$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7263d9-1624-3fe0-a217-dad460fe6e14.roa File: 9e7263d9-1624-3fe0-a217-dad460fe6e14.roa (raw, json) Hash identifier: Fy+7qRm4t9BZxhu4CZCHOtOUhT7m+gmIYv1wgpSQ9hs= Subject key identifier: A8:7A:81:0A:0E:D8:A8:D0:15:66:20:53:1F:FE:10:8E:0C:DE:06:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CB92A4C4391BC3E185280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7263d9-1624-3fe0-a217-dad460fe6e14.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 68.84.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:b9:2a:4c:43:91:bc:3e:18:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=fc29d008-f89d-4a3a-8191-64c8653be766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:85:8d:93:94:e6:d9:e9:6a:a0:28:45:ed: 8b:fe:43:08:ef:89:44:ad:4e:b6:28:95:81:cd:d0: 2f:6d:41:15:ee:ef:54:60:4f:bd:e9:be:b4:ac:67: dc:6f:b6:81:f6:43:36:ca:9c:8f:52:70:83:3d:84: 90:17:55:32:e3:f7:8f:9a:9e:93:45:11:84:97:9b: 52:d5:42:57:ff:93:b6:16:ae:b7:34:24:4b:81:63: 87:8e:0d:0f:ac:e3:54:82:d0:40:7a:4c:17:1f:ed: 31:75:83:d6:f4:40:4b:91:95:8c:54:1d:37:c7:ff: 70:49:cb:63:f9:16:df:0e:95:61:3f:84:c4:6b:d6: 14:cb:db:9b:e4:46:f8:eb:12:72:b3:8d:82:cb:2e: 47:bb:9d:99:77:ad:c4:b4:7d:17:72:04:1d:16:68: 9f:ec:f4:f9:57:ad:8d:b3:71:6e:d6:41:cb:85:8c: 30:21:92:b3:46:fd:ba:97:2c:65:6c:16:2e:8b:52: 47:1c:e2:cb:b6:90:07:65:b4:cf:ac:72:d1:ad:06: e1:bb:bc:48:65:a8:9c:04:d9:fa:32:75:67:c9:60: 38:b8:72:a8:d3:c3:18:59:fc:56:6f:ee:e4:b9:e8: 47:38:92:34:7a:e3:47:4e:ee:82:33:d7:65:67:18: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:81:0A:0E:D8:A8:D0:15:66:20:53:1F:FE:10:8E:0C:DE:06:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7263d9-1624-3fe0-a217-dad460fe6e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:e2:79:bd:b6:30:29:8c:eb:d2:3b:67:f2:2d:71:17:75:37: 64:07:10:36:b7:d9:02:8f:8b:79:1a:6d:e7:e1:b9:01:86:d9: 3a:fc:74:53:05:f2:d3:19:11:25:42:bf:db:2c:1c:8b:99:95: fa:b5:d4:a4:da:65:17:a7:06:8c:54:34:81:9e:a0:c3:9f:c3: fd:47:a4:58:1a:5c:f8:62:5d:29:d1:4a:a8:75:c3:3c:35:16: 5e:f7:c6:23:a5:88:30:02:f4:b4:6a:dd:8b:56:62:fc:86:96: 8e:91:d9:bd:9f:d0:88:21:c3:e3:76:f0:a9:66:1c:aa:c2:3d: 0c:92:35:37:e0:39:a8:5b:05:fc:15:27:37:7d:47:68:8d:70: 0a:ca:36:6d:cf:f2:ad:0f:a3:96:48:d5:6c:de:f2:92:15:72: 0a:b2:aa:83:34:db:c4:01:95:04:f2:48:6e:34:33:32:e2:27: c0:58:5a:4f:0d:55:e8:a4:58:7e:b4:4a:d7:4c:53:5d:22:44: 6e:2d:3e:65:cc:31:2d:f0:2f:ef:2f:e4:12:72:7b:0c:db:17: b6:c3:7a:56:df:7e:e2:95:2e:cb:c7:18:74:65:80:32:02:4a: f1:ca:da:9b:32:8c:2a:33:ae:1d:79:76:b5:8c:15:ce:e3:4f: c6:44:d0:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebLkqTEORvD4YUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmMyOWQwMDgtZjg5ZC00YTNhLTgxOTEtNjRjODY1M2JlNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/KFjZOU5tnpaqAoRe2L/kMI74lErU62KJWB zdAvbUEV7u9UYE+96b60rGfcb7aB9kM2ypyPUnCDPYSQF1Uy4/ePmp6TRRGEl5tS 1UJX/5O2Fq63NCRLgWOHjg0PrONUgtBAekwXH+0xdYPW9EBLkZWMVB03x/9wSctj +RbfDpVhP4TEa9YUy9ub5Eb46xJys42Cyy5Hu52Zd63EtH0XcgQdFmif7PT5V62N s3Fu1kHLhYwwIZKzRv26lyxlbBYui1JHHOLLtpAHZbTPrHLRrQbhu7xIZaicBNn6 MnVnyWA4uHKo08MYWfxWb+7kuehHOJI0euNHTu6CM9dlZxi9IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh6gQoO2KjQFWYgUx/+EI4M3gadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWU3MjYzZDktMTYyNC0z ZmUwLWEyMTctZGFkNDYwZmU2ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANnieb22MCmM69I7Z/ItcRd1N2QHEDa32QKPi3kabefhuQGG2Tr8dFMF 8tMZESVCv9ssHIuZlfq11KTaZRenBoxUNIGeoMOfw/1HpFgaXPhiXSnRSqh1wzw1 Fl73xiOliDAC9LRq3YtWYvyGlo6R2b2f0Ighw+N28KlmHKrCPQySNTfgOahbBfwV Jzd9R2iNcArKNm3P8q0Po5ZI1Wze8pIVcgqyqoM028QBlQTySG40MzLiJ8BYWk8N VeikWH60StdMU10iRG4tPmXMMS3wL+8v5BJyewzbF7bDelbffuKVLsvHGHRlgDIC SvHK2psyjCozrh15drWMFc7jT8ZE0CU= -----END CERTIFICATE-----Generated at Sun Apr 6 20:36:40 2025 by rpki-client