$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e93a57e-a199-3b0b-9c99-c3732adda36e.roa File: 9e93a57e-a199-3b0b-9c99-c3732adda36e.roa (raw, json) Hash identifier: dHbKm4Asm4PGdcc5ahExYFtndoVb+RY0bQt/6IxC9eo= Subject key identifier: 76:1C:AF:A7:40:B6:42:AC:BC:9F:3E:23:C5:7E:37:65:E8:91:B5:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8E6A02A486E7FE4A47F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e93a57e-a199-3b0b-9c99-c3732adda36e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.43.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:e6:a0:2a:48:6e:7f:e4:a4:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=7402c9a5-2766-4b76-864d-82a3917d323e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:e1:23:00:98:3e:94:81:e5:cd:f6:34:9b: 41:07:d2:38:85:a6:2b:a4:f5:c1:b3:47:fa:86:db: 30:65:28:7c:e2:bf:a9:12:96:5b:56:79:ee:87:dd: 40:1e:17:bd:81:77:a6:4a:e1:ec:e7:34:e3:90:81: c5:68:0c:e3:c5:0a:34:93:b9:1c:dc:61:73:7d:6d: a1:f6:41:91:04:4c:3c:d3:05:a7:df:c0:95:ff:8a: d1:c1:f0:76:2a:12:1c:37:65:db:73:01:31:0f:04: 3d:97:f3:71:a3:a0:a4:a1:a8:3f:81:9d:74:b2:95: af:9c:4e:de:4e:4f:89:e3:fc:af:fd:bf:e5:3a:1e: 9d:ca:1c:72:2e:5c:01:b4:65:d1:75:04:2e:8f:22: 15:5a:f9:63:66:d1:59:72:d8:5d:3c:1b:3b:db:29: 2a:17:8b:76:fc:ed:90:09:f9:d5:02:d9:54:c2:d2: 66:b9:36:05:ab:bf:7e:04:59:79:6f:24:cb:4a:89: 1c:ee:50:91:18:df:fd:2f:55:3b:d8:3c:6d:db:e0: 57:af:e7:9a:48:20:4d:d2:49:ee:d5:70:cd:9c:d5: c9:30:c4:07:05:75:59:45:19:55:07:61:74:51:ef: 5f:c1:c2:0b:82:c7:64:84:a0:88:81:6a:10:97:eb: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:AF:A7:40:B6:42:AC:BC:9F:3E:23:C5:7E:37:65:E8:91:B5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e93a57e-a199-3b0b-9c99-c3732adda36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:09:f6:bb:2f:7e:07:5f:fa:76:0e:85:b0:16:b4:ea:93:a6: c1:00:59:a6:4b:07:cd:8f:43:0a:9b:ac:e5:43:28:9a:40:12: a0:56:00:71:ff:67:69:42:66:cf:a2:c2:54:65:15:b9:19:91: 28:29:64:44:1d:0a:1a:53:1a:b2:f9:89:ea:8a:b7:ca:4f:9c: 93:2c:04:35:a6:d7:65:99:7c:d3:39:5f:47:e7:05:ef:ef:c5: b5:f2:85:74:c9:80:c3:89:f0:34:f9:20:90:df:04:2f:af:74: 2a:e1:de:e0:00:79:22:3b:50:57:ff:54:da:67:a5:24:b8:19: 47:ed:90:9b:77:13:90:d7:fa:8d:7c:65:06:10:51:60:09:fa: e3:fe:bf:f8:08:cc:b8:60:8d:df:30:99:a3:52:e2:b8:3e:ce: b3:f6:e7:ad:12:91:38:ce:f7:26:d3:b3:94:23:80:4c:2f:41: a8:27:5d:21:c4:78:06:b5:59:05:14:2a:20:55:0b:ca:40:16: 84:31:d6:0b:0d:c6:e2:04:54:bc:9c:86:09:58:48:b1:be:01: 68:bb:ea:02:f6:67:fb:1f:9a:43:4f:2c:36:b1:8a:8b:dc:d1: 7a:3c:45:1e:45:6f:8c:27:fe:8a:b7:40:76:9b:b1:28:fb:ec: 87:9c:74:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+OagKkhuf+Skf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NzQwMmM5YTUtMjc2Ni00Yjc2LTg2NGQtODJhMzkxN2QzMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+nhIwCYPpSB5c32NJtBB9I4haYrpPXBs0f6 htswZSh84r+pEpZbVnnuh91AHhe9gXemSuHs5zTjkIHFaAzjxQo0k7kc3GFzfW2h 9kGRBEw80wWn38CV/4rRwfB2KhIcN2XbcwExDwQ9l/Nxo6Ckoag/gZ10spWvnE7e Tk+J4/yv/b/lOh6dyhxyLlwBtGXRdQQujyIVWvljZtFZcthdPBs72ykqF4t2/O2Q CfnVAtlUwtJmuTYFq79+BFl5byTLSokc7lCRGN/9L1U72Dxt2+BXr+eaSCBN0knu 1XDNnNXJMMQHBXVZRRlVB2F0Ue9fwcILgsdkhKCIgWoQl+utXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYcr6dAtkKsvJ8+I8V+N2XokbUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWU5M2E1N2UtYTE5OS0z YjBiLTljOTktYzM3MzJhZGRhMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsJ9rsvfgdf+nYOhbAWtOqTpsEAWaZLB82PQwqbrOVDKJpAEqBWAHH/ Z2lCZs+iwlRlFbkZkSgpZEQdChpTGrL5ieqKt8pPnJMsBDWm12WZfNM5X0fnBe/v xbXyhXTJgMOJ8DT5IJDfBC+vdCrh3uAAeSI7UFf/VNpnpSS4GUftkJt3E5DX+o18 ZQYQUWAJ+uP+v/gIzLhgjd8wmaNS4rg+zrP2560SkTjO9ybTs5QjgEwvQagnXSHE eAa1WQUUKiBVC8pAFoQx1gsNxuIEVLychglYSLG+AWi76gL2Z/sfmkNPLDaxiovc 0Xo8RR5Fb4wn/oq3QHabsSj77IecdMs= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:52 2025 by rpki-client