$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/401cb693-0313-3900-94a9-29be1ae7e862.roa File: 401cb693-0313-3900-94a9-29be1ae7e862.roa (raw, json) Hash identifier: Wc/vnXgLR05djFwVZiIbprMysEoVIBaFqKHAsWQZxhw= Subject key identifier: C0:DF:79:B8:86:08:AC:85:F9:4A:B8:0A:C9:76:05:03:31:89:40:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B808B55538F5A6FAA1A28 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/401cb693-0313-3900-94a9-29be1ae7e862.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.53.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:80:8b:55:53:8f:5a:6f:aa:1a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5c4b7471-c7e9-427d-9fcc-373da269d93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:fd:a6:8c:5f:db:2c:1d:5d:8e:9f:84:cb: 4f:0b:9c:4c:85:2b:dd:c7:c2:72:c2:fa:ad:a2:7d: 68:3b:89:f0:11:cd:06:03:a4:82:8e:7c:b4:17:a8: a0:b4:7d:72:3c:f1:23:c8:37:f1:fe:2a:77:19:f9: bf:58:1b:d5:2b:97:39:85:f1:66:a1:b8:fc:f9:5b: 50:10:d6:27:7c:57:94:9f:8d:17:c3:90:c7:d2:15: 15:27:60:20:3b:2a:19:4f:df:47:90:3f:0f:b4:6a: 83:63:04:9b:6e:c6:6d:16:8b:fe:04:d5:e0:fe:11: 48:08:06:8a:67:1a:81:f4:78:5c:76:b0:b3:50:c4: 05:5a:b8:5d:73:03:bf:be:81:93:0c:0d:2f:ed:50: 79:48:72:e3:57:9c:8f:40:23:5c:57:63:93:ae:c7: 0f:bc:13:9a:6f:9d:82:87:53:0f:91:2a:fa:ed:ca: be:fc:49:76:fd:f7:fb:92:b8:b8:ac:68:fa:0a:28: e6:7a:bd:5b:cb:c6:08:bd:1b:75:72:67:d6:dc:06: f1:8f:e5:c0:8d:f4:37:52:89:c9:4f:1c:cc:21:61: 4a:f0:58:8a:08:9f:01:5b:2f:bc:f1:74:e8:32:82: 54:99:38:9d:c5:9d:5f:11:d8:b8:8c:b1:ee:55:64: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DF:79:B8:86:08:AC:85:F9:4A:B8:0A:C9:76:05:03:31:89:40:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/401cb693-0313-3900-94a9-29be1ae7e862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:90:11:ef:70:a5:47:16:5c:24:60:78:41:d7:25:f7:16:ad: 11:cc:0d:4e:32:7a:93:e6:ca:f8:36:0b:8f:c9:cd:af:82:8b: 05:f1:9d:ed:02:b3:3c:55:02:ee:2c:23:2a:4e:70:95:c5:14: 52:ff:02:e6:c6:a5:67:c9:2b:a6:c0:ca:e7:0c:9d:43:ea:2d: 10:f5:37:15:03:83:df:90:d3:db:f9:84:15:32:bc:c6:80:2e: b8:45:46:11:e9:1e:cc:55:e7:53:d4:24:a5:b0:02:55:10:56: 93:96:d6:80:b3:67:ff:c3:55:f6:63:ff:6d:7a:33:4f:16:a6: f5:11:9a:69:03:3e:6a:92:d9:47:32:7b:c3:c1:d3:27:2f:47: 72:27:7f:d1:8e:09:dc:76:e5:64:5a:5b:ca:fd:b9:95:52:f5: 36:e7:28:50:a7:54:04:4a:1e:bf:2b:4e:22:26:92:53:94:a3: c4:6e:c9:6b:52:f2:03:b0:f8:27:ab:81:fb:5a:3b:81:7d:c5: fa:c5:7d:ca:68:60:2b:b3:88:c2:94:55:cb:47:27:dc:bc:55: 78:44:7e:cd:ba:2a:a1:5b:29:8f:d1:b4:e9:05:e5:7b:7e:9a: 93:7f:78:df:1b:d3:7d:f8:8e:53:12:af:29:72:c4:34:e4:8b: b3:2d:b3:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4CLVVOPWm+qGigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWM0Yjc0NzEtYzdlOS00MjdkLTlmY2MtMzczZGEyNjlkOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGn9poxf2ywdXY6fhMtPC5xMhSvdx8Jywvqt on1oO4nwEc0GA6SCjny0F6igtH1yPPEjyDfx/ip3Gfm/WBvVK5c5hfFmobj8+VtQ ENYnfFeUn40Xw5DH0hUVJ2AgOyoZT99HkD8PtGqDYwSbbsZtFov+BNXg/hFICAaK ZxqB9HhcdrCzUMQFWrhdcwO/voGTDA0v7VB5SHLjV5yPQCNcV2OTrscPvBOab52C h1MPkSr67cq+/El2/ff7kri4rGj6Cijmer1by8YIvRt1cmfW3Abxj+XAjfQ3UonJ TxzMIWFK8FiKCJ8BWy+88XToMoJUmTidxZ1fEdi4jLHuVWRWPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDfebiGCKyF+Uq4Csl2BQMxiUBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDAxY2I2OTMtMDMxMy0z OTAwLTk0YTktMjliZTFhZTdlODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+QEe9wpUcWXCRgeEHXJfcWrRHMDU4yepPmyvg2C4/Jza+CiwXxne0C szxVAu4sIypOcJXFFFL/AubGpWfJK6bAyucMnUPqLRD1NxUDg9+Q09v5hBUyvMaA LrhFRhHpHsxV51PUJKWwAlUQVpOW1oCzZ//DVfZj/216M08WpvURmmkDPmqS2Ucy e8PB0ycvR3Inf9GOCdx25WRaW8r9uZVS9TbnKFCnVARKHr8rTiImklOUo8RuyWtS 8gOw+CergftaO4F9xfrFfcpoYCuziMKUVctHJ9y8VXhEfs26KqFbKY/RtOkF5Xt+ mpN/eN8b0334jlMSrylyxDTki7Mts7M= -----END CERTIFICATE-----Generated at Mon Apr 7 10:11:31 2025 by rpki-client