$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/706de733-70cc-3ed7-b93a-a1f6d9677c32.roa File: 706de733-70cc-3ed7-b93a-a1f6d9677c32.roa (raw, json) Hash identifier: tP8YTq4k3c45Qw42WHKZ5IOC5z9I9l/NCJzNCo+RX/A= Subject key identifier: 47:12:8B:C5:9E:1B:AA:FD:DA:B9:89:72:61:F7:CD:AD:58:CC:CC:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C0D7B6AB082BF1856D320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/706de733-70cc-3ed7-b93a-a1f6d9677c32.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33660 IP address blocks: 68.85.5.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:0d:7b:6a:b0:82:bf:18:56:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=6a2cd71a-9894-4f50-8e22-2e704d3a6b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:fb:ee:f6:74:55:83:7a:0c:f4:be:5f:0d: 64:09:fb:ad:fd:72:ec:f7:08:9e:6f:7f:cc:b8:20: a3:33:2b:b1:88:4d:70:db:09:f7:1d:d3:ab:89:05: 92:10:3a:13:ba:88:6e:e5:88:f0:99:db:5d:de:cf: f0:c7:5d:d4:84:bf:2c:d1:03:2a:f4:52:b6:2e:74: 2a:20:3d:fe:0e:47:58:f7:c1:29:a4:5e:3b:f5:5b: fe:60:73:9d:14:9b:f4:be:42:c4:ab:3d:94:57:7c: 14:f6:24:98:f9:43:42:fd:6d:eb:c1:38:ec:af:0e: 51:c6:4b:e0:2e:fc:3a:c2:56:f2:1c:9a:17:8c:f4: 3f:c6:3e:b6:62:d1:97:0b:a9:7a:af:0f:f1:74:c7: a6:35:45:08:5d:a4:c2:79:78:01:0c:40:23:1e:9b: 23:2c:60:bb:a0:dc:da:1f:56:07:d3:13:1c:54:01: 9c:91:b7:b5:51:13:c3:bf:2c:63:5f:0e:b1:30:5d: c9:52:9a:f7:fa:e3:9f:7d:df:36:4e:c7:ef:d4:c8: 04:02:06:51:1c:8f:c4:e6:52:37:a1:d4:f4:fd:1c: 02:cd:22:fd:58:0a:00:6b:29:1d:40:37:2e:c6:95: f7:bd:af:b3:b4:68:3a:c4:69:77:fd:fa:73:4d:12: bd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:12:8B:C5:9E:1B:AA:FD:DA:B9:89:72:61:F7:CD:AD:58:CC:CC:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/706de733-70cc-3ed7-b93a-a1f6d9677c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.5.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:06:80:c3:b9:87:02:58:81:62:97:bd:a9:6a:03:60:5f:0e: 5e:b0:1d:b8:f6:66:95:4e:4f:26:d8:0a:93:d3:a8:2e:10:d6: 7f:11:a3:59:f0:01:ba:16:bb:53:7b:c1:d5:d8:d6:0e:0b:1e: 8b:fd:b9:de:e5:5e:74:41:aa:ef:11:03:1e:5c:3e:06:79:ca: 82:9c:60:01:81:ff:49:ff:32:c3:59:86:db:7c:14:5c:9a:1d: 55:97:25:bf:dd:26:73:9f:be:bf:59:44:2f:26:c2:7d:00:0f: ba:ce:78:ad:45:ed:b5:a5:f7:bb:d5:01:7f:58:ee:b8:51:88: 59:0f:8b:22:4a:d5:f4:2a:a4:d5:12:48:6f:80:f5:0d:4a:1b: ce:55:7d:ae:ee:d1:95:12:03:62:3c:85:db:8b:b1:4b:9d:3b: 6b:b3:83:50:36:62:22:af:4e:6d:76:32:6d:6c:79:02:46:ed: 5a:d8:bc:e2:45:8d:4a:db:fe:05:8b:02:ff:14:f2:fd:8a:dc: e6:f8:34:2b:7c:aa:dc:df:20:cb:f0:7e:da:ca:22:ed:c2:d0: 11:c8:ce:55:a3:83:63:d8:df:e6:f1:33:71:bb:44:fc:49:14: 50:fa:f6:40:91:6e:f6:7f:85:50:83:f2:7f:61:22:7d:8b:63: 20:65:4d:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiebA17arCCvxhW0yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NmEyY2Q3MWEtOTg5NC00ZjUwLThlMjItMmU3MDRkM2E2YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleb77vZ0VYN6DPS+Xw1kCfut/XLs9wieb3/M uCCjMyuxiE1w2wn3HdOriQWSEDoTuohu5Yjwmdtd3s/wx13UhL8s0QMq9FK2LnQq ID3+DkdY98EppF479Vv+YHOdFJv0vkLEqz2UV3wU9iSY+UNC/W3rwTjsrw5Rxkvg Lvw6wlbyHJoXjPQ/xj62YtGXC6l6rw/xdMemNUUIXaTCeXgBDEAjHpsjLGC7oNza H1YH0xMcVAGckbe1URPDvyxjXw6xMF3JUpr3+uOffd82Tsfv1MgEAgZRHI/E5lI3 odT0/RwCzSL9WAoAaykdQDcuxpX3va+ztGg6xGl3/fpzTRK9lQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEcSi8WeG6r92rmJcmH3za1YzMysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzA2ZGU3MzMtNzBjYy0z ZWQ3LWI5M2EtYTFmNmQ5Njc3YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHRFUFADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDPBoDDuYcCWIFil72pagNgXw5esB249maVTk8m2AqT06guENZ/EaNZ 8AG6FrtTe8HV2NYOCx6L/bne5V50QarvEQMeXD4GecqCnGABgf9J/zLDWYbbfBRc mh1VlyW/3SZzn76/WUQvJsJ9AA+6znitRe21pfe71QF/WO64UYhZD4siStX0KqTV EkhvgPUNShvOVX2u7tGVEgNiPIXbi7FLnTtrs4NQNmIir05tdjJtbHkCRu1a2Lzi RY1K2/4FiwL/FPL9itzm+DQrfKrc3yDL8H7ayiLtwtARyM5Vo4Nj2N/m8TNxu0T8 SRRQ+vZAkW72f4VQg/J/YSJ9i2MgZU1z -----END CERTIFICATE-----Generated at Mon Apr 7 09:41:36 2025 by rpki-client