$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa File: 655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa (raw, json) Hash identifier: GvSBESh4XtllreAASqdp21SgrQTbet551+XHt0Cwnmo= Subject key identifier: B1:ED:0B:9A:0C:E7:FA:C6:09:9A:0F:CD:85:B2:F5:72:DA:9D:14:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8DCEBB6D76B0E9CFB6600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.36.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:dc:eb:b6:d7:6b:0e:9c:fb:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a7fd723b-a7ff-43a1-8f6d-62bc030f3de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9c:8e:6c:2b:fb:c5:cd:48:de:62:5c:6a:c5: 81:4e:6a:a4:bb:cc:98:65:79:26:c9:89:8f:2d:1f: 36:1e:d9:2e:53:93:94:c2:5b:14:d6:ab:92:13:f1: a7:51:17:79:ff:b6:81:ef:1a:4c:c3:07:9e:54:01: 1f:9b:b9:3c:df:0e:33:c2:bc:ad:85:e5:59:93:27: da:21:ea:02:1d:bb:b0:e8:bc:46:b2:bd:0e:c5:c8: 84:b3:1c:ee:af:96:e1:cb:b6:8a:ce:a1:20:8f:4c: 92:3e:29:41:1d:30:59:ad:3a:b6:e1:01:f6:6f:ec: e0:54:74:38:8b:67:86:3c:aa:c2:f5:e3:64:63:49: 4c:95:93:b7:58:1b:df:d6:22:79:80:9f:c5:17:a1: 8d:0e:e0:a7:c4:25:33:fb:5b:6c:d3:e7:e1:76:ca: 0f:e8:b6:e6:b5:25:e5:73:33:ca:ef:4b:35:64:d4: dc:c1:af:1c:d3:ce:da:5d:1a:1f:c5:60:46:9c:c5: aa:6a:ca:fe:1e:e9:16:fe:bc:16:21:51:c7:f2:34: bc:68:d5:bf:be:03:6c:1a:4d:31:4d:ed:f1:94:f3: 93:75:cc:53:c4:c9:d9:f6:6b:90:f3:b2:7b:94:0c: e7:ec:90:86:3b:6d:f8:c0:a2:51:70:83:bd:3d:a2: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:ED:0B:9A:0C:E7:FA:C6:09:9A:0F:CD:85:B2:F5:72:DA:9D:14:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bc:fd:e3:36:26:0f:7c:80:20:87:ab:12:1e:55:e8:09:4c: 9b:59:10:47:c7:22:b4:1a:14:84:95:f3:37:15:57:8a:5d:2d: 2d:34:e9:eb:0a:88:ce:d5:e8:93:ec:77:1b:6e:1f:f9:20:4b: 3e:37:97:5c:2b:7d:75:e9:23:7d:10:f5:f9:8b:21:ca:42:2d: 52:46:a3:ac:29:79:b9:b1:3f:2f:02:d2:28:6c:4e:95:60:ac: 67:c8:1c:e9:5c:9d:93:4c:32:44:5a:be:79:bb:f6:bc:19:7d: b8:e8:f0:86:a9:02:09:a8:a4:83:00:7e:07:04:cc:c2:58:89: 55:57:73:94:d6:5e:c7:24:f5:df:6c:59:c9:73:c2:a3:78:6f: 2c:b6:70:be:fd:aa:9d:47:dc:2a:7b:c8:e5:20:2a:8a:7b:b3: 57:3a:34:eb:90:bb:e3:23:61:3b:6c:69:36:b4:f4:66:9a:b6: bb:ae:fe:69:ae:95:d6:ae:da:7d:ff:ff:28:76:85:3e:88:67: 5b:92:39:5e:53:f3:9b:6f:cb:7e:b4:f0:3c:7b:c8:43:9b:21: 5a:4b:bd:b1:fb:48:81:59:6e:aa:79:ac:4d:0d:c6:80:d7:0a: 29:93:e7:18:23:ad:b4:fa:f5:34:f8:54:6b:9c:03:e4:64:13: fe:46:c7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+NzrttdrDpz7ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTdmZDcyM2ItYTdmZi00M2ExLThmNmQtNjJiYzAzMGYzZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35yObCv7xc1I3mJcasWBTmqku8yYZXkmyYmP LR82HtkuU5OUwlsU1quSE/GnURd5/7aB7xpMwweeVAEfm7k83w4zwrytheVZkyfa IeoCHbuw6LxGsr0OxciEsxzur5bhy7aKzqEgj0ySPilBHTBZrTq24QH2b+zgVHQ4 i2eGPKrC9eNkY0lMlZO3WBvf1iJ5gJ/FF6GNDuCnxCUz+1ts0+fhdsoP6LbmtSXl czPK70s1ZNTcwa8c087aXRofxWBGnMWqasr+HukW/rwWIVHH8jS8aNW/vgNsGk0x Te3xlPOTdcxTxMnZ9muQ87J7lAzn7JCGO234wKJRcIO9PaJcZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHtC5oM5/rGCZoPzYWy9XLanRSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjU1YzQ4ZjEtNmExYi0z YjM2LWE2ZTItMTMxYjhlYzM2NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy8/eM2Jg98gCCHqxIeVegJTJtZEEfHIrQaFISV8zcVV4pdLS006esK iM7V6JPsdxtuH/kgSz43l1wrfXXpI30Q9fmLIcpCLVJGo6wpebmxPy8C0ihsTpVg rGfIHOlcnZNMMkRavnm79rwZfbjo8IapAgmopIMAfgcEzMJYiVVXc5TWXsck9d9s WclzwqN4byy2cL79qp1H3Cp7yOUgKop7s1c6NOuQu+MjYTtsaTa09Gaatruu/mmu ldau2n3//yh2hT6IZ1uSOV5T85tvy3608Dx7yEObIVpLvbH7SIFZbqp5rE0NxoDX CimT5xgjrbT69TT4VGucA+RkE/5Gx0E= -----END CERTIFICATE-----Generated at Mon Apr 7 06:18:19 2025 by rpki-client