$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa File: 9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa (raw, json) Hash identifier: Fta8d2+fllh5XDYYNBhN9CZJmncPwkJisM/5sCUKYPU= Subject key identifier: A9:FA:9C:FC:A3:4D:58:0E:CF:23:B0:9D:46:39:46:91:93:A4:47:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CE85CA8A807F521BB4E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.59.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:e8:5c:a8:a8:07:f5:21:bb:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=91596e8a-d142-4f7d-90f3-4f9139e64294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:0d:e9:17:a9:11:b0:1f:c2:98:4c:09:4e: 38:2c:8a:ee:1d:41:20:da:0b:a8:6b:ee:5c:3c:a2: da:cd:91:64:43:ba:3c:b4:63:91:b9:cb:a5:45:e4: fc:a1:dc:a7:b6:79:95:f6:47:ec:62:2c:68:f1:e7: 72:43:81:74:c5:54:0d:83:a0:49:0e:98:9e:c2:3a: a8:8c:00:56:04:00:a5:69:6f:33:96:ca:27:30:04: 81:13:ec:0a:41:6c:3a:dd:93:bf:9b:b9:dc:69:be: 5b:2a:b7:8e:b4:c3:d3:7a:87:a3:37:ed:e9:c3:13: a9:5b:93:71:c0:1e:fd:1c:4d:46:84:b9:0e:4c:ee: b0:68:27:4a:54:2a:c8:6a:d7:3f:ab:a3:30:3b:fd: 84:52:70:73:eb:d6:f2:44:37:fc:e7:36:2f:d9:c7: 07:6c:91:43:1c:1c:8d:6a:ea:a3:5f:1d:0f:60:28: 8e:89:43:f0:da:a1:99:16:ec:28:ef:5b:58:38:45: 2d:1d:50:10:3a:00:5e:0d:d9:9d:b0:60:2b:53:36: c2:ab:af:90:19:7a:88:e0:98:02:49:fd:4d:37:96: 37:d7:f2:de:b9:fd:b3:2b:16:fb:c6:a0:4e:eb:bf: 14:67:b4:f2:fd:2e:d2:87:7c:d7:1b:f0:c2:2c:d7: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FA:9C:FC:A3:4D:58:0E:CF:23:B0:9D:46:39:46:91:93:A4:47:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7e:9b:de:bd:e1:17:e5:2a:2a:7f:e7:64:9f:73:2d:c7:06: db:dc:8e:ad:95:e4:4f:a0:87:29:0e:df:93:cc:43:c9:59:3f: c2:7f:54:52:52:5b:ba:3e:53:b0:58:21:c1:63:fa:1c:a8:60: d7:69:24:dd:b9:9d:3b:be:81:c2:a4:f9:86:23:23:7b:e2:84: 45:8d:27:bc:f4:5d:94:1f:cc:bf:10:d5:49:93:62:ad:75:2a: 35:e2:16:ac:04:3d:99:ed:36:bf:7d:48:ba:eb:15:ef:e0:e7: cb:0d:ac:43:fd:ac:ed:3b:42:65:6c:4b:7d:bc:fe:73:81:7e: c5:7d:08:f9:7d:c1:18:e9:88:54:02:42:29:45:33:7d:cf:0f: 1b:54:0e:7e:76:47:d3:7e:62:e5:34:0b:90:33:2d:83:f8:c9: ac:0b:f4:5f:ae:bf:d8:ec:6e:23:72:58:d8:c1:a9:3c:2e:2b: 6f:1a:97:82:03:26:f7:9a:cc:66:88:6f:0b:4c:20:6b:ff:99: 2b:07:ea:60:5f:23:5f:0a:92:6b:05:ee:92:a7:b9:f6:9c:00: be:f2:c7:f2:b9:e4:a3:c7:47:a0:4c:46:ca:2a:8d:f8:63:b8: 17:2b:65:07:3f:10:d5:49:69:02:76:2e:9c:2b:f1:0f:57:b1: 48:4e:e8:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOhcqKgH9SG7ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OTE1OTZlOGEtZDE0Mi00ZjdkLTkwZjMtNGY5MTM5ZTY0Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8EN6RepEbAfwphMCU44LIruHUEg2guoa+5c PKLazZFkQ7o8tGORuculReT8odyntnmV9kfsYixo8edyQ4F0xVQNg6BJDpiewjqo jABWBAClaW8zlsonMASBE+wKQWw63ZO/m7ncab5bKreOtMPTeoejN+3pwxOpW5Nx wB79HE1GhLkOTO6waCdKVCrIatc/q6MwO/2EUnBz69byRDf85zYv2ccHbJFDHByN auqjXx0PYCiOiUPw2qGZFuwo71tYOEUtHVAQOgBeDdmdsGArUzbCq6+QGXqI4JgC Sf1NN5Y31/Leuf2zKxb7xqBO678UZ7Ty/S7Sh3zXG/DCLNdSVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn6nPyjTVgOzyOwnUY5RpGTpEcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWJlMGJmOWMtOTczMS0z NmI0LWIwZWMtYmYxNDMwOTczYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRDuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN+m9694RflKip/52Sfcy3HBtvcjq2V5E+ghykO35PMQ8lZP8J/VFJS W7o+U7BYIcFj+hyoYNdpJN25nTu+gcKk+YYjI3vihEWNJ7z0XZQfzL8Q1UmTYq11 KjXiFqwEPZntNr99SLrrFe/g58sNrEP9rO07QmVsS328/nOBfsV9CPl9wRjpiFQC QilFM33PDxtUDn52R9N+YuU0C5AzLYP4yawL9F+uv9jsbiNyWNjBqTwuK28al4ID JveazGaIbwtMIGv/mSsH6mBfI18KkmsF7pKnufacAL7yx/K55KPHR6BMRsoqjfhj uBcrZQc/ENVJaQJ2Lpwr8Q9XsUhO6Oc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:20:39 2025 by rpki-client