$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d015ee6-3767-397a-a740-c6e1c1fda5f5.roa File: 4d015ee6-3767-397a-a740-c6e1c1fda5f5.roa (raw, json) Hash identifier: wWAtrnzO+3x3Jt5OFnIYoirOXj0O1o7ezCYAjabZamY= Subject key identifier: 84:AF:8E:92:5B:E1:45:1D:E9:59:B8:25:D5:A0:49:53:CD:B7:80:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F79B2B3A9B0A8FDC36AA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d015ee6-3767-397a-a740-c6e1c1fda5f5.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.58.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:9b:2b:3a:9b:0a:8f:dc:36:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=01af1054-2d12-4eb6-bdb3-245eafe86e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:60:5d:74:77:27:af:77:4c:80:29:87:da:68: 75:a7:62:66:6e:8d:62:3c:98:d3:b5:02:5d:99:a8: 7d:7a:bf:d8:81:b9:83:ed:80:5f:fb:7b:70:d3:f6: e0:80:1c:a5:41:42:b3:ac:70:7e:f9:87:aa:e5:33: 75:40:71:15:dc:c8:96:ca:9c:3e:63:29:88:10:d1: f1:82:fc:8c:7e:90:5c:b0:11:1c:bc:76:e5:a1:da: 2f:cd:8f:05:a7:fe:e0:6b:fd:59:0b:b0:77:cc:79: 0f:f4:01:07:ea:4a:cc:da:5f:fc:44:4c:9b:f3:7f: b6:63:a1:e2:a2:f2:00:69:22:88:b0:d4:fa:b0:16: 99:66:93:32:bf:47:ed:fd:91:51:05:05:ee:ce:c6: 70:f4:6b:09:b7:8f:5e:d2:f3:af:70:f1:2b:32:11: ad:34:2c:bf:e4:2f:f4:38:e9:12:27:c9:26:32:b9: d4:09:23:a1:c4:41:68:f1:9e:c8:c2:a6:87:46:e9: 2e:68:7e:eb:78:ae:1d:ba:c6:4d:90:f7:9c:90:b6: 46:7e:68:78:03:cc:85:0b:86:6d:11:9d:24:16:0f: c0:b0:fa:b2:31:ba:2a:e5:2f:ee:10:19:53:98:5d: 20:3c:99:7c:dc:36:42:b1:cf:23:49:5c:65:6c:af: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AF:8E:92:5B:E1:45:1D:E9:59:B8:25:D5:A0:49:53:CD:B7:80:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d015ee6-3767-397a-a740-c6e1c1fda5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:04:31:f0:41:6c:51:fd:3a:f6:80:51:5d:87:14:01:01:5d: 79:bb:39:e5:e4:2c:86:18:ea:57:4c:48:69:c3:c6:59:e5:de: 03:ee:a3:ad:8a:60:90:f1:af:2a:bb:58:00:7c:ee:b1:3c:fa: 11:20:7f:93:ee:8c:76:86:d2:44:3c:ae:09:ee:b1:f2:c6:69: dd:4b:09:0e:e6:de:3e:f0:40:52:bb:a6:8f:f5:91:88:fd:d0: 33:0f:fd:77:86:73:d9:99:76:76:42:f9:f8:f4:78:3b:45:29: a7:56:a7:76:0d:ef:ef:0a:11:d7:10:ec:2a:50:41:2b:85:45: a7:d1:bc:e0:0e:cc:7f:18:d7:16:2a:3c:08:b8:40:c3:21:be: 3c:e5:ff:2a:ba:34:59:17:eb:19:f8:1d:49:c5:07:2d:12:14: 30:a7:fc:84:21:1c:c9:71:e4:ef:ec:f3:cb:08:48:0c:5c:53: 8d:d3:b2:0c:f3:bb:0d:ea:39:fc:1a:a4:57:99:03:df:48:5d: 37:75:b8:12:66:34:84:cc:08:96:77:7c:9b:33:9b:b9:ce:89: a3:74:27:81:64:19:df:21:6d:a8:81:0a:05:ab:59:54:05:b0: 33:b2:19:9f:2b:23:7d:3b:5b:6a:ee:42:2c:2d:35:fe:18:d1: 76:ff:5b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj095srOpsKj9w2qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDFhZjEwNTQtMmQxMi00ZWI2LWJkYjMtMjQ1ZWFmZTg2ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WBddHcnr3dMgCmH2mh1p2Jmbo1iPJjTtQJd mah9er/YgbmD7YBf+3tw0/bggBylQUKzrHB++Yeq5TN1QHEV3MiWypw+YymIENHx gvyMfpBcsBEcvHblodovzY8Fp/7ga/1ZC7B3zHkP9AEH6krM2l/8REyb83+2Y6Hi ovIAaSKIsNT6sBaZZpMyv0ft/ZFRBQXuzsZw9GsJt49e0vOvcPErMhGtNCy/5C/0 OOkSJ8kmMrnUCSOhxEFo8Z7IwqaHRukuaH7reK4dusZNkPeckLZGfmh4A8yFC4Zt EZ0kFg/AsPqyMboq5S/uEBlTmF0gPJl83DZCsc8jSVxlbK8Z9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISvjpJb4UUd6Vm4JdWgSVPNt4D7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQwMTVlZTYtMzc2Ny0z OTdhLWE3NDAtYzZlMWMxZmRhNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgEMfBBbFH9OvaAUV2HFAEBXXm7OeXkLIYY6ldMSGnDxlnl3gPuo62K YJDxryq7WAB87rE8+hEgf5PujHaG0kQ8rgnusfLGad1LCQ7m3j7wQFK7po/1kYj9 0DMP/XeGc9mZdnZC+fj0eDtFKadWp3YN7+8KEdcQ7CpQQSuFRafRvOAOzH8Y1xYq PAi4QMMhvjzl/yq6NFkX6xn4HUnFBy0SFDCn/IQhHMlx5O/s88sISAxcU43Tsgzz uw3qOfwapFeZA99IXTd1uBJmNITMCJZ3fJszm7nOiaN0J4FkGd8hbaiBCgWrWVQF sDOyGZ8rI307W2ruQiwtNf4Y0Xb/W9g= -----END CERTIFICATE-----Generated at Sat Apr 12 17:09:08 2025 by rpki-client