$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534abe35-0b9e-384d-8e43-5ca5a8b419d4.roa File: 534abe35-0b9e-384d-8e43-5ca5a8b419d4.roa (raw, json) Hash identifier: Isht8NHDQIlO03xY+fPqpREnqwtP1ljjmz+DpUfBMik= Subject key identifier: AF:21:1E:B6:30:82:A2:02:C3:CC:F1:CB:E0:0A:56:4F:B6:C6:5F:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF42642223F89E9F930F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534abe35-0b9e-384d-8e43-5ca5a8b419d4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.38.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:42:64:22:23:f8:9e:9f:93:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=10f20a4f-c114-4ca2-84df-b8cd5b0a672d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:65:93:d5:b1:35:92:27:3a:87:4f:bf:cf:0e: 12:92:3e:34:a6:ad:a1:35:93:7f:c5:98:8f:22:f6: 5d:55:7e:88:a9:fd:81:da:9e:0a:be:bc:71:c3:3c: 5b:21:f2:24:49:43:04:9f:d9:d9:62:03:ff:a4:9f: 49:0d:d3:28:c4:04:1a:3f:fd:d3:c5:dc:d9:ed:73: ee:d2:ce:69:4c:a9:ae:83:8c:19:d5:a7:b6:ee:42: 76:3b:4d:ae:48:12:21:46:d9:66:7e:7b:76:81:6d: 77:45:47:0c:0d:18:b5:46:f5:9c:a8:4e:47:4a:36: 5f:6b:0c:66:76:9e:07:ea:c5:49:06:b4:31:4a:f0: 7d:fd:53:b9:b8:30:fc:d2:af:8d:70:1d:03:a5:07: ba:c8:34:c7:9e:38:d7:4f:1c:29:e3:d1:78:fb:c4: ce:cb:55:bb:24:74:96:bd:5a:42:75:26:60:ef:32: bb:23:4f:b7:2a:cb:8c:fb:89:51:5f:10:ff:23:78: 68:54:7c:bd:62:0c:46:78:eb:8a:84:47:f6:21:07: 8a:9e:6e:ae:95:cd:0e:05:3c:0e:df:89:87:ee:20: 88:28:26:e3:97:22:bb:b0:b6:4f:50:b4:87:de:d6: d8:69:8c:96:a4:44:7d:84:5e:a5:f6:f8:b2:ec:45: d3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:1E:B6:30:82:A2:02:C3:CC:F1:CB:E0:0A:56:4F:B6:C6:5F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534abe35-0b9e-384d-8e43-5ca5a8b419d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e0:a5:6c:b8:5c:b0:b7:6f:e9:7e:7a:40:86:a9:43:bb:21: 56:6c:42:90:6f:f1:3d:64:40:a8:4e:1b:f3:6c:8c:59:05:62: 30:71:22:ea:82:a8:0e:93:90:e7:47:6e:7b:67:c4:16:83:e2: fd:e9:03:e4:0a:39:d5:2e:a3:c3:f6:25:59:74:ad:49:9c:28: 68:20:c3:6d:99:3d:9a:3e:12:45:60:ce:8f:39:da:04:bc:5c: cc:eb:6d:52:a3:75:c1:c8:4c:54:cf:eb:27:02:4b:94:03:e3: a3:e5:15:94:02:5f:5d:5b:ad:0f:82:fe:d5:5a:d4:ea:56:e7: 0c:ba:06:1e:49:31:a0:7f:02:26:fe:8f:be:aa:f1:43:0b:33: c1:a1:a3:b9:ee:40:cf:07:a2:20:3b:1d:88:ee:47:1f:21:14: 12:e0:6d:f0:45:b7:6a:8c:7f:d5:18:ad:20:f3:54:37:2d:8d: d0:dd:0b:11:21:19:00:bb:5a:82:e6:ad:3b:69:be:bf:72:01: 60:54:f1:70:05:4f:8d:93:df:21:31:43:ad:44:a5:bb:c9:2f: 9f:68:5f:77:e0:ad:ee:63:3c:1e:5e:ff:90:46:5f:66:f0:5d: a4:ec:7f:ba:cd:8c:c3:21:82:c6:80:0e:14:bf:1e:a5:73:ea: 12:19:50:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr0JkIiP4np+TDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTBmMjBhNGYtYzExNC00Y2EyLTg0ZGYtYjhjZDViMGE2NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mWT1bE1kic6h0+/zw4Skj40pq2hNZN/xZiP IvZdVX6Iqf2B2p4KvrxxwzxbIfIkSUMEn9nZYgP/pJ9JDdMoxAQaP/3TxdzZ7XPu 0s5pTKmug4wZ1ae27kJ2O02uSBIhRtlmfnt2gW13RUcMDRi1RvWcqE5HSjZfawxm dp4H6sVJBrQxSvB9/VO5uDD80q+NcB0DpQe6yDTHnjjXTxwp49F4+8TOy1W7JHSW vVpCdSZg7zK7I0+3KsuM+4lRXxD/I3hoVHy9YgxGeOuKhEf2IQeKnm6ulc0OBTwO 34mH7iCIKCbjlyK7sLZPULSH3tbYaYyWpER9hF6l9viy7EXTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8hHrYwgqICw8zxy+AKVk+2xl/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM0YWJlMzUtMGI5ZS0z ODRkLThlNDMtNWNhNWE4YjQxOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvgpWy4XLC3b+l+ekCGqUO7IVZsQpBv8T1kQKhOG/NsjFkFYjBxIuqC qA6TkOdHbntnxBaD4v3pA+QKOdUuo8P2JVl0rUmcKGggw22ZPZo+EkVgzo852gS8 XMzrbVKjdcHITFTP6ycCS5QD46PlFZQCX11brQ+C/tVa1OpW5wy6Bh5JMaB/Aib+ j76q8UMLM8Gho7nuQM8HoiA7HYjuRx8hFBLgbfBFt2qMf9UYrSDzVDctjdDdCxEh GQC7WoLmrTtpvr9yAWBU8XAFT42T3yExQ61EpbvJL59oX3fgre5jPB5e/5BGX2bw XaTsf7rNjMMhgsaADhS/HqVz6hIZUMY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:23 2025 by rpki-client