$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95bcd72-adc7-3595-ad9d-8ca81e172b48.roa File: a95bcd72-adc7-3595-ad9d-8ca81e172b48.roa (raw, json) Hash identifier: M/igXlgGUTLR9AoynAUjY75wXj3N/TGJHk9K6CYxP/I= Subject key identifier: 4A:50:D1:76:15:DB:6E:0E:04:55:E2:2E:A5:46:20:F5:2B:59:8E:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7920675EF19C55345F780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95bcd72-adc7-3595-ad9d-8ca81e172b48.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.48.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:92:06:75:ef:19:c5:53:45:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=36e7c688-71c8-4b8d-ac3c-17930ba88843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:66:45:17:31:53:bb:0d:75:37:ba:b1:cc: 5f:a5:68:56:af:7c:5c:8d:35:35:00:79:a7:a4:89: f9:07:84:11:79:d2:28:06:89:c7:69:df:6d:c1:aa: ca:c7:ff:10:cc:84:c9:0a:a6:6f:f7:b5:57:65:4f: 92:66:3e:14:8b:08:75:c0:2b:97:cc:2b:ad:0a:ef: 5d:9b:23:88:c4:8a:bc:53:b4:84:12:d2:dd:21:97: 51:4d:06:9a:2f:4f:e6:b4:91:55:a2:bc:d0:20:f0: 3c:e4:c7:14:66:18:df:45:cc:9d:98:9f:96:05:05: 69:f8:ab:77:b4:f9:f8:a8:38:61:b3:c2:e4:aa:a9: 55:ef:69:56:0e:cc:cc:b6:10:e9:2d:79:44:61:98: a8:14:8e:25:65:b2:cd:77:7a:ea:cc:e2:84:07:20: a5:19:1b:c0:1f:9e:16:15:f7:fc:1e:ca:e8:21:79: c0:02:da:91:78:e5:5d:b2:33:b3:f2:4f:0e:67:82: be:8e:ea:76:3d:f8:b0:38:ac:49:69:6c:ad:91:38: 63:1f:44:ae:e2:67:71:a3:2a:f4:34:d6:50:78:78: 6a:78:25:78:59:99:92:1c:7c:48:51:3d:46:dd:42: 20:e5:5c:fc:92:70:9a:bd:51:63:e7:67:98:88:98: c4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:D1:76:15:DB:6E:0E:04:55:E2:2E:A5:46:20:F5:2B:59:8E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95bcd72-adc7-3595-ad9d-8ca81e172b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:b6:d2:92:85:e8:f6:7e:5c:02:07:71:97:56:32:74:10:96: 88:f2:33:5c:b2:30:0a:3f:0a:fb:f1:c8:fe:b1:b9:1b:ee:b4: 55:ea:78:e6:e6:b1:fb:70:4a:01:26:8a:54:6a:0b:08:29:6c: 72:35:a9:27:ad:1a:79:94:7b:9b:1a:eb:58:7c:9b:e9:5d:f1: d7:4e:98:0a:40:5f:79:90:d8:7a:58:42:38:97:34:b7:5a:76: 11:0b:52:2f:35:8b:18:59:6f:2b:93:85:65:64:4b:79:2a:aa: ef:21:b8:1e:2a:a2:4d:35:2e:10:cd:77:e8:c1:0f:e9:dc:e7: 58:54:90:d3:4f:40:3a:03:d0:37:a6:d9:c2:a3:31:03:3a:61: 55:4d:3d:2a:cc:4e:cd:41:d9:8e:65:96:74:fa:f5:ad:98:12: dc:92:df:47:65:42:22:80:07:3d:cd:a3:0f:40:fc:4d:f9:49: 08:de:1f:ec:3d:66:9c:6d:df:41:0d:a5:e9:4f:40:1c:d0:ef: cb:32:96:1e:a5:31:a2:c0:69:1f:3f:39:ef:e7:65:de:c5:01: d2:39:aa:29:ce:df:ff:06:5f:3d:33:45:99:de:4f:dc:54:08: fb:ce:f0:83:62:97:de:58:25:ec:d9:a0:d1:10:be:bd:1b:14: 11:fc:33:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj095IGde8ZxVNF94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MzZlN2M2ODgtNzFjOC00YjhkLWFjM2MtMTc5MzBiYTg4ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnspmRRcxU7sNdTe6scxfpWhWr3xcjTU1AHmn pIn5B4QRedIoBonHad9twarKx/8QzITJCqZv97VXZU+SZj4Uiwh1wCuXzCutCu9d myOIxIq8U7SEEtLdIZdRTQaaL0/mtJFVorzQIPA85McUZhjfRcydmJ+WBQVp+Kt3 tPn4qDhhs8LkqqlV72lWDszMthDpLXlEYZioFI4lZbLNd3rqzOKEByClGRvAH54W Fff8HsroIXnAAtqReOVdsjOz8k8OZ4K+jup2PfiwOKxJaWytkThjH0Su4mdxoyr0 NNZQeHhqeCV4WZmSHHxIUT1G3UIg5Vz8knCavVFj52eYiJjEvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpQ0XYV224OBFXiLqVGIPUrWY7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk1YmNkNzItYWRjNy0z NTk1LWFkOWQtOGNhODFlMTcyYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN220pKF6PZ+XAIHcZdWMnQQlojyM1yyMAo/CvvxyP6xuRvutFXqeObm sftwSgEmilRqCwgpbHI1qSetGnmUe5sa61h8m+ld8ddOmApAX3mQ2HpYQjiXNLda dhELUi81ixhZbyuThWVkS3kqqu8huB4qok01LhDNd+jBD+nc51hUkNNPQDoD0Dem 2cKjMQM6YVVNPSrMTs1B2Y5llnT69a2YEtyS30dlQiKABz3Now9A/E35SQjeH+w9 Zpxt30ENpelPQBzQ78sylh6lMaLAaR8/Oe/nZd7FAdI5qinO3/8GXz0zRZneT9xU CPvO8INil95YJezZoNEQvr0bFBH8M0M= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:13 2025 by rpki-client