$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/827adcc6-cd37-30ee-a817-1a0e99ec03a4.roa File: 827adcc6-cd37-30ee-a817-1a0e99ec03a4.roa (raw, json) Hash identifier: duRkY9CjbLBHPNbYNiKRQFTJR1WVPmkKdj14u42ov58= Subject key identifier: 3F:A1:F2:8A:60:BA:5B:7A:F6:45:67:0E:91:A7:45:A5:F5:36:AD:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8D99AC6A3258AF5C38500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/827adcc6-cd37-30ee-a817-1a0e99ec03a4.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.34.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:d9:9a:c6:a3:25:8a:f5:c3:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1c3efc5c-dc09-4998-9b99-d91a47355ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:f4:cc:62:07:3f:4b:05:08:46:01:a6:b0: 36:94:97:21:12:a5:d3:b1:25:12:d6:0e:93:16:0c: a2:8f:0d:65:d7:b2:a4:c1:03:f5:06:51:6c:d2:c0: 65:e5:35:2d:df:34:09:c8:79:e5:1b:f3:d6:4b:2b: c3:27:18:85:d6:cb:7a:70:64:6c:34:2a:18:62:92: 81:04:bc:86:9b:a1:4e:fa:4d:84:ec:fc:d1:7f:9f: d3:99:86:29:c9:23:13:9b:f6:9e:18:95:47:9e:37: d5:0a:c7:5d:b1:9a:13:c0:d2:48:78:3c:7a:64:28: 43:e9:d9:9e:ee:8a:ef:42:8c:41:16:6c:99:4d:ca: ac:04:4d:45:3b:37:cc:28:d3:e7:16:91:ea:05:cd: 3f:5a:e6:e8:eb:74:53:cc:c0:70:25:fd:5c:bd:02: b1:20:fd:02:27:c6:27:1c:20:bf:52:ab:e2:c2:c8: ba:c6:e5:f2:4c:9d:02:c7:38:89:fb:12:8e:83:46: 96:d6:23:3e:80:1f:5e:ea:bc:fb:d7:f5:00:13:b8: 77:cb:d8:c1:4e:28:27:6b:1c:c2:65:dd:78:9a:1a: 91:57:6b:cd:07:cd:26:7f:1f:cc:ef:2d:66:97:b1: f1:20:db:ea:e8:8b:35:41:01:6c:fa:4f:c0:e0:11: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A1:F2:8A:60:BA:5B:7A:F6:45:67:0E:91:A7:45:A5:F5:36:AD:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/827adcc6-cd37-30ee-a817-1a0e99ec03a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1a:0b:55:57:a4:bb:b9:ba:fc:8d:86:7e:f8:e1:cb:0b:9c: fd:05:31:e9:4d:0b:f2:5e:95:0d:01:5e:39:87:d6:f0:d2:62: f5:b3:ee:c3:3e:48:c3:16:2b:e7:a3:90:e0:70:d5:ae:fd:8d: 7f:1c:d7:e8:0a:c3:97:e1:9a:bf:37:2e:57:db:d3:9f:01:9f: 7a:24:5d:72:49:ff:91:bb:bd:8a:ea:8c:82:1d:76:98:e4:d1: 09:f1:95:d0:d3:02:72:12:1d:cf:6f:47:5f:0b:72:36:54:65: 6c:00:61:50:ea:f0:ba:e7:46:0f:80:6f:f5:03:54:65:ea:2d: f8:8c:b0:39:35:01:5d:80:36:0f:d6:38:ff:ed:50:78:12:24: 8a:f7:6e:29:5b:4c:33:4c:dd:b9:4e:b9:d0:fe:b8:c7:74:c9: 54:b8:7e:90:49:25:fd:72:57:96:cc:d4:f8:0f:f8:dc:02:23: 32:75:a4:b7:fc:2f:f8:93:84:eb:9f:45:c3:17:ec:72:f2:0d: 0a:96:30:f7:00:01:ce:61:15:1d:01:21:ce:80:70:fb:4b:23: ac:2d:d6:97:f6:ba:e9:99:7f:cd:68:c9:82:ac:74:2d:4f:86: ac:ba:de:52:15:2f:26:58:3a:c7:f1:69:2e:5d:a6:62:40:c7: f3:6d:8e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+NmaxqMlivXDhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWMzZWZjNWMtZGMwOS00OTk4LTliOTktZDkxYTQ3MzU1ZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqz0zGIHP0sFCEYBprA2lJchEqXTsSUS1g6T Fgyijw1l17KkwQP1BlFs0sBl5TUt3zQJyHnlG/PWSyvDJxiF1st6cGRsNCoYYpKB BLyGm6FO+k2E7PzRf5/TmYYpySMTm/aeGJVHnjfVCsddsZoTwNJIeDx6ZChD6dme 7orvQoxBFmyZTcqsBE1FOzfMKNPnFpHqBc0/Wubo63RTzMBwJf1cvQKxIP0CJ8Yn HCC/Uqviwsi6xuXyTJ0CxziJ+xKOg0aW1iM+gB9e6rz71/UAE7h3y9jBTignaxzC Zd14mhqRV2vNB80mfx/M7y1ml7HxINvq6Is1QQFs+k/A4BFrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+h8opgult69kVnDpGnRaX1Nq1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODI3YWRjYzYtY2QzNy0z MGVlLWE4MTctMWEwZTk5ZWMwM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAaC1VXpLu5uvyNhn744csLnP0FMelNC/JelQ0BXjmH1vDSYvWz7sM+ SMMWK+ejkOBw1a79jX8c1+gKw5fhmr83Llfb058Bn3okXXJJ/5G7vYrqjIIddpjk 0QnxldDTAnISHc9vR18LcjZUZWwAYVDq8LrnRg+Ab/UDVGXqLfiMsDk1AV2ANg/W OP/tUHgSJIr3bilbTDNM3blOudD+uMd0yVS4fpBJJf1yV5bM1PgP+NwCIzJ1pLf8 L/iThOufRcMX7HLyDQqWMPcAAc5hFR0BIc6AcPtLI6wt1pf2uumZf81oyYKsdC1P hqy63lIVLyZYOsfxaS5dpmJAx/NtjkA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:18:41 2025 by rpki-client