$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa98b63e-d962-3fa5-8d2b-60f69e5c0e31.roa File: aa98b63e-d962-3fa5-8d2b-60f69e5c0e31.roa (raw, json) Hash identifier: QrqJhEpBdcTq2NA/1wgHS7Lni1/RtUDiyMKf7FLBx/s= Subject key identifier: 62:32:1C:D0:D2:07:43:36:72:EA:3A:8C:61:EF:C9:B4:76:95:25:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D2D2C336D38DF8687BBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa98b63e-d962-3fa5-8d2b-60f69e5c0e31.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7725 IP address blocks: 68.63.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:2d:2c:33:6d:38:df:86:87:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=dadeab6f-84ab-4e3c-8002-26a0fcfe58b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:fa:fd:5e:82:fb:57:96:92:c7:eb:85:4a: 6c:37:7b:e7:78:c8:83:ab:09:f2:b6:ad:e0:c7:a6: ec:12:81:af:dd:f0:cb:1c:2a:e1:12:41:eb:3d:80: 66:93:24:2b:a8:38:a4:09:58:b5:d2:b2:99:b2:0a: 1d:84:02:73:99:74:aa:d3:e5:bb:a6:37:d8:33:94: e1:cf:69:38:95:fe:40:dd:64:6a:ea:d6:79:64:73: d7:87:31:4f:85:9c:e9:b9:6a:41:d5:e4:0a:aa:70: d1:7e:eb:ed:46:f3:74:ed:7c:5f:09:a8:35:74:c9: dc:fc:8e:0c:cf:d7:57:f7:4c:b9:e1:20:be:af:2c: 75:96:e9:e4:f5:c0:2a:4f:33:1f:aa:57:3a:90:88: 1a:3b:13:e5:0a:01:da:8e:8b:47:cc:19:8e:3d:58: 74:22:b8:6d:19:3c:4e:41:cd:77:72:e3:fc:b2:1d: 3c:57:f5:27:3c:1b:a0:a5:18:a3:6f:b0:fc:35:ac: 3f:1b:9b:71:7f:8e:fc:7b:29:a3:59:25:2e:23:42: 16:d0:0d:0b:3d:c0:4c:55:5f:ab:90:94:1e:02:a8: 52:4a:f2:d0:a1:82:9a:f1:68:af:d1:1b:34:5b:af: b9:a8:69:78:35:20:83:90:70:75:a9:6b:5e:e3:9b: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:32:1C:D0:D2:07:43:36:72:EA:3A:8C:61:EF:C9:B4:76:95:25:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa98b63e-d962-3fa5-8d2b-60f69e5c0e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.63.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3b:f2:55:9f:74:cb:84:eb:ad:95:ba:ba:fc:9a:23:51:f7: df:83:fc:19:c8:fa:7f:25:9a:e9:e2:59:5a:2c:57:c1:6d:43: 7e:9e:78:56:e1:5b:2f:cf:45:23:97:17:bd:35:3a:1a:af:e6: 39:88:9d:af:2c:3d:1b:8d:41:95:42:a3:e2:4a:35:72:44:bd: c8:56:21:18:5a:f6:c8:57:9b:a2:5d:d2:7f:a0:4d:c4:cf:45: fc:59:ba:dc:f5:b3:5c:47:08:2f:f1:4b:c0:e0:8f:90:21:fa: 7b:c5:90:64:b8:8f:89:a3:12:ea:7b:58:6c:c9:cf:1e:85:22: 55:d4:a7:16:95:a4:be:c4:60:ec:f1:1b:a4:5c:df:bb:fc:91: 80:e3:d7:43:48:46:f8:e6:b2:8a:31:8e:b8:09:6a:2e:ac:02: 57:50:39:de:c4:e6:81:8b:d6:08:52:5b:e6:8c:27:3b:8b:00: b3:53:5a:44:69:4f:0d:be:78:ea:24:32:9f:f6:ef:85:30:6f: 0e:d6:87:cd:a0:98:a2:27:cd:c0:02:3e:37:3f:2a:84:1f:38: 2b:01:3d:ca:d5:82:2a:d0:93:c4:21:ee:b7:5c:33:e8:34:47: 9d:34:ff:e7:48:ff:d5:fb:76:17:44:9e:68:f0:e0:e4:20:6b: 45:e5:e3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebS0sM20434aHu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGFkZWFiNmYtODRhYi00ZTNjLTgwMDItMjZhMGZjZmU1OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ar6/V6C+1eWksfrhUpsN3vneMiDqwnytq3g x6bsEoGv3fDLHCrhEkHrPYBmkyQrqDikCVi10rKZsgodhAJzmXSq0+W7pjfYM5Th z2k4lf5A3WRq6tZ5ZHPXhzFPhZzpuWpB1eQKqnDRfuvtRvN07XxfCag1dMnc/I4M z9dX90y54SC+ryx1lunk9cAqTzMfqlc6kIgaOxPlCgHajotHzBmOPVh0IrhtGTxO Qc13cuP8sh08V/UnPBugpRijb7D8Naw/G5txf478eymjWSUuI0IW0A0LPcBMVV+r kJQeAqhSSvLQoYKa8Wiv0Rs0W6+5qGl4NSCDkHB1qWte45v12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIyHNDSB0M2cuo6jGHvybR2lSXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE5OGI2M2UtZDk2Mi0z ZmE1LThkMmItNjBmNjllNWMwZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERD/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA78lWfdMuE662Vurr8miNR99+D/BnI+n8lmuniWVosV8FtQ36eeFbh Wy/PRSOXF701Ohqv5jmIna8sPRuNQZVCo+JKNXJEvchWIRha9shXm6Jd0n+gTcTP RfxZutz1s1xHCC/xS8Dgj5Ah+nvFkGS4j4mjEup7WGzJzx6FIlXUpxaVpL7EYOzx G6Rc37v8kYDj10NIRvjmsooxjrgJai6sAldQOd7E5oGL1ghSW+aMJzuLALNTWkRp Tw2+eOokMp/274Uwbw7Wh82gmKInzcACPjc/KoQfOCsBPcrVgirQk8Qh7rdcM+g0 R500/+dI/9X7dhdEnmjw4OQga0Xl400= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:31 2025 by rpki-client