90:de:8f:32:05:63:93:2b:0d:13:7d: 12:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E0:86:77:04:90:19:E0:25:12:63:9D:26:1B:62:2A:63:2A:66:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f8:54:54:c8:f8:ce:f7:cd:a5:98:65:8c:9b:a9:da:58:5a: d5:8c:9e:ba:ba:9c:6a:53:d3:90:c2:28:1b:57:0d:85:11:95: 76:e1:b2:18:52:b0:41:d8:66:0f:62:b1:a3:61:37:bc:63:fe: 1c:ae:2f:0a:a0:9f:35:76:d6:bc:3c:6e:43:cd:3e:29:1b:d8: c0:01:10:a3:d6:22:62:79:18:db:51:a0:70:f9:4f:e8:d8:b3: 57:d6:cd:a8:65:d7:37:26:92:6f:cf:38:ef:80:de:c6:f3:66: 1d:3c:ab:0c:22:df:3d:69:2d:55:0e:b9:51:e7:22:99:cf:a7: 6a:1d:e9:4d:f2:05:a9:94:80:1c:ec:2c:22:30:95:35:09:a0: d2:af:74:78:9f:ad:8b:24:2d:17:a1:04:fe:9d:53:ee:93:9c: 9e:f9:2d:13:c9:f1:8d:45:5d:d2:85:fc:c1:90:2b:c0:88:04: 45:d5:99:b0:e3:4e:e5:ac:55:4f:a4:ce:07:5c:8f:68:d0:1b: 86:dd:6d:6b:92:d3:6b:b7:8b:f8:20:76:0d:96:52:f3:16:22: 80:7b:11:c5:3a:eb:18:d6:4f:99:c9:fc:d9:80:67:b2:91:7a: 72:9d:d3:8a:a2:40:21:f3:86:31:08:dc:94:48:5c:a0:9b:c2: 51:b9:95:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPJXuYl85TDSxtqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YjI0ZjU0NjQtMWE0Ny00ZDc5LWI1MGItZDQyZTJlODNmNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR/vbp+gf7kUM89MO0iq/RseGRzsWD5NIli8 pBdRRaUtDQaNq96Ni6HqJpewL6Lph2ENy+hWkpZGkdTE/tJpjhAehR2xCLyYAdQs 1Tjc1SN8hUwHfNrYaWFy+5ODHhhJKntPYdT72Djvf5pzdzXMz4C0GwQedJx4AreS 68/Zx6Mzy7l0k05w6XW8fC95SCQqXkfMo3CVLubnsYlJ80WijIWjzAjBj3NcLubQ KmGQBrFv/MPr0liuxXJ2QhpbV18ckz+a6ipUbTWQ8tdqF6LeYF4EpyuqwK3usADA QnwKdQ+6xfsRAPvAulvqMSNazXse39ElkN6PMgVjkysNE30ScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3ghncEkBngJRJjnSYbYipjKmbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E0YjljZjktZjM1YS0z ZDViLTgyMzItODI5OGY3ODhmM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn4VFTI+M73zaWYZYybqdpYWtWMnrq6nGpT05DCKBtXDYURlXbhshhS sEHYZg9isaNhN7xj/hyuLwqgnzV21rw8bkPNPikb2MABEKPWImJ5GNtRoHD5T+jY s1fWzahl1zcmkm/POO+A3sbzZh08qwwi3z1pLVUOuVHnIpnPp2od6U3yBamUgBzs LCIwlTUJoNKvdHifrYskLRehBP6dU+6TnJ75LRPJ8Y1FXdKF/MGQK8CIBEXVmbDj TuWsVU+kzgdcj2jQG4bdbWuS02u3i/ggdg2WUvMWIoB7EcU66xjWT5nJ/NmAZ7KR enKd04qiQCHzhjEI3JRIXKCbwlG5lSQ= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:21 2025 by rpki-client