$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6b8b85-5d7d-3394-9d06-fca797d0a93a.roa File: 5c6b8b85-5d7d-3394-9d06-fca797d0a93a.roa (raw, json) Hash identifier: hSN3gdW8QXLXh1SRK4B7BpBXrdZNepf5dncNbc5D7l4= Subject key identifier: 08:EF:0C:2F:40:66:CE:D9:E3:4F:51:2F:5A:79:BD:3D:B9:BD:9D:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E141034CA517CD4B8F880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6b8b85-5d7d-3394-9d06-fca797d0a93a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 68.85.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:14:10:34:ca:51:7c:d4:b8:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d105772a-010c-409b-8685-efacf6a16fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:19:53:78:90:dc:38:06:c3:a9:56:56:ff: 9d:bb:ba:f2:e9:03:be:c3:a6:e2:5d:83:af:0b:e3: 1e:09:9e:fd:6a:82:a8:3d:bd:fc:ef:b9:5f:18:7d: a1:a6:4b:67:ed:ec:d0:89:93:83:81:d6:c4:00:53: 73:ba:a5:4a:c9:85:03:b1:ba:13:34:25:83:3d:cb: d5:83:96:26:82:1c:f2:ef:aa:34:1f:f2:d5:69:99: 8d:1f:52:3a:ba:10:b8:df:97:84:40:3b:85:a8:5e: 82:90:0b:f5:2e:63:03:e9:4b:a0:7b:8c:3e:0e:79: 5e:6b:4d:5c:6c:4d:9a:0a:62:7e:45:09:3c:ce:d0: f0:68:7d:f4:c4:7d:27:25:23:7b:74:48:fa:24:b7: 31:73:21:96:fd:19:d8:0f:a5:58:65:1e:ad:95:c4: 64:69:9d:db:94:33:c0:f2:d7:fa:f0:d6:f4:39:42: 8f:fc:33:dd:4b:90:42:80:97:d4:9f:52:80:f8:0c: f1:0e:31:cf:f7:98:c1:c2:c9:ad:c2:8c:55:8c:5d: 39:e9:6c:91:ba:e2:3f:b4:1f:ad:02:38:eb:0e:38: cf:1a:77:ca:ce:43:a2:e0:f8:94:1b:2e:f0:38:99: ad:ac:32:21:6c:86:52:20:e9:7f:00:9c:79:07:51: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EF:0C:2F:40:66:CE:D9:E3:4F:51:2F:5A:79:BD:3D:B9:BD:9D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6b8b85-5d7d-3394-9d06-fca797d0a93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:af:28:34:e7:6f:fd:52:46:9a:96:ca:c5:34:8d:54:a9:7d: 42:a0:73:79:50:12:d9:de:22:3b:d7:af:83:1b:d2:94:eb:2b: 65:e2:44:3f:4a:4b:05:86:80:40:41:33:35:ef:fc:d0:88:f1: 8b:50:bd:85:77:ee:cb:14:92:95:1f:34:bb:08:fb:07:f9:71: 66:87:90:d9:eb:c3:64:91:00:67:44:a8:08:3c:58:e4:31:bc: d9:49:f4:64:bc:43:74:98:78:a4:14:37:c6:12:e6:97:53:92: 6d:09:33:e4:5c:75:1f:45:c4:ea:e8:76:55:ce:14:d3:11:ad: 50:36:99:50:60:40:0b:91:60:a0:26:80:67:8f:d6:64:d2:f9: 9b:45:36:d3:38:b2:e2:72:c5:e2:ff:65:5d:81:2a:35:bd:f0: d0:53:3e:51:a8:6b:45:16:0f:df:18:69:25:d0:99:98:31:8d: ef:78:d4:f8:db:a7:0d:e0:69:d8:22:bf:11:01:ad:f4:05:d0: b3:65:47:22:4c:57:3a:51:b5:26:71:f8:21:4d:3b:d8:f0:f8: 63:97:4b:22:24:17:06:3b:7f:1b:dc:9d:9f:c3:c5:ec:8e:95: 16:2a:3b:4c:52:7e:80:01:d2:e6:02:d2:37:cf:b0:49:3b:69: 1a:e7:f1:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebhQQNMpRfNS4+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDEwNTc3MmEtMDEwYy00MDliLTg2ODUtZWZhY2Y2YTE2ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg8ZU3iQ3DgGw6lWVv+du7ry6QO+w6biXYOv C+MeCZ79aoKoPb3877lfGH2hpktn7ezQiZODgdbEAFNzuqVKyYUDsboTNCWDPcvV g5Ymghzy76o0H/LVaZmNH1I6uhC435eEQDuFqF6CkAv1LmMD6Uuge4w+Dnlea01c bE2aCmJ+RQk8ztDwaH30xH0nJSN7dEj6JLcxcyGW/RnYD6VYZR6tlcRkaZ3blDPA 8tf68Nb0OUKP/DPdS5BCgJfUn1KA+AzxDjHP95jBwsmtwoxVjF056WyRuuI/tB+t AjjrDjjPGnfKzkOi4PiUGy7wOJmtrDIhbIZSIOl/AJx5B1FMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjvDC9AZs7Z409RL1p5vT25vZ01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM2YjhiODUtNWQ3ZC0z Mzk0LTlkMDYtZmNhNzk3ZDBhOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFWCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmvKDTnb/1SRpqWysU0jVSpfUKgc3lQEtneIjvXr4Mb0pTrK2XiRD9K SwWGgEBBMzXv/NCI8YtQvYV37ssUkpUfNLsI+wf5cWaHkNnrw2SRAGdEqAg8WOQx vNlJ9GS8Q3SYeKQUN8YS5pdTkm0JM+RcdR9FxOrodlXOFNMRrVA2mVBgQAuRYKAm gGeP1mTS+ZtFNtM4suJyxeL/ZV2BKjW98NBTPlGoa0UWD98YaSXQmZgxje941Pjb pw3gadgivxEBrfQF0LNlRyJMVzpRtSZx+CFNO9jw+GOXSyIkFwY7fxvcnZ/DxeyO lRYqO0xSfoAB0uYC0jfPsEk7aRrn8UE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:18:07 2025 by rpki-client