$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b9c2ed-3226-3ccf-8a86-998310dde108.roa File: 78b9c2ed-3226-3ccf-8a86-998310dde108.roa (raw, json) Hash identifier: Q+UA1xgspXttsfYnJIRrfO1HBJ22aGQn6lvOw2hR1Iw= Subject key identifier: 01:1F:FE:DF:F1:4C:AE:05:F6:9F:84:C2:02:FF:9F:DB:FC:6A:C5:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C25433ED01C6E815AB880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b9c2ed-3226-3ccf-8a86-998310dde108.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33668 IP address blocks: 68.86.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:25:43:3e:d0:1c:6e:81:5a:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=dbaa8249-00c8-43f0-88f9-0da9b3256115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:82:9e:ea:de:65:d2:3a:8a:86:30:ac:87: 78:5b:33:19:92:cc:03:ea:6e:67:5f:06:c0:e2:3b: 2e:80:ed:8f:28:89:7c:09:2d:67:d2:74:6b:ef:fe: 3b:63:a3:fa:d7:d3:a5:40:3a:d6:b1:7b:f1:b7:ea: 49:77:ca:74:4d:cc:91:b4:3e:da:7e:85:7a:af:a9: c2:dd:6b:cf:6a:ab:ab:de:e3:07:f0:ac:a0:f5:fa: 8f:33:57:b9:11:ea:fb:3a:2d:4b:35:10:6f:8b:33: f9:e4:d3:d9:40:62:f6:04:c0:ce:c4:c2:59:b1:3b: a6:a0:d4:c5:ea:cc:04:6c:bc:a5:a6:f9:98:6b:ad: 5a:a0:99:95:da:81:81:77:9a:5f:28:92:05:fb:38: a6:1a:6b:d4:47:56:bb:88:15:27:02:c9:c5:f4:a1: bf:af:27:5e:5c:87:9f:d7:b9:b6:e6:01:d5:bd:df: 6b:65:78:92:7e:0a:1e:b8:c7:c5:69:ec:db:c0:a3: 08:7c:b4:f5:b3:67:42:a9:43:46:5a:61:ce:d2:29: c3:13:a7:b1:22:e2:b4:7f:31:9a:75:96:83:df:f1: 41:14:b1:11:28:b6:19:1c:7e:f4:54:4f:a5:e3:2c: a1:44:06:cc:1f:75:6c:34:e2:21:e4:09:38:31:59: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1F:FE:DF:F1:4C:AE:05:F6:9F:84:C2:02:FF:9F:DB:FC:6A:C5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b9c2ed-3226-3ccf-8a86-998310dde108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:76:ee:c2:9f:9b:72:70:3e:ce:bb:e4:57:b4:44:41:46:2e: 93:b2:86:c1:ea:f2:e9:6b:8b:0e:10:ed:21:c6:b4:56:2f:86: c1:09:38:a0:57:24:da:68:f9:bf:e8:97:9e:d5:9a:71:56:6f: af:c6:ee:6d:d8:d3:ff:13:c1:a1:cc:06:8b:09:97:a1:ba:4f: b1:ab:b2:1a:11:19:fd:fc:52:37:8a:c2:2e:2a:60:95:54:6c: 4e:30:49:0b:4d:56:74:6b:ce:70:2c:0c:94:ae:d7:66:c5:0e: 5f:15:19:fd:ce:77:3e:ab:13:0d:40:cf:3c:05:51:11:df:ad: e9:44:67:19:a2:05:79:ab:7b:e0:ea:6d:59:57:07:a7:c5:b5: 89:cb:d8:53:b9:19:e9:d7:58:aa:0c:09:37:06:0a:5f:6d:64: 37:98:91:de:cc:5c:f3:f6:7d:6d:1d:df:8b:78:82:40:23:fc: 5a:50:90:88:a8:f4:f4:af:4d:64:25:9d:83:b5:54:ca:af:e4: 6d:36:f7:7d:36:ff:f8:72:ec:ea:ba:da:e2:9d:18:0a:ae:d7: cf:47:eb:3f:df:52:27:41:79:9c:dd:63:31:1d:2d:e8:ca:5a: 65:f6:94:ae:79:91:0f:5a:0a:d5:50:fc:fb:74:0b:5c:cb:b1: cd:a3:4a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebCVDPtAcboFauIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGJhYTgyNDktMDBjOC00M2YwLTg4ZjktMGRhOWIzMjU2MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMqCnureZdI6ioYwrId4WzMZkswD6m5nXwbA 4jsugO2PKIl8CS1n0nRr7/47Y6P619OlQDrWsXvxt+pJd8p0TcyRtD7afoV6r6nC 3WvPaqur3uMH8Kyg9fqPM1e5Eer7Oi1LNRBvizP55NPZQGL2BMDOxMJZsTumoNTF 6swEbLylpvmYa61aoJmV2oGBd5pfKJIF+zimGmvUR1a7iBUnAsnF9KG/rydeXIef 17m25gHVvd9rZXiSfgoeuMfFaezbwKMIfLT1s2dCqUNGWmHO0inDE6exIuK0fzGa dZaD3/FBFLERKLYZHH70VE+l4yyhRAbMH3VsNOIh5Ak4MVnC2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEf/t/xTK4F9p+EwgL/n9v8asXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzhiOWMyZWQtMzIyNi0z Y2NmLThhODYtOTk4MzEwZGRlMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV27sKfm3JwPs675Fe0REFGLpOyhsHq8ulriw4Q7SHGtFYvhsEJOKBX JNpo+b/ol57VmnFWb6/G7m3Y0/8TwaHMBosJl6G6T7GrshoRGf38UjeKwi4qYJVU bE4wSQtNVnRrznAsDJSu12bFDl8VGf3Odz6rEw1AzzwFURHfrelEZxmiBXmre+Dq bVlXB6fFtYnL2FO5GenXWKoMCTcGCl9tZDeYkd7MXPP2fW0d34t4gkAj/FpQkIio 9PSvTWQlnYO1VMqv5G029302//hy7Oq62uKdGAqu189H6z/fUidBeZzdYzEdLejK WmX2lK55kQ9aCtVQ/Pt0C1zLsc2jSpQ= -----END CERTIFICATE-----Generated at Mon Apr 7 09:41:51 2025 by rpki-client