$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa File: 580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa (raw, json) Hash identifier: foIC/TvK8ZsGUR3nF3pL2QvcPFFMH6R8/40o7rdAhB4= Subject key identifier: 7B:24:BA:D4:C5:9D:10:B5:46:6C:6B:B8:D4:8D:8D:83:9D:60:24:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF49CCEF6728055E41B500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.45.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:49:cc:ef:67:28:05:5e:41:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=6a44f816-ac44-4464-a23e-139c42d85c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:87:c6:c4:c9:2c:99:87:4c:f5:23:39:98: b0:b9:c5:cb:ae:59:73:07:78:38:c0:a7:18:d1:10: 45:c6:45:3d:a3:f0:09:bf:ee:be:20:63:ad:57:a0: 24:53:e2:51:52:3f:c3:18:25:0b:39:a2:65:b4:34: be:d5:50:f5:7b:a9:a6:39:3f:5b:05:31:7e:50:39: 3c:07:00:cf:5d:be:58:cc:4a:84:b1:66:7d:f2:97: 6b:eb:d9:be:05:1b:8b:59:eb:55:be:41:27:c7:0f: b9:aa:21:0b:00:8f:36:5f:06:aa:88:c0:7e:b2:b7: 4f:ea:a0:88:a1:82:cb:75:b7:9b:a8:8a:36:e1:a2: 26:a0:10:f0:2c:fb:fb:e9:89:e1:98:85:04:b6:18: 55:39:6f:c2:5f:43:cd:91:2a:31:83:16:a4:ad:d9: f1:e8:73:b6:06:c1:37:c3:2d:71:fa:23:e6:9d:ad: 5b:09:99:51:d9:ea:f2:01:b9:39:32:ec:81:4f:81: b3:df:b2:0a:ca:c1:65:16:53:2b:12:c1:f6:4d:1a: 29:00:90:45:52:a2:75:a3:3e:2b:bd:6e:75:0c:66: 59:8c:ba:77:48:81:5e:1f:42:54:2c:6b:6e:aa:bb: ed:de:cc:85:60:6a:a7:c1:d3:d9:bc:20:67:5c:ff: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:24:BA:D4:C5:9D:10:B5:46:6C:6B:B8:D4:8D:8D:83:9D:60:24:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:20:5c:14:ab:a3:5b:7f:af:10:c4:4c:62:41:30:12:18:c7: ba:a4:d6:8c:2a:74:49:e0:f8:d1:08:d6:cb:8c:49:b6:ff:d8: 99:f5:43:30:50:25:cf:b6:c0:00:23:50:c4:4f:cf:2d:2f:11: 64:fc:17:9d:9b:8c:57:47:26:d8:b1:b5:ff:50:83:3f:62:e5: 54:16:14:7f:4a:24:85:48:f3:7e:6f:69:1f:a9:de:34:5f:5f: d5:e6:11:4a:61:46:ad:61:10:64:81:fd:cb:e8:45:d0:ba:35: 46:9a:b6:6b:a6:1d:49:92:e6:8c:00:57:e4:bf:63:2c:ae:5b: a6:ad:a1:a0:21:a0:ed:d1:ec:d2:80:f0:dd:d6:f1:7f:4d:44: c7:38:b8:de:31:ec:8d:4c:6a:7c:61:b1:84:0d:c5:ce:77:80: c5:81:75:c9:22:f3:c0:a9:cc:88:60:f8:9d:f4:2c:99:3e:05: c0:d3:58:96:fc:08:e8:c7:c8:9f:d0:f4:15:01:bf:3b:b7:c7: ee:da:db:71:73:e8:0a:d6:78:93:ec:b2:69:c1:fc:f5:7c:4b: 46:3a:ec:fe:91:4b:eb:15:6d:5d:38:37:da:e9:ca:81:fb:c0: a9:e9:7c:c1:82:47:6f:5e:c9:fb:02:e5:c1:40:04:79:a6:5d: 38:3a:4b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr0nM72coBV5BtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NmE0NGY4MTYtYWM0NC00NDY0LWEyM2UtMTM5YzQyZDg1YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLOHxsTJLJmHTPUjOZiwucXLrllzB3g4wKcY 0RBFxkU9o/AJv+6+IGOtV6AkU+JRUj/DGCULOaJltDS+1VD1e6mmOT9bBTF+UDk8 BwDPXb5YzEqEsWZ98pdr69m+BRuLWetVvkEnxw+5qiELAI82XwaqiMB+srdP6qCI oYLLdbebqIo24aImoBDwLPv76YnhmIUEthhVOW/CX0PNkSoxgxakrdnx6HO2BsE3 wy1x+iPmna1bCZlR2eryAbk5MuyBT4Gz37IKysFlFlMrEsH2TRopAJBFUqJ1oz4r vW51DGZZjLp3SIFeH0JULGtuqrvt3syFYGqnwdPZvCBnXP9cAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHskutTFnRC1RmxruNSNjYOdYCRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgwZDM5MzUtM2MyNS0z OTgyLTllNmYtZTM0NjVmMWFjOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRC2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwgXBSro1t/rxDETGJBMBIYx7qk1owqdEng+NEI1suMSbb/2Jn1QzBQ Jc+2wAAjUMRPzy0vEWT8F52bjFdHJtixtf9Qgz9i5VQWFH9KJIVI835vaR+p3jRf X9XmEUphRq1hEGSB/cvoRdC6NUaatmumHUmS5owAV+S/YyyuW6atoaAhoO3R7NKA 8N3W8X9NRMc4uN4x7I1ManxhsYQNxc53gMWBdcki88CpzIhg+J30LJk+BcDTWJb8 COjHyJ/Q9BUBvzu3x+7a23Fz6ArWeJPssmnB/PV8S0Y67P6RS+sVbV04N9rpyoH7 wKnpfMGCR29eyfsC5cFABHmmXTg6SzM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:03 2025 by rpki-client