$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a60033e6-ead8-3c08-9425-794ae1828d5f.roa File: a60033e6-ead8-3c08-9425-794ae1828d5f.roa (raw, json) Hash identifier: Dkc3AOxSu35kM5IdfUMhceNcv9oBUlKluCI5v442bjs= Subject key identifier: 82:57:28:EB:15:55:E8:8E:6D:2F:0E:92:3F:EE:34:51:79:82:32:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F77C98E4B9E98EB133E270 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a60033e6-ead8-3c08-9425-794ae1828d5f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.32.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:7c:98:e4:b9:e9:8e:b1:33:e2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=640538dc-3e7a-40b5-99c4-69f469795247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e9:43:62:af:9e:ee:cf:a4:2a:80:e3:c5:75: 77:7c:a8:b9:84:d2:57:52:0f:b0:f7:38:4d:19:bf: 04:10:ed:db:04:65:7b:40:99:69:06:fb:35:29:65: 19:47:0c:61:6e:56:a8:2b:1a:4c:de:e8:2e:bd:32: ab:c6:14:bd:ad:7f:85:1c:4d:bf:17:3c:df:c7:9e: 8e:35:2f:aa:96:e0:fe:e1:6e:39:c6:b0:ae:1a:0d: 3e:f9:28:f0:80:81:7a:fd:24:a8:f1:cf:13:10:bd: a5:42:f9:c0:a1:e0:a9:a6:e6:e7:37:ee:a6:92:90: 2e:70:ca:9c:70:2f:d9:a2:ff:1f:21:7c:eb:3c:34: 02:c5:70:40:70:13:fd:d2:fb:87:87:9e:8a:a4:56: 50:2b:2c:d9:c5:4e:37:8d:b5:f7:df:12:41:e6:6f: 56:40:43:2d:f6:f5:f7:6b:52:86:9b:cc:02:be:9c: e0:c8:75:47:3c:19:ac:31:01:5b:cf:af:25:53:75: 23:df:8b:cf:4b:c4:8b:7b:3f:cd:54:ef:09:25:28: 07:44:e6:87:40:79:f7:51:a0:70:65:06:5b:47:f1: 33:27:d7:e8:37:9c:89:cd:d6:78:69:21:73:90:fd: a1:c7:4f:6d:b2:36:21:e6:b1:6d:27:0d:f5:a0:c5: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:57:28:EB:15:55:E8:8E:6D:2F:0E:92:3F:EE:34:51:79:82:32:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a60033e6-ead8-3c08-9425-794ae1828d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:71:49:76:e6:3a:b2:b1:fe:5a:47:f0:b7:1d:c0:5e:7b:3b: 80:63:40:50:58:6f:30:26:25:89:ba:c8:e9:13:ee:f7:c0:59: 4d:e1:47:8e:8f:e3:a7:d6:4c:38:9d:46:73:86:f8:7d:a2:b3: 54:0e:fb:3a:7b:0a:16:7f:d3:c7:01:53:78:13:ea:f0:77:89: d2:38:ea:38:1a:84:2a:e0:3f:31:28:bf:bd:cd:19:c9:6c:e8: 3e:09:f2:66:c2:6b:0b:9f:fd:4d:49:98:eb:1f:83:77:28:c1: 1e:d1:4c:cc:7b:17:b4:99:13:8e:18:4b:80:7a:a9:33:64:e8: 30:eb:b5:85:72:cf:2a:8d:70:73:62:df:e9:c8:f0:61:9c:70: 3a:d0:d4:ab:cb:9d:68:95:ff:b3:78:55:f5:06:8d:4a:0d:ba: 7d:e7:00:1f:ff:6b:14:13:be:62:50:dd:78:d2:3d:d5:42:46: ff:2f:59:ce:e4:e7:67:cd:e9:1a:d8:f7:ef:e3:22:99:98:04: a3:b5:6c:ba:16:71:64:57:29:1e:ee:a2:2e:2a:b3:bf:89:31: 26:cf:ac:18:82:64:c9:63:4a:06:8a:18:c2:06:9c:91:fc:8d: 89:3b:c9:4b:42:f7:63:10:39:06:62:26:cb:32:cd:ac:58:8a: ad:75:e1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj093yY5LnpjrEz4nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjQwNTM4ZGMtM2U3YS00MGI1LTk5YzQtNjlmNDY5Nzk1MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjelDYq+e7s+kKoDjxXV3fKi5hNJXUg+w9zhN Gb8EEO3bBGV7QJlpBvs1KWUZRwxhblaoKxpM3uguvTKrxhS9rX+FHE2/Fzzfx56O NS+qluD+4W45xrCuGg0++SjwgIF6/SSo8c8TEL2lQvnAoeCppubnN+6mkpAucMqc cC/Zov8fIXzrPDQCxXBAcBP90vuHh56KpFZQKyzZxU43jbX33xJB5m9WQEMt9vX3 a1KGm8wCvpzgyHVHPBmsMQFbz68lU3Uj34vPS8SLez/NVO8JJSgHROaHQHn3UaBw ZQZbR/EzJ9foN5yJzdZ4aSFzkP2hx09tsjYh5rFtJw31oMWpCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJXKOsVVeiObS8Okj/uNFF5gjJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTYwMDMzZTYtZWFkOC0z YzA4LTk0MjUtNzk0YWUxODI4ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5xSXbmOrKx/lpH8LcdwF57O4BjQFBYbzAmJYm6yOkT7vfAWU3hR46P 46fWTDidRnOG+H2is1QO+zp7ChZ/08cBU3gT6vB3idI46jgahCrgPzEov73NGcls 6D4J8mbCawuf/U1JmOsfg3cowR7RTMx7F7SZE44YS4B6qTNk6DDrtYVyzyqNcHNi 3+nI8GGccDrQ1KvLnWiV/7N4VfUGjUoNun3nAB//axQTvmJQ3XjSPdVCRv8vWc7k 52fN6RrY9+/jIpmYBKO1bLoWcWRXKR7uoi4qs7+JMSbPrBiCZMljSgaKGMIGnJH8 jYk7yUtC92MQOQZiJssyzaxYiq114ZY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:41 2025 by rpki-client