$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45df34e1-4e9a-357d-952e-f72e2e7d4526.roa File: 45df34e1-4e9a-357d-952e-f72e2e7d4526.roa (raw, json) Hash identifier: pRkcHdN2ll2Wa++WdGzaAk237JFp9zWB0iCxM/brb3Q= Subject key identifier: 81:C9:96:79:2A:93:68:C1:50:9E:F1:1B:5A:E0:70:C9:15:84:B7:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F78A687D4C48955C331180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45df34e1-4e9a-357d-952e-f72e2e7d4526.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.40.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8a:68:7d:4c:48:95:5c:33:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ab17e83d-6b42-4a9e-ae34-80596ea1727f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:cf:8b:03:51:cc:44:62:c3:e8:a8:e9:2e: b7:7e:bf:5f:19:16:2d:b0:17:42:5d:19:d1:80:7a: 6d:1c:44:e5:37:b3:bf:fb:c6:48:34:d7:91:41:b4: 33:a0:36:4d:1c:37:79:71:e1:d3:5c:22:d7:0f:14: 0c:2e:23:c3:f4:67:de:4d:38:ab:64:f9:ec:fa:8a: b8:fb:bb:bb:08:52:d5:21:64:9f:17:d6:5e:13:04: 91:5f:44:7e:59:6d:ab:f8:b0:b3:e3:2b:fa:44:c6: 63:e0:a0:be:b6:8a:fa:13:1e:e5:3e:76:63:44:d5: d5:10:08:57:b8:46:13:aa:e6:de:5d:f2:f0:d1:82: e8:e9:17:e4:24:2a:fd:fa:b0:36:0f:24:b5:b9:39: 09:a7:6b:fc:01:50:4a:b9:ba:29:fd:11:ab:8d:e4: 29:45:71:a0:bb:a2:e1:a3:19:39:92:e0:f1:25:73: 1b:ea:36:6f:2d:c2:e3:9e:59:4c:8c:bd:6a:c5:b3: a5:67:fc:4e:f3:4f:41:6d:10:4c:66:c4:bf:ab:a0: 88:ae:8b:b5:1f:6b:47:b3:38:3d:b1:83:61:65:30: 56:b4:a8:de:6f:e0:2c:46:cf:03:08:34:31:63:4d: aa:10:e9:7e:c1:2c:43:c5:bb:f7:4a:06:16:05:b1: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C9:96:79:2A:93:68:C1:50:9E:F1:1B:5A:E0:70:C9:15:84:B7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45df34e1-4e9a-357d-952e-f72e2e7d4526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:81:96:93:1d:1a:b6:64:4e:ef:ec:07:bd:30:87:12:9d:c0: 18:e7:1c:a4:ef:a0:a8:1e:65:b7:e3:6e:e2:cb:70:ad:3b:17: 6f:2e:25:d1:00:0e:72:b4:f7:04:d1:d0:67:35:96:c9:82:1b: 76:f2:fa:21:8c:c4:9d:56:a8:c5:a3:a3:c5:2c:e7:77:0e:6d: 9d:05:c8:df:0c:8a:a9:7f:ac:53:62:74:56:0f:de:56:f8:2c: af:fa:35:17:7a:43:a5:34:74:58:1f:4f:be:c3:8a:4f:3e:84: f0:67:65:08:23:e4:51:55:05:ad:29:19:e1:6b:7b:5d:da:9b: da:b0:69:2d:51:6e:66:15:78:93:74:59:98:7f:d1:f6:48:86: 6c:35:3f:2f:ef:98:8c:e0:8d:fb:96:56:34:dd:cd:cb:22:51: a5:0f:17:0c:a0:41:e8:74:d5:50:72:bd:66:bd:77:f3:78:63: fe:c0:33:fc:5f:4c:84:0e:76:41:69:80:3a:45:13:26:00:15: 75:ff:6d:b5:dd:03:6f:e8:65:7e:11:3f:5b:1d:1a:52:d4:86: 94:81:21:e6:2e:aa:7c:e1:84:6b:b3:10:8d:1d:03:6c:37:13: 21:ca:04:4a:5a:16:14:21:cc:e8:82:a9:49:10:4f:59:66:12: 15:01:f1:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094pofUxIlVwzEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWIxN2U4M2QtNmI0Mi00YTllLWFlMzQtODA1OTZlYTE3MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW3PiwNRzERiw+io6S63fr9fGRYtsBdCXRnR gHptHETlN7O/+8ZINNeRQbQzoDZNHDd5ceHTXCLXDxQMLiPD9GfeTTirZPns+oq4 +7u7CFLVIWSfF9ZeEwSRX0R+WW2r+LCz4yv6RMZj4KC+tor6Ex7lPnZjRNXVEAhX uEYTqubeXfLw0YLo6RfkJCr9+rA2DyS1uTkJp2v8AVBKubop/RGrjeQpRXGgu6Lh oxk5kuDxJXMb6jZvLcLjnllMjL1qxbOlZ/xO809BbRBMZsS/q6CIrou1H2tHszg9 sYNhZTBWtKjeb+AsRs8DCDQxY02qEOl+wSxDxbv3SgYWBbFJKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHJlnkqk2jBUJ7xG1rgcMkVhLd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDVkZjM0ZTEtNGU5YS0z NTdkLTk1MmUtZjcyZTJlN2Q0NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRChUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6BlpMdGrZkTu/sB70whxKdwBjnHKTvoKgeZbfjbuLLcK07F28uJdEA DnK09wTR0Gc1lsmCG3by+iGMxJ1WqMWjo8Us53cObZ0FyN8Miql/rFNidFYP3lb4 LK/6NRd6Q6U0dFgfT77Dik8+hPBnZQgj5FFVBa0pGeFre13am9qwaS1RbmYVeJN0 WZh/0fZIhmw1Py/vmIzgjfuWVjTdzcsiUaUPFwygQeh01VByvWa9d/N4Y/7AM/xf TIQOdkFpgDpFEyYAFXX/bbXdA2/oZX4RP1sdGlLUhpSBIeYuqnzhhGuzEI0dA2w3 EyHKBEpaFhQhzOiCqUkQT1lmEhUB8aU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:56 2025 by rpki-client