$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa File: 3f565052-6fb7-344c-a078-74109cb6e7b0.roa (raw, json) Hash identifier: NExXkWHQCg63LDiuudkpMyVp5N5DUtyJ0LGtPE5EB2o= Subject key identifier: E3:5E:E2:22:26:E9:D2:65:FF:0E:69:25:1C:2F:9E:84:6C:79:3C:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BEDAFCAF68BE139742340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33650 IP address blocks: 68.86.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:ed:af:ca:f6:8b:e1:39:74:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4fbf3b7f-ff17-4d95-9fcb-5be35c35add3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:77:f8:0a:f3:df:92:b2:00:4b:de:a0:cd: 0b:fb:21:9f:71:39:8f:0e:b9:3e:f8:77:c4:28:03: 0e:be:99:39:6f:d5:90:80:41:f4:9a:04:5e:b0:b0: 3b:3c:73:aa:14:9f:f9:bc:61:f2:9e:19:fb:0c:4b: 80:0c:5a:3b:d9:13:e6:f6:53:4a:62:79:9a:84:79: 2d:6a:d7:46:3b:3f:89:06:05:76:4e:80:92:a5:2c: dc:16:ab:a6:36:63:71:a6:c4:59:03:3d:b1:a0:e5: 1d:ee:a8:44:af:e8:bf:60:eb:ad:8d:01:b4:2d:35: 36:31:de:fa:45:7a:a7:46:b3:01:4e:c7:39:cf:61: d2:d5:1f:db:7e:61:8a:ed:89:ac:8d:22:fb:92:29: d6:1e:fe:08:36:69:40:ec:95:60:79:1a:0d:65:7a: da:c7:96:1c:51:fc:38:8a:0b:92:dd:b0:16:7b:51: 45:17:4a:06:0f:fd:26:a1:8d:93:3f:68:f2:24:94: e2:37:c3:11:a3:64:c8:54:c1:5a:7c:1d:91:57:f3: d2:96:3e:c1:f2:a3:f0:fd:d2:21:58:13:a2:fe:d4: 76:04:e7:67:47:a3:77:71:b1:cf:e3:ce:f3:d6:20: 95:23:b2:3d:09:02:6d:dd:12:b4:80:3b:b6:08:66: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5E:E2:22:26:E9:D2:65:FF:0E:69:25:1C:2F:9E:84:6C:79:3C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:65:c7:b5:34:0f:77:a4:79:2f:87:59:06:12:85:e8:f7:15: 2e:5e:65:61:2b:32:8a:64:a5:9e:05:ef:b1:27:05:2c:84:43: a7:01:81:86:92:13:03:2a:28:05:04:95:88:26:95:72:fd:04: ef:0e:3b:e9:82:eb:1f:cf:20:11:16:5e:2f:c3:d6:89:f3:21: 4a:4f:e2:53:79:56:38:40:7d:84:fb:32:dd:4e:9e:17:b9:50: dc:9b:a3:0f:de:6c:5f:af:84:45:c6:16:26:68:d9:99:ab:6b: 65:d7:bc:dc:10:b6:59:be:cd:48:2d:b9:32:72:82:bc:31:c3: 5b:03:33:5e:d0:2b:19:e0:d3:42:8b:8f:eb:14:a8:24:49:ce: 23:8e:23:e5:6e:e9:26:e8:2e:08:f1:af:ed:19:47:33:5e:41: 25:34:43:e2:dc:d6:ed:42:8f:e6:8e:87:5f:99:9f:03:d8:26: 86:13:20:94:b2:84:3e:a8:b2:45:d2:67:e6:31:3c:60:b9:e7: 59:9f:74:71:98:cb:c9:56:25:7b:bb:a9:cb:27:ea:70:07:4e: 92:a2:3b:92:d0:20:9b:fc:23:28:04:fa:61:42:76:97:67:b0: 5c:ea:dc:5e:b6:f8:cf:86:7d:d1:1a:63:bb:b5:87:1a:de:7d: 80:b1:97:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea+2vyvaL4Tl0I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGZiZjNiN2YtZmYxNy00ZDk1LTlmY2ItNWJlMzVjMzVhZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7V3+Arz35KyAEveoM0L+yGfcTmPDrk++HfE KAMOvpk5b9WQgEH0mgResLA7PHOqFJ/5vGHynhn7DEuADFo72RPm9lNKYnmahHkt atdGOz+JBgV2ToCSpSzcFqumNmNxpsRZAz2xoOUd7qhEr+i/YOutjQG0LTU2Md76 RXqnRrMBTsc5z2HS1R/bfmGK7YmsjSL7kinWHv4INmlA7JVgeRoNZXrax5YcUfw4 iguS3bAWe1FFF0oGD/0moY2TP2jyJJTiN8MRo2TIVMFafB2RV/PSlj7B8qPw/dIh WBOi/tR2BOdnR6N3cbHP487z1iCVI7I9CQJt3RK0gDu2CGbq2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONe4iIm6dJl/w5pJRwvnoRseTySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y1NjUwNTItNmZiNy0z NDRjLWEwNzgtNzQxMDljYjZlN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANxlx7U0D3ekeS+HWQYShej3FS5eZWErMopkpZ4F77EnBSyEQ6cBgYaS EwMqKAUElYgmlXL9BO8OO+mC6x/PIBEWXi/D1onzIUpP4lN5VjhAfYT7Mt1Onhe5 UNybow/ebF+vhEXGFiZo2Zmra2XXvNwQtlm+zUgtuTJygrwxw1sDM17QKxng00KL j+sUqCRJziOOI+Vu6SboLgjxr+0ZRzNeQSU0Q+Lc1u1Cj+aOh1+ZnwPYJoYTIJSy hD6oskXSZ+YxPGC551mfdHGYy8lWJXu7qcsn6nAHTpKiO5LQIJv8IygE+mFCdpdn sFzq3F62+M+GfdEaY7u1hxrefYCxl9c= -----END CERTIFICATE-----Generated at Wed Apr 9 12:56:10 2025 by rpki-client