$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68faf579-ebd5-3832-8b1a-09a0cf6218d3.roa File: 68faf579-ebd5-3832-8b1a-09a0cf6218d3.roa (raw, json) Hash identifier: yQb08N8z5AfW9v2m6CjsVk1ioXm1hd9xA4FtFWsgO7M= Subject key identifier: C7:DF:F5:0E:4A:65:EE:B7:B4:A1:F3:77:86:8B:4E:E4:14:F1:A1:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848B2604D280D75E71E0371FB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68faf579-ebd5-3832-8b1a-09a0cf6218d3.roa Signing time: Tue 28 Jan 2025 17:34:49 +0000 ROA not before: Tue 28 Jan 2025 17:34:49 +0000 ROA not after: Mon 28 Apr 2025 16:34:49 +0000 asID: 33491 IP address blocks: 67.175.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:60:4d:28:0d:75:e7:1e:03:71:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 28 17:34:49 2025 GMT Not After : Apr 28 16:34:49 2025 GMT Subject: CN=122fedd5-8ff3-439a-83ba-c8d30f45c46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:31:fa:55:68:d8:a3:a1:fe:e8:5d:65:6e:bf: db:94:10:40:b2:b9:6e:e2:4f:27:8b:2b:a6:05:15: 3d:d6:e2:68:54:1c:8e:16:14:72:4e:92:6e:11:e8: cf:0e:02:38:8a:82:65:4e:e3:af:9a:ae:43:53:fc: 77:25:1b:89:db:62:3d:77:a8:a0:03:2d:7e:1b:0b: f2:94:0f:02:94:3c:43:87:20:3b:37:bb:e4:bc:92: ba:26:ff:e9:9b:53:10:9b:12:d9:ad:5b:31:62:25: 82:43:00:c5:c9:7e:12:11:b4:10:5c:50:2a:1d:3c: f4:50:ba:76:79:54:5d:17:73:85:1d:12:04:1a:c0: 91:49:14:09:2f:d2:52:60:a6:2c:01:ad:02:53:ad: aa:53:84:5c:b0:7e:c5:8f:07:6b:11:41:72:60:48: e3:89:c8:90:e0:c3:25:0f:c2:3f:ea:1d:eb:f2:ba: 34:aa:42:1f:00:47:c2:67:01:b5:82:38:be:81:5d: 00:50:be:b7:9c:bf:63:92:90:43:52:de:13:b8:6c: da:57:af:71:40:11:1a:f3:35:69:0c:6e:8b:7e:a6: 5d:a3:6a:51:6b:05:34:23:98:1e:e9:e0:61:30:09: 23:5f:1a:1e:82:9c:5f:23:7b:15:ba:73:d5:0b:fb: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DF:F5:0E:4A:65:EE:B7:B4:A1:F3:77:86:8B:4E:E4:14:F1:A1:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68faf579-ebd5-3832-8b1a-09a0cf6218d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.175.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:ff:ae:30:bd:36:c9:35:f5:51:1c:08:0c:03:66:88:2b:3f: a4:fa:1f:3e:c5:48:08:88:dd:6a:74:a8:ae:5c:e0:4e:89:39: b0:49:ac:a0:81:4f:b6:7c:63:c7:33:15:70:11:c4:3b:f4:70: 22:56:20:1a:53:c4:2a:11:be:18:54:3e:32:06:ca:7d:dc:26: 21:a3:da:ed:bd:45:02:94:0c:d0:a5:b0:9d:d5:ad:05:9d:63: 0f:df:b7:70:22:eb:55:12:25:63:b7:61:83:74:07:2d:41:f3: 3a:88:f0:5b:7c:09:82:90:f0:c4:57:10:7f:cd:f6:48:39:02: b4:6c:5e:f7:82:25:48:d9:7a:64:37:98:f1:27:4a:bc:4d:d0: a1:30:48:00:71:ef:7a:e1:c4:ac:e7:bf:2a:45:69:7a:77:19: 27:b6:da:a5:14:f8:91:09:39:8b:44:40:49:75:da:27:75:71: 62:f7:1d:4d:21:ee:15:56:b5:41:bb:84:a2:c5:c8:df:69:cb: 77:39:8c:03:a3:2c:14:30:48:c9:54:98:9d:f4:c1:38:60:1d: 37:cf:ba:63:00:1d:96:34:f8:c2:0d:90:64:09:c9:eb:6b:59: 53:b3:d6:fd:fa:73:dd:53:94:fd:6d:7c:23:21:be:4f:d5:bc: 70:cd:93:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyYE0oDXXnHgNx+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyODE3MzQ0OVoXDTI1MDQyODE2MzQ0OVowLzEtMCsGA1UEAxMk MTIyZmVkZDUtOGZmMy00MzlhLTgzYmEtYzhkMzBmNDVjNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTH6VWjYo6H+6F1lbr/blBBAsrlu4k8niyum BRU91uJoVByOFhRyTpJuEejPDgI4ioJlTuOvmq5DU/x3JRuJ22I9d6igAy1+Gwvy lA8ClDxDhyA7N7vkvJK6Jv/pm1MQmxLZrVsxYiWCQwDFyX4SEbQQXFAqHTz0ULp2 eVRdF3OFHRIEGsCRSRQJL9JSYKYsAa0CU62qU4RcsH7FjwdrEUFyYEjjiciQ4MMl D8I/6h3r8ro0qkIfAEfCZwG1gji+gV0AUL63nL9jkpBDUt4TuGzaV69xQBEa8zVp DG6LfqZdo2pRawU0I5ge6eBhMAkjXxoegpxfI3sVunPVC/sW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMff9Q5KZe63tKHzd4aLTuQU8aH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhmYWY1NzktZWJkNS0z ODMyLThiMWEtMDlhMGNmNjIxOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ69wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3/rjC9Nsk19VEcCAwDZogrP6T6Hz7FSAiI3Wp0qK5c4E6JObBJrKCB T7Z8Y8czFXARxDv0cCJWIBpTxCoRvhhUPjIGyn3cJiGj2u29RQKUDNClsJ3VrQWd Yw/ft3Ai61USJWO3YYN0By1B8zqI8Ft8CYKQ8MRXEH/N9kg5ArRsXveCJUjZemQ3 mPEnSrxN0KEwSABx73rhxKznvypFaXp3GSe22qUU+JEJOYtEQEl12id1cWL3HU0h 7hVWtUG7hKLFyN9py3c5jAOjLBQwSMlUmJ30wThgHTfPumMAHZY0+MINkGQJyetr WVOz1v36c91TlP1tfCMhvk/VvHDNk9o= -----END CERTIFICATE-----Generated at Fri Mar 14 14:41:14 2025 by rpki-client