$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f223873-7167-32e9-ab45-a8923f30a0fa.roa File: 8f223873-7167-32e9-ab45-a8923f30a0fa.roa (raw, json) Hash identifier: mpkupB1cj8+UbllhOvYJx3UBd3Ua7D0ScDJ7/h0ekQE= Subject key identifier: C7:EB:C9:54:E3:3F:95:79:C4:94:9F:B8:CB:17:0F:B0:BE:94:D5:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F79AFA69D970DFF290C744 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f223873-7167-32e9-ab45-a8923f30a0fa.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.58.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:9a:fa:69:d9:70:df:f2:90:c7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5821ea0d-3b0b-45d0-9b69-273b5784daa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:76:04:36:ef:59:fc:d0:ab:bf:84:54:61: 7e:da:bc:c8:df:72:2d:5e:28:8d:6e:6f:a6:78:8d: 92:ae:09:13:c7:bb:58:9c:f5:ad:e3:67:d8:20:a2: 00:8f:7f:e6:d4:52:4b:6b:aa:43:1b:e0:8a:e7:2a: dd:ee:5e:99:e9:5a:3d:84:21:76:bb:4b:cf:ff:4a: ad:ed:cb:3e:fd:21:c4:6a:78:19:cd:37:a8:6e:8b: a0:17:5e:df:7a:e4:aa:ab:fd:74:bf:90:44:df:2d: 7b:ca:ed:15:a2:68:7b:69:f7:56:d1:5f:b3:e9:ae: 38:2e:c9:9a:a3:81:be:a7:d2:0d:2a:9c:34:af:e3: f7:ad:54:f2:6c:01:3b:ba:94:00:b3:88:df:c4:0a: 0f:01:08:c4:27:c1:cc:94:8e:ea:5e:43:1a:cf:85: 45:4e:1e:4c:06:71:5d:b6:aa:81:04:fb:70:3b:01: 40:e6:3d:59:19:54:39:30:30:e1:31:d9:f2:eb:c0: f0:7e:e4:87:56:8f:cb:5c:21:3c:9c:f7:01:bf:3e: 50:9c:da:bf:72:12:d2:b9:26:cd:59:dd:06:7b:5c: 7f:25:44:81:e2:4b:66:e3:b1:7e:25:18:47:77:c0: 52:25:9e:c1:b3:ab:99:28:e3:d9:13:2a:cb:74:83: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EB:C9:54:E3:3F:95:79:C4:94:9F:B8:CB:17:0F:B0:BE:94:D5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f223873-7167-32e9-ab45-a8923f30a0fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:b9:8c:3d:5e:ef:db:8b:08:d5:bc:01:08:35:2f:c9:b7:6e: 5a:7d:f2:7d:fb:d7:91:1a:36:8c:52:e4:a1:a2:df:1e:05:48: d9:32:5f:50:00:ef:f9:b6:83:91:7c:1a:8a:42:39:27:60:6b: 60:67:24:e5:9d:6c:41:30:5a:50:ff:7e:59:aa:98:e4:d5:3e: 89:47:1f:3f:75:ea:0d:e9:b3:cb:ea:45:30:14:f6:ca:1e:30: c2:61:ef:dc:ac:09:59:08:65:d7:33:60:6f:6e:28:62:8b:d3: 3c:ce:76:05:c2:4b:6a:89:cc:fc:47:82:32:93:68:66:e1:f3: b2:39:66:b0:79:72:90:31:00:80:38:f6:d0:7f:a3:b2:22:27: a1:19:71:98:8b:68:e9:fa:fa:3d:c9:7a:0f:04:a9:92:57:fb: 18:9e:90:ef:51:03:01:14:5c:a4:dc:c1:eb:ba:6f:7a:ce:03: a9:b5:a2:6f:fc:68:20:39:89:2f:2f:e7:3b:e4:f9:7a:e4:e9: b2:a5:a8:aa:b2:6e:9d:b1:46:1c:f7:2c:7a:72:0e:d1:76:b4: 24:ed:43:a5:59:ea:9b:42:f3:91:e4:ca:94:1f:74:a3:16:b1: e0:4b:b5:a7:c9:f7:fe:14:94:66:d9:17:ea:46:69:f2:5a:aa: 06:a2:84:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj095r6adlw3/KQx0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTgyMWVhMGQtM2IwYi00NWQwLTliNjktMjczYjU3ODRkYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAght2BDbvWfzQq7+EVGF+2rzI33ItXiiNbm+m eI2SrgkTx7tYnPWt42fYIKIAj3/m1FJLa6pDG+CK5yrd7l6Z6Vo9hCF2u0vP/0qt 7cs+/SHEangZzTeobougF17feuSqq/10v5BE3y17yu0Vomh7afdW0V+z6a44Lsma o4G+p9INKpw0r+P3rVTybAE7upQAs4jfxAoPAQjEJ8HMlI7qXkMaz4VFTh5MBnFd tqqBBPtwOwFA5j1ZGVQ5MDDhMdny68DwfuSHVo/LXCE8nPcBvz5QnNq/chLSuSbN Wd0Ge1x/JUSB4ktm47F+JRhHd8BSJZ7Bs6uZKOPZEyrLdIOqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfryVTjP5V5xJSfuMsXD7C+lNUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYyMjM4NzMtNzE2Ny0z MmU5LWFiNDUtYTg5MjNmMzBhMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMG5jD1e79uLCNW8AQg1L8m3blp98n3715EaNoxS5KGi3x4FSNkyX1AA 7/m2g5F8GopCOSdga2BnJOWdbEEwWlD/flmqmOTVPolHHz916g3ps8vqRTAU9soe MMJh79ysCVkIZdczYG9uKGKL0zzOdgXCS2qJzPxHgjKTaGbh87I5ZrB5cpAxAIA4 9tB/o7IiJ6EZcZiLaOn6+j3Jeg8EqZJX+xiekO9RAwEUXKTcweu6b3rOA6m1om/8 aCA5iS8v5zvk+Xrk6bKlqKqybp2xRhz3LHpyDtF2tCTtQ6VZ6ptC85HkypQfdKMW seBLtafJ9/4UlGbZF+pGafJaqgaihBc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:31 2025 by rpki-client