$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a76a945-c37d-3ab9-8e18-fbcdfde96035.roa File: 4a76a945-c37d-3ab9-8e18-fbcdfde96035.roa (raw, json) Hash identifier: xON7cz82G4J0bF3IuIt4BurxR0C0iI45qfuzI7ffYto= Subject key identifier: 7E:63:9E:CE:55:7B:15:2B:7C:3E:39:E3:8B:E7:0E:FA:EB:8F:D5:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F78D5E619371E49A734E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a76a945-c37d-3ab9-8e18-fbcdfde96035.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.42.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8d:5e:61:93:71:e4:9a:73:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=de3f0019-5f0d-46b6-80cb-c183b721c760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d5:78:cf:1a:b4:d0:1a:f8:61:52:bd:99:41: b8:23:bc:c7:cf:2a:a4:45:c5:f1:8c:6d:31:c5:d0: 26:d8:a5:01:ff:8b:a6:a6:3b:26:bb:f3:ae:e8:c9: 14:22:c3:79:48:da:ae:05:df:61:86:72:e2:85:a8: 6c:01:35:27:dc:4e:35:42:48:5f:66:d0:de:d8:06: 5e:a4:f1:09:75:b5:44:98:cf:5e:d5:15:0a:dd:e2: fa:8e:90:b0:7f:8e:3f:73:ac:ad:93:ac:d8:d1:54: 2f:25:9c:00:96:aa:b1:8d:e2:23:a3:a0:00:76:aa: cd:75:fe:ed:3c:9b:a5:8b:9f:12:4a:03:99:6d:56: 1e:f9:88:1d:b3:42:d9:7b:e5:56:00:e9:da:2a:bf: d6:0a:28:e0:65:29:98:2f:6d:ad:db:5d:c3:8c:d3: 13:ee:6b:6a:94:5f:22:0a:82:fc:af:14:dd:a1:f1: 28:6a:51:a0:82:e0:1d:41:37:ec:ad:12:59:61:d1: 82:aa:77:d4:72:13:7e:13:3d:b7:85:45:34:40:4e: e7:15:7d:5f:09:83:fb:51:5b:10:fa:d6:44:bd:4d: 6b:1a:7e:db:7c:40:4f:81:38:f0:85:8e:68:a9:bf: de:3f:d7:a2:ff:4e:61:be:f1:40:2d:55:44:ac:5b: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:63:9E:CE:55:7B:15:2B:7C:3E:39:E3:8B:E7:0E:FA:EB:8F:D5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a76a945-c37d-3ab9-8e18-fbcdfde96035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:67:e1:ad:e7:ea:11:21:49:ef:ff:aa:fa:a8:16:d4:ec:b6: 33:94:f1:f8:8c:97:1d:28:3a:db:e7:08:99:fb:fa:c4:9f:f3: 21:91:55:fe:bf:25:57:56:f7:af:a1:d9:06:fc:d5:8b:1a:9e: f6:90:69:9f:8a:3a:9c:e1:90:06:ea:ba:23:de:c9:37:0e:0a: 1c:2d:77:50:2c:bd:04:40:da:31:f0:18:fd:ee:0c:1e:0d:84: 7d:5d:33:75:f1:a4:ef:d5:6d:47:34:e0:13:74:b7:39:8f:bf: 37:5f:5b:47:7e:ea:1d:66:fb:de:95:0a:d9:7a:af:fd:3a:f2: e7:4a:14:99:f6:0f:ba:20:22:02:ca:51:11:75:31:7a:95:3b: b5:e3:2d:d8:c1:da:40:0e:aa:f8:31:bc:c8:2b:c2:f8:f8:e8: a0:dc:91:aa:d5:c6:23:f3:17:09:4b:dc:18:4d:0d:71:34:00: 28:13:93:31:de:d1:df:9f:1d:eb:6a:7d:56:05:94:0f:18:27: c7:6e:fa:27:4f:b6:32:09:95:03:bd:8a:96:61:01:52:14:a8: a0:db:7b:05:aa:ca:c2:54:ee:ef:c1:e2:bc:43:ce:d8:dd:a9: 12:8c:75:e8:2f:44:a0:65:d1:d7:69:15:78:e2:e3:84:79:35: 5e:9f:0e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0941eYZNx5JpzTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZGUzZjAwMTktNWYwZC00NmI2LTgwY2ItYzE4M2I3MjFjNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dV4zxq00Br4YVK9mUG4I7zHzyqkRcXxjG0x xdAm2KUB/4umpjsmu/Ou6MkUIsN5SNquBd9hhnLihahsATUn3E41QkhfZtDe2AZe pPEJdbVEmM9e1RUK3eL6jpCwf44/c6ytk6zY0VQvJZwAlqqxjeIjo6AAdqrNdf7t PJuli58SSgOZbVYe+Ygds0LZe+VWAOnaKr/WCijgZSmYL22t213DjNMT7mtqlF8i CoL8rxTdofEoalGgguAdQTfsrRJZYdGCqnfUchN+Ez23hUU0QE7nFX1fCYP7UVsQ +tZEvU1rGn7bfEBPgTjwhY5oqb/eP9ei/05hvvFALVVErFsdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5jns5VexUrfD4544vnDvrrj9VlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGE3NmE5NDUtYzM3ZC0z YWI5LThlMTgtZmJjZGZkZTk2MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1n4a3n6hEhSe//qvqoFtTstjOU8fiMlx0oOtvnCJn7+sSf8yGRVf6/ JVdW96+h2Qb81YsanvaQaZ+KOpzhkAbquiPeyTcOChwtd1AsvQRA2jHwGP3uDB4N hH1dM3XxpO/VbUc04BN0tzmPvzdfW0d+6h1m+96VCtl6r/068udKFJn2D7ogIgLK URF1MXqVO7XjLdjB2kAOqvgxvMgrwvj46KDckarVxiPzFwlL3BhNDXE0ACgTkzHe 0d+fHetqfVYFlA8YJ8du+idPtjIJlQO9ipZhAVIUqKDbewWqysJU7u/B4rxDztjd qRKMdegvRKBl0ddpFXji44R5NV6fDgk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:23:16 2025 by rpki-client