$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa File: a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa (raw, json) Hash identifier: GfK5RHSA9ttr5vyP0qWaVWKfxZAgAXvz+shaV7lqVOk= Subject key identifier: 3C:94:C7:66:84:6E:90:FD:BD:32:39:C1:E4:5E:1C:B2:85:8C:5E:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B8023CD3DFA5B51A0EE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.53.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:80:23:cd:3d:fa:5b:51:a0:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9c75da91-67b5-4995-a16a-257868b769d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:54:b0:fb:1f:da:d9:60:51:32:f2:3a:69: d3:63:b0:46:ec:bb:f4:9e:5d:b7:d8:55:6c:61:39: 89:b5:82:b8:a0:61:82:92:6c:38:2e:fe:eb:b6:76: 79:49:4c:e1:78:9e:27:89:cf:b6:75:6c:4e:01:a9: b9:c3:f9:80:54:38:60:1c:12:2e:50:66:98:55:33: 2d:1c:c7:5d:46:63:42:1e:c4:36:29:61:80:57:2d: af:d5:ac:65:f7:8e:9c:17:00:2e:cf:b3:07:33:59: a2:3c:14:0c:3f:2c:99:b7:1d:07:83:50:76:f4:b7: 7a:50:db:f3:39:df:c3:5f:0d:ad:e0:29:75:a8:18: 69:70:ff:22:9d:2c:8f:f4:25:2f:13:12:26:00:8e: 10:f4:5e:69:55:63:82:5d:46:3a:b4:35:ec:ea:65: 42:76:9c:2b:63:d1:3a:05:5b:d0:2e:d5:3c:db:09: be:39:94:1b:c2:50:b5:8b:86:4b:ac:20:89:01:93: 80:98:0b:42:18:90:03:78:f1:eb:53:f9:22:4d:8b: 1c:72:82:99:6b:5d:78:ad:7e:de:83:b5:c7:53:63: b1:36:1e:13:59:90:9f:67:ca:f9:62:38:03:0b:ac: f7:02:f6:35:03:41:2f:a1:1a:c5:0f:28:12:cb:65: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:94:C7:66:84:6E:90:FD:BD:32:39:C1:E4:5E:1C:B2:85:8C:5E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:b3:bc:28:ab:43:ed:23:35:2c:b5:b8:52:4f:a7:d5:e4:25: b9:0f:f8:9e:4f:43:02:07:79:af:83:4f:fc:ce:33:e4:78:90: 11:74:e9:3f:49:34:9d:cc:ca:ae:1d:86:f9:bc:ca:87:d9:01: d7:91:ff:05:a3:4c:27:da:79:9b:36:7d:6d:f4:78:9d:39:94: d0:9c:80:75:a9:81:ce:ef:fd:ee:10:df:80:f1:49:a5:25:b0: 25:19:e7:cf:b1:57:19:5c:ac:b8:a7:2a:2b:0f:eb:1c:c3:20: ee:39:d8:27:fd:d4:92:1f:49:b1:dc:c0:87:d8:a7:ba:9b:d0: e4:fb:af:18:c5:3d:38:ba:a6:ce:a4:2d:13:1a:51:ac:b4:4f: 5c:d9:6b:af:8f:16:07:cf:ae:81:3d:5c:d2:25:c1:2f:2c:13: bc:e6:c3:47:d3:9e:37:6c:f8:34:79:39:b4:f4:54:74:af:98: 80:8d:e8:93:5f:a2:ba:9c:d4:37:02:e1:44:de:51:c3:d7:ee: d0:ec:35:ce:0d:2f:ed:1d:1a:43:18:dc:18:8f:ef:00:c8:a3: de:dc:52:ab:27:0f:97:a6:db:9e:48:0a:0d:55:28:d6:a5:7c: 70:c4:57:11:01:57:aa:a3:e6:c8:a2:f3:64:a2:7d:cc:35:70: 27:87:55:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4AjzT36W1Gg7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWM3NWRhOTEtNjdiNS00OTk1LWExNmEtMjU3ODY4Yjc2OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrdUsPsf2tlgUTLyOmnTY7BG7Lv0nl232FVs YTmJtYK4oGGCkmw4Lv7rtnZ5SUzheJ4nic+2dWxOAam5w/mAVDhgHBIuUGaYVTMt HMddRmNCHsQ2KWGAVy2v1axl946cFwAuz7MHM1miPBQMPyyZtx0Hg1B29Ld6UNvz Od/DXw2t4Cl1qBhpcP8inSyP9CUvExImAI4Q9F5pVWOCXUY6tDXs6mVCdpwrY9E6 BVvQLtU82wm+OZQbwlC1i4ZLrCCJAZOAmAtCGJADePHrU/kiTYsccoKZa114rX7e g7XHU2OxNh4TWZCfZ8r5YjgDC6z3AvY1A0EvoRrFDygSy2UsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyUx2aEbpD9vTI5weReHLKFjF7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTFmOWUwZWItNTJjMi0z NjAyLTk1Y2MtNWI1NDI4ZTBkNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2zvCirQ+0jNSy1uFJPp9XkJbkP+J5PQwIHea+DT/zOM+R4kBF06T9J NJ3Myq4dhvm8yofZAdeR/wWjTCfaeZs2fW30eJ05lNCcgHWpgc7v/e4Q34DxSaUl sCUZ58+xVxlcrLinKisP6xzDIO452Cf91JIfSbHcwIfYp7qb0OT7rxjFPTi6ps6k LRMaUay0T1zZa6+PFgfProE9XNIlwS8sE7zmw0fTnjds+DR5ObT0VHSvmICN6JNf orqc1DcC4UTeUcPX7tDsNc4NL+0dGkMY3BiP7wDIo97cUqsnD5em255ICg1VKNal fHDEVxEBV6qj5sii82Sifcw1cCeHVf0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:08:58 2025 by rpki-client