$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aee5430-4f8c-36d6-8f65-597c06c1e405.roa File: 4aee5430-4f8c-36d6-8f65-597c06c1e405.roa (raw, json) Hash identifier: UC5sPDWLpfmV0NaI1VxmDI6WrWzRUA475pPMSWU04Vc= Subject key identifier: 80:2F:1F:B1:58:3C:8E:48:01:48:77:B5:5B:06:7C:FE:7B:E0:CE:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848AF2BB2A53DC23BFAB3066700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aee5430-4f8c-36d6-8f65-597c06c1e405.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 33661 IP address blocks: 68.84.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:b2:a5:3d:c2:3b:fa:b3:06:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=c262f1a9-c989-426e-bc18-e18ceb8d5670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:5d:59:ef:46:3e:60:3b:7c:0e:23:1d:87: 93:99:3c:47:4e:80:ba:8f:02:60:3c:84:d5:87:b4: 6c:89:10:94:0c:cd:20:75:24:54:a0:47:68:fc:0b: a6:5a:1d:37:15:f4:dc:69:b0:75:9b:73:ae:fa:e6: f3:a1:35:6c:22:17:0f:2b:ba:a4:cf:66:c6:5b:6d: 1a:64:e2:97:65:8a:84:41:1c:b4:87:d3:49:c2:6d: 3c:92:6d:24:df:2a:cf:3c:a8:8f:12:79:ae:e0:da: da:db:0c:c1:74:2a:11:c1:40:f1:2a:10:82:fb:19: 10:38:2b:3c:cd:74:ce:5b:d0:af:71:9a:4d:a3:5a: 71:b0:90:cb:8a:f1:e5:f7:06:8b:5a:67:8e:a1:4e: 10:7d:77:de:48:0b:06:e0:ca:a3:20:36:a6:35:43: ab:76:af:53:bf:b9:ea:f2:0b:d9:89:f5:4b:89:d4: 33:41:a3:8a:3d:e8:f8:4a:19:d0:c1:9d:08:80:2b: c0:3e:5c:41:1e:68:1f:42:c1:06:6e:ad:9c:96:c4: 42:b0:ea:78:da:66:8e:14:fb:48:91:7f:0a:e9:75: 22:3a:98:04:23:1b:97:2c:ef:c8:4d:42:18:dc:ec: c7:d5:8b:ed:5a:d9:8e:fe:93:47:fc:e1:1b:b9:56: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2F:1F:B1:58:3C:8E:48:01:48:77:B5:5B:06:7C:FE:7B:E0:CE:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aee5430-4f8c-36d6-8f65-597c06c1e405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:7d:11:fd:cb:80:81:5c:7d:58:10:d2:72:ff:fd:19:ec:36: e0:15:ee:f3:16:f8:27:8c:e2:57:a7:dc:05:3c:c4:be:fa:37: 71:c8:e7:f4:00:73:b3:be:3d:c7:a6:81:bd:89:9c:ad:5a:8e: 81:e4:69:27:dc:76:32:f9:14:24:5a:b3:2d:14:93:8e:92:0e: cd:53:08:69:73:19:6c:bb:1e:5f:b2:3b:4b:a1:8b:d6:ab:5d: fc:2c:79:b2:34:ff:49:cc:f9:a0:1c:bf:a5:dd:ae:97:b6:5c: 97:e6:82:dd:dd:7b:fc:bc:cb:df:26:63:6b:d7:68:20:ff:4e: 77:59:bb:1f:64:0d:c1:fe:eb:b6:14:d8:6e:94:7c:0a:b6:d5: 5b:54:b2:9d:93:7a:90:1e:1a:c7:de:63:36:3c:04:20:b5:fd: 37:56:61:a5:ed:0f:6d:59:f4:f5:4b:6a:40:60:7c:3b:5b:78: 8f:2f:70:b9:26:d5:2f:58:3a:ad:6c:c3:91:e8:81:4d:3c:12: 3d:8e:e6:55:ec:b7:f8:d8:28:0d:29:0d:e6:c6:55:ef:f3:a5: 5d:88:cc:b4:89:b2:d1:cc:3d:de:7f:ef:e3:7e:87:85:63:17: f4:90:11:a9:f1:1f:bd:84:60:b9:a8:7d:65:a0:2d:a8:0f:7d: b1:6f:ff:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK7KlPcI7+rMGZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YzI2MmYxYTktYzk4OS00MjZlLWJjMTgtZTE4Y2ViOGQ1NjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxRdWe9GPmA7fA4jHYeTmTxHToC6jwJgPITV h7RsiRCUDM0gdSRUoEdo/AumWh03FfTcabB1m3Ou+ubzoTVsIhcPK7qkz2bGW20a ZOKXZYqEQRy0h9NJwm08km0k3yrPPKiPEnmu4Nra2wzBdCoRwUDxKhCC+xkQOCs8 zXTOW9CvcZpNo1pxsJDLivHl9waLWmeOoU4QfXfeSAsG4MqjIDamNUOrdq9Tv7nq 8gvZifVLidQzQaOKPej4ShnQwZ0IgCvAPlxBHmgfQsEGbq2clsRCsOp42maOFPtI kX8K6XUiOpgEIxuXLO/ITUIY3OzH1YvtWtmO/pNH/OEbuVaY5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAvH7FYPI5IAUh3tVsGfP574M7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFlZTU0MzAtNGY4Yy0z NmQ2LThmNjUtNTk3YzA2YzFlNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB9Ef3LgIFcfVgQ0nL//RnsNuAV7vMW+CeM4len3AU8xL76N3HI5/QA c7O+Pcemgb2JnK1ajoHkaSfcdjL5FCRasy0Uk46SDs1TCGlzGWy7Hl+yO0uhi9ar XfwsebI0/0nM+aAcv6Xdrpe2XJfmgt3de/y8y98mY2vXaCD/TndZux9kDcH+67YU 2G6UfAq21VtUsp2TepAeGsfeYzY8BCC1/TdWYaXtD21Z9PVLakBgfDtbeI8vcLkm 1S9YOq1sw5HogU08Ej2O5lXst/jYKA0pDebGVe/zpV2IzLSJstHMPd5/7+N+h4Vj F/SQEanxH72EYLmofWWgLagPfbFv/8A= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:07 2025 by rpki-client