$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c15a7bf-2f27-393c-b5a8-29b742d0612d.roa File: 8c15a7bf-2f27-393c-b5a8-29b742d0612d.roa (raw, json) Hash identifier: mPDYZnvJCcwJlukTsGPiAN4sorHmhZWT+zwTAwjwsJ8= Subject key identifier: 9B:57:76:42:5A:03:F1:87:80:E7:85:4F:10:73:81:3D:27:16:FB:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE388160FC48FD93F7860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c15a7bf-2f27-393c-b5a8-29b742d0612d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.53.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e3:88:16:0f:c4:8f:d9:3f:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=0b18f986-0b39-4e88-a3b5-32cf2d01c40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:87:54:c9:9c:9d:3f:46:e8:4b:c1:34:d9: 05:b3:8f:69:5f:4e:e3:26:f9:93:4d:6a:22:a6:8c: ce:3f:dc:6d:34:d2:73:d5:9e:ff:1f:ec:65:09:b8: e0:99:43:ec:27:28:7e:13:2e:51:21:a9:f3:59:dd: bc:68:d9:38:3d:dd:4a:df:53:9d:00:fc:d4:5c:68: 67:92:da:56:d2:42:95:50:03:fd:c8:d9:97:19:91: ea:62:02:bd:47:17:d5:98:0c:64:88:25:b3:84:ce: cf:f6:e5:a3:15:16:0a:a7:38:5e:f6:2d:f7:13:ac: 45:8d:c3:a4:f9:00:bf:97:e9:71:ba:7d:98:1d:2d: a1:ed:ef:72:19:2e:1c:08:53:30:48:c5:bb:e1:ae: 64:e7:65:58:b4:fc:a1:70:54:ca:e7:6a:77:f7:1a: 92:f3:16:ad:96:32:fc:d8:26:46:50:eb:e7:50:23: 3e:09:2f:2a:a6:fe:bc:a7:e3:db:c3:78:25:47:39: d3:b3:2d:f8:87:05:6e:01:11:a4:f3:1f:65:1a:78: 5f:82:69:42:fa:ef:7a:66:04:6f:13:c4:29:e8:15: e9:0e:0c:0c:7f:e0:d9:57:c1:62:41:d5:eb:e7:e0: f1:de:2a:0d:d2:d2:b8:ca:b1:57:25:2c:c2:eb:54: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:57:76:42:5A:03:F1:87:80:E7:85:4F:10:73:81:3D:27:16:FB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c15a7bf-2f27-393c-b5a8-29b742d0612d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e5:2e:a0:e1:51:d4:bd:e5:92:fb:1d:89:e8:fe:39:e3:af: 8c:5c:f9:e4:20:88:36:3e:a5:4e:0c:0d:58:cf:58:63:e9:d3: 06:02:be:ab:2a:82:1e:76:7d:14:4a:45:3f:c3:1b:0f:04:f9: 5a:fd:00:2d:fb:41:01:25:62:b8:34:3c:a4:28:24:5e:27:15: 37:71:9f:a0:db:ee:4e:ad:5c:04:1b:21:a0:f9:48:f1:0a:d6: cf:5f:2e:33:69:83:fd:d3:84:f9:0e:e4:fd:84:16:94:9d:71: fe:29:06:35:38:5b:16:6c:4c:2b:9a:20:c0:aa:61:fd:26:ba: 1b:9d:6f:b3:1a:a3:9a:9c:97:73:3a:5e:b9:b1:78:7d:24:56: 25:81:f8:46:31:fa:c2:71:3c:62:71:4d:51:44:bb:ac:57:d8: 66:60:84:b7:16:a6:23:1c:d2:8f:28:63:cd:85:0c:49:eb:66: 80:8f:34:d2:5a:01:67:3b:77:c9:71:26:58:d2:de:e4:21:15: 33:6c:a7:9f:50:f3:80:19:3c:86:00:55:a3:5c:c6:03:33:56: 73:7b:ee:c8:ed:09:9c:b0:19:d7:d7:7d:6c:a5:47:74:3e:c0: 68:30:56:a6:71:ed:7e:5b:17:17:ea:a1:22:e1:2a:5d:e5:fa: 78:9e:27:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOOIFg/Ej9k/eGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MGIxOGY5ODYtMGIzOS00ZTg4LWEzYjUtMzJjZjJkMDFjNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoISHVMmcnT9G6EvBNNkFs49pX07jJvmTTWoi pozOP9xtNNJz1Z7/H+xlCbjgmUPsJyh+Ey5RIanzWd28aNk4Pd1K31OdAPzUXGhn ktpW0kKVUAP9yNmXGZHqYgK9RxfVmAxkiCWzhM7P9uWjFRYKpzhe9i33E6xFjcOk +QC/l+lxun2YHS2h7e9yGS4cCFMwSMW74a5k52VYtPyhcFTK52p39xqS8xatljL8 2CZGUOvnUCM+CS8qpv68p+Pbw3glRznTsy34hwVuARGk8x9lGnhfgmlC+u96ZgRv E8Qp6BXpDgwMf+DZV8FiQdXr5+Dx3ioN0tK4yrFXJSzC61RCQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtXdkJaA/GHgOeFTxBzgT0nFvtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGMxNWE3YmYtMmYyNy0z OTNjLWI1YTgtMjliNzQyZDA2MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDlLqDhUdS95ZL7HYno/jnjr4xc+eQgiDY+pU4MDVjPWGPp0wYCvqsq gh52fRRKRT/DGw8E+Vr9AC37QQElYrg0PKQoJF4nFTdxn6Db7k6tXAQbIaD5SPEK 1s9fLjNpg/3ThPkO5P2EFpSdcf4pBjU4WxZsTCuaIMCqYf0muhudb7Mao5qcl3M6 XrmxeH0kViWB+EYx+sJxPGJxTVFEu6xX2GZghLcWpiMc0o8oY82FDEnrZoCPNNJa AWc7d8lxJljS3uQhFTNsp59Q84AZPIYAVaNcxgMzVnN77sjtCZywGdfXfWylR3Q+ wGgwVqZx7X5bFxfqoSLhKl3l+nieJ5E= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:34 2025 by rpki-client