$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95b65908-c484-3caa-ac8f-db69a89142b3.roa File: 95b65908-c484-3caa-ac8f-db69a89142b3.roa (raw, json) Hash identifier: 2nW8+rqJ/UMmLEIx+5w6Igbw6uJu+//ZJGYldaIT7V4= Subject key identifier: 67:14:56:BF:71:4A:3E:EC:C8:FA:2F:D3:F5:83:81:EE:83:9A:AD:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F783B06DB8B43F8D15CD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95b65908-c484-3caa-ac8f-db69a89142b3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.36.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:83:b0:6d:b8:b4:3f:8d:15:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=efe33e44-4bfc-4a67-bc4c-65902ef194e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:0f:7d:c2:45:f3:5c:35:ce:b5:70:aa:28: d1:3a:dd:c6:69:97:23:99:ed:44:2a:14:b3:ed:bd: 4b:3b:71:4b:75:11:4a:94:03:4c:70:41:0b:ee:a1: d7:c8:35:09:36:1f:76:f0:c5:37:f0:2d:67:43:c0: ac:d6:ae:61:b1:ac:3d:f3:b6:25:15:82:08:02:e7: a2:4d:08:2d:d3:2f:3e:01:d2:0e:a4:7c:1f:5b:b5: 5e:c5:2a:db:71:51:39:6f:91:27:d2:71:a2:27:21: 27:bf:16:18:33:74:99:fb:e8:02:89:0d:9d:ca:20: f6:d0:17:92:1b:2d:18:62:d3:bf:e2:56:ee:03:06: 9c:6e:23:f1:13:49:af:49:90:8b:2e:9c:5b:a2:73: 7b:e2:59:20:0b:cd:68:9e:4b:e7:3f:73:48:b4:36: bf:3a:25:19:00:b9:ae:ed:9c:d8:da:24:0c:94:a0: 09:39:06:ec:0b:fa:21:ef:cd:d3:cb:16:80:01:31: 6d:04:4f:b5:b1:92:af:54:89:9c:02:b4:7f:ae:96: 93:06:d4:4a:9b:2b:f8:b5:b1:bc:15:fd:95:94:ba: 94:d4:26:eb:17:21:aa:a0:d4:7a:41:09:c5:ae:b0: 01:fc:4f:61:27:f0:1a:6f:20:b3:a5:02:a4:0e:18: f8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:14:56:BF:71:4A:3E:EC:C8:FA:2F:D3:F5:83:81:EE:83:9A:AD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95b65908-c484-3caa-ac8f-db69a89142b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5e:54:cf:3b:7c:9e:60:5f:bf:e7:68:53:8c:fd:87:9e:7f: 7a:46:c1:b6:a6:76:77:7e:40:2f:ff:12:76:fc:5f:60:86:2a: 5d:a0:8c:d8:15:9a:8b:cb:97:21:20:d2:48:df:57:b0:f3:25: 70:88:07:70:42:00:10:bd:45:1e:74:b1:65:01:c7:24:cd:c7: ac:5c:c5:fe:6a:c3:bf:6b:79:f1:45:d2:21:fe:dd:2d:c4:03: f0:fa:3e:6d:c3:37:a0:04:19:b7:5f:1b:0b:11:b6:92:2b:82: 92:7a:f8:9e:ee:83:00:33:46:07:a4:cc:8a:89:93:2c:db:86: dd:f5:d0:ec:05:44:8c:ea:e8:69:06:bc:6b:8c:ac:b8:0c:57: 86:a5:3a:2b:29:4f:e7:fa:49:fb:dd:dd:38:39:68:67:4f:d4: 31:d8:57:eb:ad:ec:20:31:16:70:80:9e:87:3b:88:dd:52:3f: 59:d4:af:6a:e1:12:2e:37:d3:3e:3d:93:34:23:47:b7:a5:e2: 1c:7d:33:5c:f1:d7:c0:2a:2e:8a:0d:c7:fd:27:16:f2:9e:2d: c3:e5:9d:80:0a:58:90:f7:7c:61:4c:6a:63:f9:cd:41:ba:e1: c6:62:2e:6c:69:f4:8a:67:87:a7:29:64:09:93:5c:a5:d5:95: 6d:d7:f4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094Owbbi0P40VzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZWZlMzNlNDQtNGJmYy00YTY3LWJjNGMtNjU5MDJlZjE5NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkREPfcJF81w1zrVwqijROt3GaZcjme1EKhSz 7b1LO3FLdRFKlANMcEEL7qHXyDUJNh928MU38C1nQ8Cs1q5hsaw987YlFYIIAuei TQgt0y8+AdIOpHwfW7VexSrbcVE5b5En0nGiJyEnvxYYM3SZ++gCiQ2dyiD20BeS Gy0YYtO/4lbuAwacbiPxE0mvSZCLLpxbonN74lkgC81onkvnP3NItDa/OiUZALmu 7ZzY2iQMlKAJOQbsC/oh783TyxaAATFtBE+1sZKvVImcArR/rpaTBtRKmyv4tbG8 Ff2VlLqU1CbrFyGqoNR6QQnFrrAB/E9hJ/AabyCzpQKkDhj4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcUVr9xSj7syPov0/WDge6Dmq3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTViNjU5MDgtYzQ4NC0z Y2FhLWFjOGYtZGI2OWE4OTE0MmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFeVM87fJ5gX7/naFOM/Yeef3pGwbamdnd+QC//Enb8X2CGKl2gjNgV movLlyEg0kjfV7DzJXCIB3BCABC9RR50sWUBxyTNx6xcxf5qw79refFF0iH+3S3E A/D6Pm3DN6AEGbdfGwsRtpIrgpJ6+J7ugwAzRgekzIqJkyzbht310OwFRIzq6GkG vGuMrLgMV4alOispT+f6Sfvd3Tg5aGdP1DHYV+ut7CAxFnCAnoc7iN1SP1nUr2rh Ei430z49kzQjR7el4hx9M1zx18AqLooNx/0nFvKeLcPlnYAKWJD3fGFMamP5zUG6 4cZiLmxp9Ipnh6cpZAmTXKXVlW3X9CI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:50 2025 by rpki-client