$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6894c5ae-f17c-342b-9216-71bb13a91366.roa File: 6894c5ae-f17c-342b-9216-71bb13a91366.roa (raw, json) Hash identifier: dFMpgIphBJ5Ae/dJPAoAhtyi7w5/qbWibeafScbx7PE= Subject key identifier: E0:F2:90:90:0A:94:A8:EE:B0:AA:7D:C2:1E:4A:CA:FF:31:DE:D8:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BDE761316DDD107074C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6894c5ae-f17c-342b-9216-71bb13a91366.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22258 IP address blocks: 68.86.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:de:76:13:16:dd:d1:07:07:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c5223253-1d06-4369-9571-445fb3b81bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:fb:d6:1f:2e:7e:05:a6:4e:6e:15:28:34: 22:d1:11:f6:13:99:62:d5:4f:74:b9:d8:f0:bd:a8: 70:43:32:1b:b8:88:92:41:2b:d9:f6:7f:c2:82:8d: 15:bf:bb:5e:5c:b9:bf:df:52:e2:34:5c:7e:24:97: 48:28:de:eb:ae:0d:b7:fa:94:06:82:df:6c:c7:89: 57:27:e4:fd:78:cc:4a:2f:f4:dd:26:5b:dc:de:cd: 05:95:b2:87:3d:97:30:2a:bc:86:1c:db:21:41:c0: 3e:0b:18:8c:aa:75:da:2d:81:28:36:a4:64:49:33: f4:de:ba:4e:9e:ea:ae:3f:42:1f:a3:40:63:1a:ef: 3d:0a:16:83:af:61:43:96:ff:8c:67:4a:17:44:d8: 80:ce:4f:39:ea:cc:1c:e2:ff:a3:43:cf:81:2e:de: 7e:f7:2d:57:ea:27:57:c6:e0:bd:7f:f3:2b:df:8c: c9:46:b9:1e:28:8e:52:b0:fc:a5:4e:3d:dd:b7:a4: 2b:16:d3:01:ba:20:b6:19:f5:90:b6:6c:e0:a9:ff: 7b:3d:2a:fe:44:b2:8f:b6:5c:df:81:4f:ab:8e:85: a7:a1:48:d5:f2:4c:5f:23:58:cd:6e:c6:e8:42:f3: bd:94:5f:c5:bb:f9:20:5b:96:f9:2d:58:05:9b:eb: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F2:90:90:0A:94:A8:EE:B0:AA:7D:C2:1E:4A:CA:FF:31:DE:D8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6894c5ae-f17c-342b-9216-71bb13a91366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:61:79:7e:6b:ff:75:be:4e:18:af:2b:a9:6d:88:2c:26:b3: c5:bc:5a:ac:c8:0a:c4:7a:8f:97:23:cd:43:e7:79:15:68:97: 51:e4:a1:c8:93:f0:69:d4:e6:16:dd:81:9f:69:09:ec:4a:e2: 62:d1:07:49:09:79:f6:de:b5:60:d3:3d:6c:1f:4f:3c:22:2d: 2d:53:47:04:62:ef:23:99:c3:d1:78:ca:e3:d7:b9:c7:9b:e1: 64:85:6d:1c:3a:8b:91:aa:38:f0:1a:0f:c0:3a:e0:c8:10:b5: 02:c5:f2:da:60:be:4d:67:a3:1b:f1:73:2f:74:21:92:4e:e3: 19:1a:94:8d:7e:72:be:c7:ff:7d:b9:a2:18:f1:31:b7:57:f9: 8b:90:03:e4:d8:ff:fa:d4:40:2d:66:a3:69:ac:82:c1:ed:8f: 7c:12:aa:12:c5:9c:27:50:a5:74:e9:b6:9e:0d:7d:79:57:d4: 3f:34:80:e0:9e:3d:d0:0d:a4:ec:37:15:8b:61:ec:75:92:d0: d2:d8:47:44:87:90:08:76:6b:88:4d:5b:e0:60:68:69:de:24: 20:6a:0f:bb:4b:ce:d5:af:af:2a:a4:f1:5e:2e:87:59:5d:6f: f6:10:73:5d:f2:5e:17:91:07:d0:9b:93:72:bf:82:cd:64:50: 26:75:40:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea952Exbd0QcHTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzUyMjMyNTMtMWQwNi00MzY5LTk1NzEtNDQ1ZmIzYjgxYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNH71h8ufgWmTm4VKDQi0RH2E5li1U90udjw vahwQzIbuIiSQSvZ9n/Cgo0Vv7teXLm/31LiNFx+JJdIKN7rrg23+pQGgt9sx4lX J+T9eMxKL/TdJlvc3s0FlbKHPZcwKryGHNshQcA+CxiMqnXaLYEoNqRkSTP03rpO nuquP0Ifo0BjGu89ChaDr2FDlv+MZ0oXRNiAzk856swc4v+jQ8+BLt5+9y1X6idX xuC9f/Mr34zJRrkeKI5SsPylTj3dt6QrFtMBuiC2GfWQtmzgqf97PSr+RLKPtlzf gU+rjoWnoUjV8kxfI1jNbsboQvO9lF/Fu/kgW5b5LVgFm+vDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODykJAKlKjusKp9wh5Kyv8x3tijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjg5NGM1YWUtZjE3Yy0z NDJiLTkyMTYtNzFiYjEzYTkxMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM5heX5r/3W+ThivK6ltiCwms8W8WqzICsR6j5cjzUPneRVol1HkociT 8GnU5hbdgZ9pCexK4mLRB0kJefbetWDTPWwfTzwiLS1TRwRi7yOZw9F4yuPXuceb 4WSFbRw6i5GqOPAaD8A64MgQtQLF8tpgvk1noxvxcy90IZJO4xkalI1+cr7H/325 ohjxMbdX+YuQA+TY//rUQC1mo2msgsHtj3wSqhLFnCdQpXTptp4NfXlX1D80gOCe PdANpOw3FYth7HWS0NLYR0SHkAh2a4hNW+BgaGneJCBqD7tLztWvryqk8V4uh1ld b/YQc13yXheRB9Cbk3K/gs1kUCZ1QMY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:07:51 2025 by rpki-client