$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e135762-1e30-3274-84f0-4ecaa01a6cc7.roa File: 3e135762-1e30-3274-84f0-4ecaa01a6cc7.roa (raw, json) Hash identifier: zMDFHMfHStr479Dbg0R6dBmKkQKundtVjswmrajz9bE= Subject key identifier: 28:13:C8:4A:85:30:62:CF:71:06:84:8D:AB:EB:3E:1C:6B:88:25:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE92BBCB8430668F3E800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e135762-1e30-3274-84f0-4ecaa01a6cc7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.59.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e9:2b:bc:b8:43:06:68:f3:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=72486fef-99cf-41ec-a5fe-fc68377bf51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:72:26:2e:61:0a:d7:5d:86:14:bf:8b:fb: 77:6c:5e:db:32:ad:86:35:ca:e2:85:7f:2a:95:22: 6a:52:11:74:a4:fb:08:58:85:9f:f3:b9:97:36:7a: ef:5c:31:dd:d3:c0:b9:75:a8:47:bc:70:3c:3b:d5: 60:f9:59:04:f2:53:25:87:52:cf:22:e9:82:dc:fb: ea:07:5a:4d:f5:cb:42:9d:0b:48:fe:6a:ec:6a:bf: 42:03:cb:f4:77:4f:a8:95:7f:ff:ad:f5:3e:34:96: 14:2f:26:d6:9d:ac:39:77:28:a8:af:14:e7:0a:f0: 52:bd:7b:da:78:a1:13:f8:94:25:f5:5a:b3:4d:d0: 8d:e0:dc:42:fe:4b:3b:3c:03:54:f5:33:cb:67:16: 27:39:d3:75:72:00:ad:d3:33:10:a2:e0:3d:69:1c: ab:71:3c:92:61:3b:25:91:0d:60:17:94:3a:c3:6b: 81:4f:e5:c5:04:5a:26:f8:8d:38:ef:8b:2a:ff:c5: 35:92:cc:fd:2d:4a:43:a1:fd:08:2b:49:72:2f:23: 6e:27:28:bd:9e:9a:b5:30:3f:03:75:7f:1f:0c:49: 6a:4a:21:3d:32:cb:06:60:21:96:58:f7:9b:0f:e5: 16:0b:f1:04:24:d4:5b:5a:b5:8c:0e:31:1a:61:1f: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:13:C8:4A:85:30:62:CF:71:06:84:8D:AB:EB:3E:1C:6B:88:25:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e135762-1e30-3274-84f0-4ecaa01a6cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bb:f0:2b:d8:89:a8:84:d5:26:d3:bf:5b:fb:2c:20:67:f5: 31:b7:c0:b6:80:b1:ef:3f:b1:85:bd:c0:a3:b7:46:5a:b4:8f: fa:34:a7:04:86:24:66:55:83:a6:f3:3f:4f:c8:d5:4a:86:42: 12:cb:11:3a:22:57:6f:8d:95:77:bf:44:7d:a2:34:ba:9d:42: fc:0b:48:c6:95:55:a6:1f:a1:33:d1:34:84:a8:fb:64:8a:6e: 53:4a:4b:49:e4:3f:13:82:4d:d5:6e:ea:09:7b:d7:fb:3b:a9: d7:22:e7:6b:01:52:da:61:39:38:3d:6d:a2:24:0f:1d:ea:a0: cf:77:63:72:f7:ba:50:00:47:18:0b:c5:ff:4f:72:cd:d5:c4: a3:e8:6d:4a:44:8b:27:96:9c:fd:8b:a5:9f:40:4d:b3:7a:8e: 9f:e7:b9:df:4b:60:cc:72:23:9a:be:bc:e5:8e:38:b6:84:07: c2:a9:0f:f6:51:dc:dc:83:53:04:91:81:83:98:97:34:f3:7c: e1:64:eb:45:76:d7:bc:ea:c2:f8:2e:ff:a5:08:c5:ff:ba:c7: 7b:59:c7:69:9b:8b:56:96:5e:93:fd:83:85:90:ce:63:22:70: 08:1e:06:5a:a6:4d:46:17:24:b8:a0:57:58:8f:43:33:0a:58: d2:7d:3c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOkrvLhDBmjz6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzI0ODZmZWYtOTljZi00MWVjLWE1ZmUtZmM2ODM3N2JmNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4lyJi5hCtddhhS/i/t3bF7bMq2GNcrihX8q lSJqUhF0pPsIWIWf87mXNnrvXDHd08C5dahHvHA8O9Vg+VkE8lMlh1LPIumC3Pvq B1pN9ctCnQtI/mrsar9CA8v0d0+olX//rfU+NJYULybWnaw5dyiorxTnCvBSvXva eKET+JQl9VqzTdCN4NxC/ks7PANU9TPLZxYnOdN1cgCt0zMQouA9aRyrcTySYTsl kQ1gF5Q6w2uBT+XFBFom+I0474sq/8U1ksz9LUpDof0IK0lyLyNuJyi9npq1MD8D dX8fDElqSiE9MssGYCGWWPebD+UWC/EEJNRbWrWMDjEaYR9G6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgTyEqFMGLPcQaEjavrPhxriCX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UxMzU3NjItMWUzMC0z Mjc0LTg0ZjAtNGVjYWEwMWE2Y2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDvJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG78CvYiaiE1SbTv1v7LCBn9TG3wLaAse8/sYW9wKO3Rlq0j/o0pwSG JGZVg6bzP0/I1UqGQhLLEToiV2+NlXe/RH2iNLqdQvwLSMaVVaYfoTPRNISo+2SK blNKS0nkPxOCTdVu6gl71/s7qdci52sBUtphOTg9baIkDx3qoM93Y3L3ulAARxgL xf9Pcs3VxKPobUpEiyeWnP2LpZ9ATbN6jp/nud9LYMxyI5q+vOWOOLaEB8KpD/ZR 3NyDUwSRgYOYlzTzfOFk60V217zqwvgu/6UIxf+6x3tZx2mbi1aWXpP9g4WQzmMi cAgeBlqmTUYXJLigV1iPQzMKWNJ9PEo= -----END CERTIFICATE-----Generated at Mon Apr 7 09:55:15 2025 by rpki-client