$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/518e4b9b-a03d-30a5-a105-0102c3d5d1a6.roa File: 518e4b9b-a03d-30a5-a105-0102c3d5d1a6.roa (raw, json) Hash identifier: PfkGtaJraxnvJiAyBxzpiCq1gI6xIFFaL9jBNbXpj0M= Subject key identifier: AA:A6:A8:1C:35:A3:26:BB:BE:74:60:65:21:72:78:FD:EA:BE:B5:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D2D0A92A8B400659D0BA8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/518e4b9b-a03d-30a5-a105-0102c3d5d1a6.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7725 IP address blocks: 68.62.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:2d:0a:92:a8:b4:00:65:9d:0b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ac2cbf76-ede9-48a6-8a4a-559e3e3883af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:26:f0:1e:4a:80:db:a1:cd:7a:d8:01:6d:37: 42:6b:25:55:fe:83:19:ed:c3:07:2c:1e:0e:c5:85: 22:51:f9:a9:9c:87:ae:05:9e:c5:32:3f:51:0e:08: fb:47:79:77:49:d2:a9:2e:27:3b:02:32:4b:9e:df: 2b:c1:df:2c:b0:46:82:01:0f:81:65:70:64:18:56: 2b:eb:0e:01:7b:7f:47:d8:a2:79:ff:81:f5:3a:a2: 34:7d:4a:07:e7:f5:1e:2b:cc:a1:ce:22:f9:86:a7: 0a:48:c5:28:e8:a7:c0:8f:6a:02:50:f4:05:e2:42: 60:69:c3:7e:3c:43:cb:04:0d:53:4a:e3:29:73:27: 0e:aa:39:e9:6e:b3:c3:fb:60:f7:ef:c2:50:c0:86: df:ac:db:4f:d0:63:69:57:d8:4e:ba:9d:cf:61:93: be:f8:90:f5:31:19:bf:a1:14:6a:d7:2e:86:41:d2: 56:77:2e:b4:92:14:05:e3:61:48:52:4b:c0:a6:ff: 94:33:3f:c3:dd:ca:42:19:1b:1c:71:76:ad:84:69: 09:99:b0:30:a8:f1:0d:c5:d9:0e:37:b5:4b:44:e8: 6b:cc:34:d1:72:90:e0:14:d3:bd:96:34:ff:28:6c: b4:3d:c1:5b:23:06:a5:51:00:e0:20:42:42:3e:58: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:A8:1C:35:A3:26:BB:BE:74:60:65:21:72:78:FD:EA:BE:B5:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/518e4b9b-a03d-30a5-a105-0102c3d5d1a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.62.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:50:d4:28:36:74:0b:66:d4:a1:f9:b9:46:3f:73:1f:92:d5: 6e:a8:a5:d9:66:18:78:0c:7e:c8:e9:08:4f:c7:ae:6c:d7:9d: b5:9d:3c:73:36:71:f5:76:6e:93:7a:8d:a6:ff:3a:1d:80:61: 09:ec:29:87:78:cc:66:6f:6c:93:b1:04:b3:2f:bd:3d:5f:a0: a1:c1:54:d6:69:52:6f:86:93:7e:0e:6a:ce:30:fc:c5:53:3d: ee:fe:5f:89:9b:1a:c1:40:fa:e0:9a:c7:85:ce:10:2e:cb:cb: d7:18:64:7e:3f:c3:3a:0c:68:8f:26:62:41:d6:de:45:7a:8d: 73:5d:4d:0f:d8:e9:36:9e:ae:88:64:9e:e5:ee:a0:5c:f5:94: b1:80:1a:b8:92:a5:6d:ba:80:a9:bb:4d:75:38:cd:59:f9:0f: 31:c4:0c:64:c5:6a:01:8b:ba:71:23:e4:8f:52:5d:50:f1:6e: e9:a1:7c:27:4f:d5:49:b0:c9:7a:40:68:1f:a0:cc:2d:6d:de: b9:f8:07:ea:67:5c:ff:90:57:9c:21:a0:a5:45:20:49:05:84: 15:e6:5c:90:f9:ca:cc:ab:25:6f:3c:ea:f0:02:d4:06:e6:d3: c5:96:2e:26:95:81:41:04:c6:4a:5a:07:07:f6:82:95:e9:77: 7d:2f:bf:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebS0Kkqi0AGWdC6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YWMyY2JmNzYtZWRlOS00OGE2LThhNGEtNTU5ZTNlMzg4M2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiibwHkqA26HNetgBbTdCayVV/oMZ7cMHLB4O xYUiUfmpnIeuBZ7FMj9RDgj7R3l3SdKpLic7AjJLnt8rwd8ssEaCAQ+BZXBkGFYr 6w4Be39H2KJ5/4H1OqI0fUoH5/UeK8yhziL5hqcKSMUo6KfAj2oCUPQF4kJgacN+ PEPLBA1TSuMpcycOqjnpbrPD+2D378JQwIbfrNtP0GNpV9hOup3PYZO++JD1MRm/ oRRq1y6GQdJWdy60khQF42FIUkvApv+UMz/D3cpCGRsccXathGkJmbAwqPENxdkO N7VLROhrzDTRcpDgFNO9ljT/KGy0PcFbIwalUQDgIEJCPljBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqmqBw1oya7vnRgZSFyeP3qvrVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTE4ZTRiOWItYTAzZC0z MGE1LWExMDUtMDEwMmMzZDVkMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERD7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlQ1Cg2dAtm1KH5uUY/cx+S1W6opdlmGHgMfsjpCE/HrmzXnbWdPHM2 cfV2bpN6jab/Oh2AYQnsKYd4zGZvbJOxBLMvvT1foKHBVNZpUm+Gk34Oas4w/MVT Pe7+X4mbGsFA+uCax4XOEC7Ly9cYZH4/wzoMaI8mYkHW3kV6jXNdTQ/Y6Taerohk nuXuoFz1lLGAGriSpW26gKm7TXU4zVn5DzHEDGTFagGLunEj5I9SXVDxbumhfCdP 1UmwyXpAaB+gzC1t3rn4B+pnXP+QV5whoKVFIEkFhBXmXJD5ysyrJW886vAC1Abm 08WWLiaVgUEExkpaBwf2gpXpd30vv7k= -----END CERTIFICATE-----Generated at Mon Apr 7 05:55:25 2025 by rpki-client