$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa File: 4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa (raw, json) Hash identifier: wviqkq1v+JMFS+qKuN561Bdofl3b1O/DjFlXgD6L6bI= Subject key identifier: 06:4F:E3:4B:DD:69:78:28:C0:01:83:67:A9:9B:37:40:A6:71:4F:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA67BCBCB5BD6435BC54000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 68.47.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:7b:cb:cb:5b:d6:43:5b:c5:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=8cd5bb0d-c795-4401-b96d-0790981ddc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:35:be:b3:92:fb:4f:ef:a5:1a:bb:5d:56: b2:4c:d3:28:19:12:b6:59:c4:e1:62:9d:22:7f:2d: 93:3a:63:66:4a:7f:f4:23:ba:a4:0c:cc:ff:68:0c: 8e:e0:c1:86:bf:d5:b3:cd:5d:e8:bb:02:20:b3:61: a0:4a:a2:0d:53:e0:d1:cd:a6:51:1d:d8:7b:87:ed: 49:b9:17:9b:cf:30:76:43:a8:77:dd:bd:1a:0a:f0: 67:7c:19:ac:01:21:6c:de:a0:bf:ad:a8:46:42:2f: 31:a4:99:58:5d:8f:7f:6d:cf:6c:75:6e:f4:80:8d: e6:99:98:91:62:a1:40:b5:3b:b4:d3:5b:c5:61:bc: 1a:e0:33:4d:a5:94:8e:94:86:cc:6e:c2:ed:39:26: a4:dd:9e:8a:f7:53:48:49:81:e8:a7:0b:bc:11:9d: ac:1f:c2:56:d7:9e:16:42:a8:3e:3b:db:3e:18:32: bf:51:70:27:22:e7:c4:7a:ba:bf:48:12:45:fd:ef: 27:af:b4:17:f7:45:45:ef:9e:92:c8:ec:6c:4c:89: 61:d8:65:29:42:65:0c:e1:18:81:b4:9d:56:ed:f8: 19:0c:cc:6b:54:56:12:67:40:0d:0d:6c:03:b8:fe: 84:05:14:ea:fe:5d:53:b4:b7:5a:b1:71:ea:be:16: 28:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4F:E3:4B:DD:69:78:28:C0:01:83:67:A9:9B:37:40:A6:71:4F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:be:47:a8:ec:6c:c6:4d:4d:d4:ca:bf:c8:48:8f:16:05:b2: 67:13:ca:a8:d6:fc:83:dd:38:29:3d:3a:24:73:77:f0:ba:7e: 97:b8:c8:76:81:93:8d:40:83:3e:cf:8a:39:e1:99:25:f7:8b: 79:ea:40:94:7a:ba:c3:90:a1:db:90:b1:c0:15:57:9f:92:00: 04:68:4b:1a:46:b8:69:54:df:0b:c2:f8:7f:c7:46:22:35:aa: 8d:f7:1d:f5:ac:97:01:7a:13:a8:32:ba:f7:13:c8:55:64:5b: da:7f:07:12:7d:7c:4e:55:c9:5d:74:26:0f:9d:6b:e5:08:3d: 2c:25:39:07:98:be:82:74:8c:5c:31:0f:39:3d:1d:ee:ff:e9: c8:d0:90:08:0e:3e:56:a3:91:4b:5f:16:50:f3:05:a6:cd:da: 4a:5c:09:9c:e6:b3:e1:e9:f8:0f:47:21:e3:b3:58:c0:e3:0e: 9f:10:22:d4:5b:c5:e8:24:08:75:05:b7:22:e1:36:b3:94:b0: 1c:60:19:fd:0b:23:fb:00:98:87:a6:9c:b3:75:3b:dc:86:f8: 0c:aa:01:84:4a:6c:93:fb:9b:6d:c7:e6:6d:73:39:f9:6b:91: e8:7c:08:d9:f3:a6:73:fd:d5:d2:34:bb:e0:2e:00:38:e1:d9: cf:c3:7e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pnvLy1vWQ1vFQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGNkNWJiMGQtYzc5NS00NDAxLWI5NmQtMDc5MDk4MWRkYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFs1vrOS+0/vpRq7XVayTNMoGRK2WcThYp0i fy2TOmNmSn/0I7qkDMz/aAyO4MGGv9WzzV3ouwIgs2GgSqINU+DRzaZRHdh7h+1J uRebzzB2Q6h33b0aCvBnfBmsASFs3qC/rahGQi8xpJlYXY9/bc9sdW70gI3mmZiR YqFAtTu001vFYbwa4DNNpZSOlIbMbsLtOSak3Z6K91NISYHopwu8EZ2sH8JW154W Qqg+O9s+GDK/UXAnIufEerq/SBJF/e8nr7QX90VF756SyOxsTIlh2GUpQmUM4RiB tJ1W7fgZDMxrVFYSZ0ANDWwDuP6EBRTq/l1TtLdasXHqvhYoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZP40vdaXgowAGDZ6mbN0CmcU+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFmZGNjNGMtN2UyZC0z NDY4LTg2MmMtMmI4ZWE3ZjFiYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC9mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6+R6jsbMZNTdTKv8hIjxYFsmcTyqjW/IPdOCk9OiRzd/C6fpe4yHaB k41Agz7PijnhmSX3i3nqQJR6usOQoduQscAVV5+SAARoSxpGuGlU3wvC+H/HRiI1 qo33HfWslwF6E6gyuvcTyFVkW9p/BxJ9fE5VyV10Jg+da+UIPSwlOQeYvoJ0jFwx Dzk9He7/6cjQkAgOPlajkUtfFlDzBabN2kpcCZzms+Hp+A9HIeOzWMDjDp8QItRb xegkCHUFtyLhNrOUsBxgGf0LI/sAmIemnLN1O9yG+AyqAYRKbJP7m23H5m1zOflr keh8CNnzpnP91dI0u+AuADjh2c/DfpI= -----END CERTIFICATE-----Generated at Sat Apr 12 16:10:36 2025 by rpki-client