$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52d2d50f-828f-300e-a0a7-0c5522792f68.roa File: 52d2d50f-828f-300e-a0a7-0c5522792f68.roa (raw, json) Hash identifier: 1Kys/vb/JYcYaHQ4hRNSaTdh+7Rl52Oau0tZT4SwNdg= Subject key identifier: 5B:4A:DD:9D:DA:0F:7E:0C:56:D8:C2:F7:A3:A0:28:7D:B2:4B:45:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F78F6D4BB19DB508809800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52d2d50f-828f-300e-a0a7-0c5522792f68.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.43.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8f:6d:4b:b1:9d:b5:08:80:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=54deb5aa-bf73-4ec1-b50c-57018973d8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:1e:64:9a:ee:5a:83:1b:09:e1:9b:33:e8: aa:1a:90:3c:eb:66:85:86:91:33:16:1e:28:3f:b5: fc:72:73:70:c8:54:dd:9b:42:01:47:c6:a7:51:ac: 4d:9d:33:96:bc:bc:ae:22:dc:82:fd:82:2b:80:ab: c9:00:be:e3:3e:26:69:84:3b:f6:0b:8e:e2:bb:21: e0:1b:25:c6:59:ad:a1:ed:93:b9:4c:a0:c8:e5:93: e8:aa:8e:cb:f8:c9:65:8a:ea:1f:68:18:81:c4:f2: 69:5e:36:68:41:ba:a1:04:aa:83:2b:47:3b:e4:5a: 01:d9:d1:f4:47:69:5e:9a:6e:26:3e:00:66:a1:af: c0:05:e5:e4:cf:3b:6e:e2:1b:94:86:ec:61:d6:43: 64:78:05:5e:95:b6:bf:af:d9:3f:52:26:7e:29:0c: bd:94:fe:35:86:77:75:2f:2b:81:ae:85:2f:9f:64: c9:e3:52:e6:02:8e:82:d3:81:88:03:93:6e:84:7b: ef:2c:7a:73:f2:68:36:5f:6b:a6:ad:11:d5:bd:b6: 48:28:4c:fa:42:04:0a:0f:62:54:6a:99:ff:86:1c: 55:40:2c:7a:4f:9c:a8:5d:c1:d6:6d:83:1e:0d:5f: 94:6e:af:d2:13:76:15:81:87:fa:e9:85:8c:80:36: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4A:DD:9D:DA:0F:7E:0C:56:D8:C2:F7:A3:A0:28:7D:B2:4B:45:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52d2d50f-828f-300e-a0a7-0c5522792f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:36:44:85:be:c1:fe:31:e4:75:b7:3d:2b:c4:e4:3d:d6:c1: c3:74:23:fb:43:bc:3d:cc:f9:d6:a8:e0:91:f2:43:c1:bc:da: 11:38:a1:0f:c6:10:bb:a9:8c:cc:37:4c:de:ed:11:d3:41:b5: c0:75:ac:67:4d:93:97:2f:39:04:d3:53:01:a3:7a:e0:7e:6c: c3:e5:db:12:fc:26:22:86:2e:16:a7:94:aa:15:3f:9e:95:29: 2d:0d:63:cd:ae:cd:6d:0b:52:7b:55:ae:54:43:7b:c4:95:33: 84:fa:8f:14:d2:fa:96:f8:77:6e:e1:4d:53:b8:f0:b4:f0:db: c3:ea:e3:b4:58:d0:46:8c:70:e8:92:e6:c8:3d:e6:1e:45:ca: 5a:e9:a7:3b:34:75:99:02:76:db:af:81:29:50:02:03:35:3c: 81:5d:0a:b9:d5:3a:ae:be:a4:f3:56:35:93:fe:ce:22:1a:3c: bc:49:14:a8:e0:8f:34:2a:bc:f3:5c:0b:be:65:3b:1c:18:bf: fe:21:a1:9a:de:19:84:41:10:af:01:cf:85:ed:e3:59:ee:a2: 2c:cd:4e:58:c3:67:c7:f4:8e:ba:a6:cd:c5:0c:72:81:e4:57: 86:0e:16:a6:8a:55:59:88:bf:41:06:78:ea:7e:fc:bf:46:53: f2:d5:18:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0949tS7GdtQiAmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTRkZWI1YWEtYmY3My00ZWMxLWI1MGMtNTcwMTg5NzNkOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF0eZJruWoMbCeGbM+iqGpA862aFhpEzFh4o P7X8cnNwyFTdm0IBR8anUaxNnTOWvLyuItyC/YIrgKvJAL7jPiZphDv2C47iuyHg GyXGWa2h7ZO5TKDI5ZPoqo7L+MlliuofaBiBxPJpXjZoQbqhBKqDK0c75FoB2dH0 R2lemm4mPgBmoa/ABeXkzztu4huUhuxh1kNkeAVelba/r9k/UiZ+KQy9lP41hnd1 LyuBroUvn2TJ41LmAo6C04GIA5NuhHvvLHpz8mg2X2umrRHVvbZIKEz6QgQKD2JU apn/hhxVQCx6T5yoXcHWbYMeDV+Ubq/SE3YVgYf66YWMgDa7TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtK3Z3aD34MVtjC96OgKH2yS0WGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJkMmQ1MGYtODI4Zi0z MDBlLWEwYTctMGM1NTIyNzkyZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCu0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB02RIW+wf4x5HW3PSvE5D3WwcN0I/tDvD3M+dao4JHyQ8G82hE4oQ/G ELupjMw3TN7tEdNBtcB1rGdNk5cvOQTTUwGjeuB+bMPl2xL8JiKGLhanlKoVP56V KS0NY82uzW0LUntVrlRDe8SVM4T6jxTS+pb4d27hTVO48LTw28Pq47RY0EaMcOiS 5sg95h5Fylrppzs0dZkCdtuvgSlQAgM1PIFdCrnVOq6+pPNWNZP+ziIaPLxJFKjg jzQqvPNcC75lOxwYv/4hoZreGYRBEK8Bz4Xt41nuoizNTljDZ8f0jrqmzcUMcoHk V4YOFqaKVVmIv0EGeOp+/L9GU/LVGEU= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:11 2025 by rpki-client