$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/540889a5-6a7c-3c77-8972-4e966880de08.roa File: 540889a5-6a7c-3c77-8972-4e966880de08.roa (raw, json) Hash identifier: 0axeydpwkct1kXYz9LneTsEBLSHP1XKg4keFH/ihnm0= Subject key identifier: FD:B4:9F:D6:1C:7A:F3:D4:72:90:3F:7E:E0:68:EA:F4:87:DB:D7:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8E6E4710B9FCAB3C7E880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/540889a5-6a7c-3c77-8972-4e966880de08.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.43.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:e6:e4:71:0b:9f:ca:b3:c7:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=802d69a5-d650-4377-9280-d952c258c780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:5b:87:92:a2:72:69:e0:0f:af:b5:96:0c: e2:9e:02:1d:67:ec:a1:d5:96:f7:d0:c2:56:0e:aa: 51:79:7c:f3:6c:4f:20:1e:80:d8:9f:d4:13:8a:8d: 26:bf:58:f8:c7:e6:54:8a:4f:fc:82:44:88:cb:58: 86:47:7b:dd:dc:92:27:a1:72:38:de:cd:5a:3b:0c: 16:23:64:c1:d2:21:dc:a2:aa:09:91:69:40:af:5b: 3d:ab:7a:97:73:4d:bd:bc:32:65:2e:36:a7:6d:ae: a0:da:97:37:49:91:a2:fe:81:9e:0c:fa:c4:c8:38: a3:b1:54:00:dc:d2:be:3c:ca:04:4c:a5:05:2d:a1: 3b:9c:cf:13:a1:38:34:0e:07:20:aa:ab:07:f7:3e: 1c:22:b7:7d:77:dd:61:7a:b8:50:19:78:16:01:43: cd:29:35:1b:8d:b7:98:bd:b4:1a:bf:bf:f6:c9:dd: bf:76:7f:8a:c2:a8:34:a5:54:ed:10:a5:0c:4d:47: 09:e7:e4:c5:1a:be:ec:13:c8:de:38:4a:2b:19:8c: 6f:8e:65:54:ac:a3:39:86:4e:4c:84:41:27:90:8c: 14:4f:ac:6c:51:f6:32:d9:cc:91:30:ad:38:68:3f: be:46:9b:7d:4d:34:2e:fd:eb:6f:63:3b:7f:69:5e: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:9F:D6:1C:7A:F3:D4:72:90:3F:7E:E0:68:EA:F4:87:DB:D7:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/540889a5-6a7c-3c77-8972-4e966880de08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ae:25:10:00:44:73:e1:ef:c4:e8:17:44:3c:00:25:cd:5f: bd:c1:b3:05:c1:bf:8c:16:92:66:e8:98:d1:1e:20:05:57:b0: 62:2b:66:d4:f2:ae:6c:ba:86:83:16:57:46:57:f6:09:eb:fa: e3:b3:c1:f0:06:2d:16:ac:31:75:ae:a6:cb:33:34:39:f9:ad: 1f:20:ae:81:ee:7c:98:ad:9b:d1:bc:66:00:bb:01:5b:ec:31: 69:8e:69:b5:f5:bf:a5:4c:9b:79:01:cf:ff:a7:86:f9:a9:ab: da:c6:9e:22:fc:f1:da:55:ff:43:dd:30:98:09:e1:18:41:74: 98:e9:f6:8f:d6:d0:34:55:9c:eb:8e:a9:5f:3f:b6:f7:b0:aa: 2b:e1:f1:70:e1:a1:6c:25:8e:45:f3:1d:09:db:ab:38:1e:32: 0e:35:b8:9b:9d:40:c1:08:52:e0:85:9b:7a:f5:eb:e5:b6:05: ce:8c:78:e4:4c:88:16:01:4f:5f:2a:f2:89:82:ba:62:2c:64: 18:ce:77:c0:40:df:41:42:74:70:17:e4:f0:73:a9:07:58:83: 38:a7:41:2b:04:ec:9b:d3:5e:39:36:4f:6d:de:ac:66:11:ab: 3c:c6:4c:63:4f:e1:66:7b:e3:e7:39:a8:0e:2f:a8:04:2a:32: 65:3c:25:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+ObkcQufyrPH6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ODAyZDY5YTUtZDY1MC00Mzc3LTkyODAtZDk1MmMyNThjNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqglbh5KicmngD6+1lgzingIdZ+yh1Zb30MJW DqpReXzzbE8gHoDYn9QTio0mv1j4x+ZUik/8gkSIy1iGR3vd3JInoXI43s1aOwwW I2TB0iHcoqoJkWlAr1s9q3qXc029vDJlLjanba6g2pc3SZGi/oGeDPrEyDijsVQA 3NK+PMoETKUFLaE7nM8ToTg0DgcgqqsH9z4cIrd9d91herhQGXgWAUPNKTUbjbeY vbQav7/2yd2/dn+Kwqg0pVTtEKUMTUcJ5+TFGr7sE8jeOEorGYxvjmVUrKM5hk5M hEEnkIwUT6xsUfYy2cyRMK04aD++Rpt9TTQu/etvYzt/aV483wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP20n9YcevPUcpA/fuBo6vSH29e+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQwODg5YTUtNmE3Yy0z Yzc3LTg5NzItNGU5NjY4ODBkZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCtUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWuJRAARHPh78ToF0Q8ACXNX73BswXBv4wWkmbomNEeIAVXsGIrZtTy rmy6hoMWV0ZX9gnr+uOzwfAGLRasMXWupsszNDn5rR8groHufJitm9G8ZgC7AVvs MWmOabX1v6VMm3kBz/+nhvmpq9rGniL88dpV/0PdMJgJ4RhBdJjp9o/W0DRVnOuO qV8/tvewqivh8XDhoWwljkXzHQnbqzgeMg41uJudQMEIUuCFm3r16+W2Bc6MeORM iBYBT18q8omCumIsZBjOd8BA30FCdHAX5PBzqQdYgzinQSsE7JvTXjk2T23erGYR qzzGTGNP4WZ74+c5qA4vqAQqMmU8JZM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:46 2025 by rpki-client