$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48968993-fb21-362a-a7ee-b7a23f0dff24.roa File: 48968993-fb21-362a-a7ee-b7a23f0dff24.roa (raw, json) Hash identifier: ora+WRNTq5fn9JzUsUD4WiNqSo1QmfrNmt92GmGJ/Fg= Subject key identifier: 2F:AE:F4:9F:E0:E7:FF:45:BC:17:3E:11:07:7F:93:D3:59:52:7F:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F78FD66B468AC4066FA9C4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48968993-fb21-362a-a7ee-b7a23f0dff24.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.43.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8f:d6:6b:46:8a:c4:06:6f:a9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=239bc71e-ef8a-4443-af10-d71816e16e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:e2:bf:ca:0e:25:d9:99:34:14:e5:3b:73: 54:55:f0:09:55:8f:83:c6:38:4b:a6:22:fe:9f:56: 38:a6:6c:4c:5f:5c:05:4b:a5:29:3b:2a:68:11:df: a7:5a:cf:58:3d:a9:fb:f5:8e:a2:aa:2e:e1:28:c6: 0e:a1:c5:80:7b:34:f2:24:b4:a4:f5:18:a4:82:0f: 1a:ae:2a:f0:80:33:93:67:02:65:1c:4a:0c:a1:d4: 35:a5:4b:93:65:bf:5b:0b:a8:31:a2:71:32:b2:e3: 9c:d8:61:d5:a7:b0:e5:74:42:8e:86:2d:59:5d:aa: dd:96:46:c8:19:87:96:52:c9:1d:16:79:4b:ef:6d: ad:91:3a:c0:d0:1f:9f:77:e4:31:12:2e:b5:65:f9: 9e:de:62:fb:c6:6c:e5:53:3d:e0:51:33:90:5b:1b: 10:bf:0f:ef:9a:2f:25:b5:95:9f:7d:60:e9:76:c8: 38:c0:ad:00:70:da:3e:aa:da:14:f0:ee:fc:0f:9f: 6b:e1:50:49:42:ca:a6:9b:d4:dd:3c:32:54:db:05: a4:f5:15:01:98:90:ca:27:d2:bd:c6:47:83:52:73: 87:7e:b7:45:d4:86:78:95:1c:61:d5:ee:69:3b:2d: 7b:18:10:f2:45:14:e9:47:22:65:c7:25:fd:7d:84: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AE:F4:9F:E0:E7:FF:45:BC:17:3E:11:07:7F:93:D3:59:52:7F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48968993-fb21-362a-a7ee-b7a23f0dff24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4f:41:d7:25:4f:59:7f:cc:04:d5:7c:1d:31:96:7c:3a:ae: 19:c0:0f:34:35:93:a4:a0:6a:1f:d1:33:ee:b2:74:87:20:02: 65:44:54:61:25:62:a1:ab:4c:d9:89:1a:aa:a0:2f:af:09:19: d7:db:1f:b5:d3:e5:e1:e1:f5:8b:7b:3c:36:41:46:06:a7:02: 80:e8:70:77:c1:98:ad:c5:b6:84:93:26:14:a7:85:0b:3c:98: 0b:81:be:2e:5e:d9:85:29:f8:c1:44:c9:b0:ab:9b:43:0a:df: 81:18:25:c5:4b:a1:23:a7:7c:da:d9:32:4a:23:b8:ab:20:a6: 83:12:20:30:96:16:9a:29:51:a0:5b:e5:77:86:18:77:85:8f: ec:53:cd:56:35:75:be:64:59:88:fe:aa:9a:e1:38:f4:50:2a: 94:a9:83:69:ff:44:70:50:c8:49:c2:ec:63:b5:a2:4b:0f:e4: 36:68:2c:0d:0f:d6:a0:18:59:72:03:51:65:d6:50:6f:12:53: 79:c9:44:01:d4:37:07:34:12:77:af:79:e7:14:e2:43:d5:29: dd:13:a0:cd:e7:1a:65:78:92:d3:66:5e:09:ea:d2:dc:a0:34: e8:84:fa:6c:ff:01:ad:0c:91:a6:be:8b:e2:37:c8:e9:2e:aa: 2b:e6:44:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094/Wa0aKxAZvqcQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjM5YmM3MWUtZWY4YS00NDQzLWFmMTAtZDcxODE2ZTE2ZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmPiv8oOJdmZNBTlO3NUVfAJVY+DxjhLpiL+ n1Y4pmxMX1wFS6UpOypoEd+nWs9YPan79Y6iqi7hKMYOocWAezTyJLSk9Rikgg8a rirwgDOTZwJlHEoModQ1pUuTZb9bC6gxonEysuOc2GHVp7DldEKOhi1ZXardlkbI GYeWUskdFnlL722tkTrA0B+fd+QxEi61Zfme3mL7xmzlUz3gUTOQWxsQvw/vmi8l tZWffWDpdsg4wK0AcNo+qtoU8O78D59r4VBJQsqmm9TdPDJU2wWk9RUBmJDKJ9K9 xkeDUnOHfrdF1IZ4lRxh1e5pOy17GBDyRRTpRyJlxyX9fYRmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+u9J/g5/9FvBc+EQd/k9NZUn+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg5Njg5OTMtZmIyMS0z NjJhLWE3ZWUtYjdhMjNmMGRmZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJPQdclT1l/zATVfB0xlnw6rhnADzQ1k6Sgah/RM+6ydIcgAmVEVGEl YqGrTNmJGqqgL68JGdfbH7XT5eHh9Yt7PDZBRganAoDocHfBmK3FtoSTJhSnhQs8 mAuBvi5e2YUp+MFEybCrm0MK34EYJcVLoSOnfNrZMkojuKsgpoMSIDCWFpopUaBb 5XeGGHeFj+xTzVY1db5kWYj+qprhOPRQKpSpg2n/RHBQyEnC7GO1oksP5DZoLA0P 1qAYWXIDUWXWUG8SU3nJRAHUNwc0EneveecU4kPVKd0ToM3nGmV4ktNmXgnq0tyg NOiE+mz/Aa0Mkaa+i+I3yOkuqivmRBE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:22 2025 by rpki-client