$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa File: a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa (raw, json) Hash identifier: Jj1tuR0TJ8aKlPxAC01CTEsIyhQiXQynFhx3xdEC2dE= Subject key identifier: 85:6D:FB:A5:5C:A2:B9:B4:3D:B5:D8:C4:9A:4B:EE:B4:CE:D9:14:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848B1F64FC5F0D148A7C5FE2F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 7922 IP address blocks: 68.87.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4f:c5:f0:d1:48:a7:c5:fe:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=60931f86-5d6d-4303-b26f-561289d8cea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:77:12:38:f6:29:1e:6b:2e:67:b0:a5:26: 5b:7f:64:f6:ed:81:b1:4b:51:dc:bc:ed:7f:cb:10: fd:f8:d0:50:12:e4:bd:5b:82:77:33:cc:12:42:62: 4b:df:fc:a5:44:c4:12:35:eb:6b:53:32:2d:e2:9e: 50:2c:16:e0:07:b5:05:6c:cb:6d:c1:58:59:98:59: 4d:b3:91:1c:ab:95:f4:0a:55:2b:5f:2f:f5:b0:90: 50:e5:b9:f5:3d:58:8c:1c:5b:70:88:68:3f:8d:ea: a3:93:f4:44:a6:a8:8c:58:53:b3:29:5d:36:0b:28: 64:98:14:f8:7e:11:7a:75:9a:17:33:ea:ef:da:8e: 73:e5:17:6a:28:e4:06:59:5a:b1:03:2c:ce:e7:b3: ee:38:c7:39:19:08:8d:fd:5f:ef:1b:af:b3:b2:85: 4c:d8:66:c6:0d:a3:76:dd:1c:75:69:17:59:58:ee: 0b:cc:85:bd:e9:c8:52:40:66:ad:fc:ad:e9:df:1f: 66:0c:75:1b:25:51:12:c5:eb:eb:da:dc:a8:80:29: 61:43:ba:95:7d:62:48:e9:cf:dd:1d:0d:e1:66:5c: 9e:3e:9a:75:a9:47:36:a9:17:52:63:3b:f8:a5:d0: 13:f6:2c:b8:76:9f:f3:ef:1e:b4:1b:7b:a8:b3:df: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:FB:A5:5C:A2:B9:B4:3D:B5:D8:C4:9A:4B:EE:B4:CE:D9:14:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:d4:d5:f4:c6:93:e1:1b:73:6a:c5:b3:9f:f0:07:d6:c7:ca: be:3a:4e:b5:83:49:fd:3f:4e:ac:19:a3:64:39:d0:bb:61:a3: 65:ea:ec:bf:72:c8:8d:67:0f:35:f9:e4:df:9a:2c:91:88:65: 75:c3:d1:0c:9a:01:01:8e:41:08:d7:0e:84:8d:35:6d:74:48: 29:6e:0e:18:20:5f:23:82:d6:6f:39:68:08:ca:6e:d6:c1:51: bc:eb:e1:e9:da:a6:b9:5a:a9:b0:37:e5:87:94:cb:ab:ce:ed: c4:5b:39:35:c2:d7:d1:e9:b8:2c:a9:10:0e:6a:58:3b:f5:f0: da:03:39:7d:bc:7b:67:ad:51:7d:52:b7:78:54:b8:7f:2a:06: ec:74:69:8b:3c:5c:72:56:fa:15:90:a3:63:65:be:85:af:7a: 1a:3e:48:c2:36:31:a9:8b:b2:b7:9a:53:c2:72:18:68:8e:4a: 0d:c5:ba:d7:4d:37:b8:2e:6e:21:e2:fc:d0:01:e3:53:ae:02: b6:81:2a:5c:69:ae:1d:35:c0:bb:a6:8e:1e:8f:93:73:28:68: 74:b7:e0:cb:51:e3:1c:dc:5a:62:3f:b9:a6:72:ff:e2:7a:c4: aa:ab:68:39:41:c4:0f:74:cf:2b:77:46:cf:d4:b6:b2:52:ef: b0:e2:43:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9k/F8NFIp8X+LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NjA5MzFmODYtNWQ2ZC00MzAzLWIyNmYtNTYxMjg5ZDhjZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4x3Ejj2KR5rLmewpSZbf2T27YGxS1HcvO1/ yxD9+NBQEuS9W4J3M8wSQmJL3/ylRMQSNetrUzIt4p5QLBbgB7UFbMttwVhZmFlN s5Ecq5X0ClUrXy/1sJBQ5bn1PViMHFtwiGg/jeqjk/REpqiMWFOzKV02CyhkmBT4 fhF6dZoXM+rv2o5z5RdqKOQGWVqxAyzO57PuOMc5GQiN/V/vG6+zsoVM2GbGDaN2 3Rx1aRdZWO4LzIW96chSQGat/K3p3x9mDHUbJVESxevr2tyogClhQ7qVfWJI6c/d HQ3hZlyePpp1qUc2qRdSYzv4pdAT9iy4dp/z7x60G3uos98gTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVt+6Vcorm0PbXYxJpL7rTO2RQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI5MzYwODItZmY3Zi0z YzJmLWI2M2ItYzY0OGM2ZmU1ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANrU1fTGk+Ebc2rFs5/wB9bHyr46TrWDSf0/TqwZo2Q50Ltho2Xq7L9y yI1nDzX55N+aLJGIZXXD0QyaAQGOQQjXDoSNNW10SCluDhggXyOC1m85aAjKbtbB Ubzr4enaprlaqbA35YeUy6vO7cRbOTXC19HpuCypEA5qWDv18NoDOX28e2etUX1S t3hUuH8qBux0aYs8XHJW+hWQo2NlvoWveho+SMI2MamLsreaU8JyGGiOSg3FutdN N7gubiHi/NAB41OuAraBKlxprh01wLumjh6Pk3MoaHS34MtR4xzcWmI/uaZy/+J6 xKqraDlBxA90zyt3Rs/UtrJS77DiQ2s= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:39 2025 by rpki-client