$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa File: af0059cb-14d9-35f8-aa56-704c2806d4d2.roa (raw, json) Hash identifier: GkhTGvZYkEig+t/i8gl7YpkTvVR2moF3hsNPF/ndSiA= Subject key identifier: 2F:D6:68:3C:DD:E2:84:DF:F5:AF:6E:31:B2:C3:FC:B6:84:AD:E6:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E225FB13D2FF7A344EBF8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 68.86.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:22:5f:b1:3d:2f:f7:a3:44:eb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=63c50902-0162-453f-83ab-23b64bf66eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:f7:4d:bd:7f:8a:38:07:bb:98:6e:6f:fa: b6:8d:df:a4:67:81:6c:e4:b5:fe:12:46:07:5a:fd: 42:f2:3f:94:d5:0a:9b:c1:05:82:8c:e2:28:03:d6: 7f:13:07:f7:98:71:0d:01:6e:f2:f6:9d:77:6c:5b: 86:78:40:86:b2:4b:78:da:db:4f:df:e3:42:e8:e8: a7:5a:cc:77:64:8d:71:1e:1b:80:53:91:46:da:97: 41:3b:b6:5b:10:9e:f7:5d:43:4f:3f:9b:fa:4f:f6: 4a:e9:a1:57:5f:38:b0:8b:63:c3:8c:23:0b:ad:19: 51:d5:26:29:bb:5c:85:29:b4:25:65:bc:6f:8b:82: 00:1d:1e:4b:ab:51:6f:5d:45:47:a2:19:cc:d2:db: 83:be:34:7f:d9:11:42:99:a9:cf:79:38:e3:bd:6b: bc:90:bc:58:4a:f8:4d:a2:66:e3:5a:1a:28:3e:6a: 29:22:3b:62:7f:32:a4:d8:26:05:88:22:cc:08:79: f8:10:97:7d:45:4b:a5:bc:71:51:36:e3:f3:6c:4a: 16:d9:40:1b:eb:23:dc:97:6d:24:e4:0c:f1:23:7f: 2c:98:ad:64:a6:28:17:14:15:3d:42:50:68:01:82: 44:f3:c2:d4:23:fc:e0:0c:1b:14:cd:3a:f8:fc:0d: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:68:3C:DD:E2:84:DF:F5:AF:6E:31:B2:C3:FC:B6:84:AD:E6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:77:40:94:21:ca:47:31:74:08:ea:a3:57:95:08:be:7c:bc: 2c:af:55:53:3a:85:53:77:34:d3:5d:3b:9a:6b:54:25:95:4d: 41:3f:53:31:63:16:38:af:7a:95:90:7c:9f:6c:1f:34:45:53: d5:79:5e:bf:60:01:08:9f:2f:90:a9:c0:af:25:43:44:f8:47: d3:d1:00:38:73:4c:e8:54:9c:d6:bc:21:58:ea:f3:f8:96:0d: 1d:4f:7e:d7:5d:a2:40:34:42:0b:67:75:08:07:08:e4:06:40: a4:d2:f6:52:34:a1:b3:0a:b0:4d:af:e8:80:fe:17:6b:96:c7: 85:34:0b:a9:82:98:67:3e:b4:33:cd:10:99:a3:c6:b4:68:6f: a3:eb:27:3f:6b:32:24:57:62:64:a4:d3:17:4d:cf:27:13:35: ce:32:8d:2e:69:7d:6e:58:f0:df:37:a8:31:5a:c1:17:16:c8: 7e:ac:08:25:dc:76:68:b4:0c:06:f9:5a:62:a5:a4:da:3a:f3: fb:a9:b6:19:a8:6c:ee:02:8c:40:26:b2:70:ff:7e:2c:4c:74: 6e:0c:27:27:53:c1:d3:f5:98:c9:b4:73:4b:53:dd:77:21:89: e1:d2:ac:58:a4:8c:8b:e3:ab:25:35:f2:05:d0:77:1e:37:7b: af:42:16:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebiJfsT0v96NE6/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjNjNTA5MDItMDE2Mi00NTNmLTgzYWItMjNiNjRiZjY2ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQT3Tb1/ijgHu5hub/q2jd+kZ4Fs5LX+EkYH Wv1C8j+U1QqbwQWCjOIoA9Z/Ewf3mHENAW7y9p13bFuGeECGskt42ttP3+NC6Oin Wsx3ZI1xHhuAU5FG2pdBO7ZbEJ73XUNPP5v6T/ZK6aFXXziwi2PDjCMLrRlR1SYp u1yFKbQlZbxvi4IAHR5Lq1FvXUVHohnM0tuDvjR/2RFCmanPeTjjvWu8kLxYSvhN ombjWhooPmopIjtifzKk2CYFiCLMCHn4EJd9RUulvHFRNuPzbEoW2UAb6yPcl20k 5AzxI38smK1kpigXFBU9QlBoAYJE88LUI/zgDBsUzTr4/A2IewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/WaDzd4oTf9a9uMbLD/LaEreYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYwMDU5Y2ItMTRkOS0z NWY4LWFhNTYtNzA0YzI4MDZkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD13QJQhykcxdAjqo1eVCL58vCyvVVM6hVN3NNNdO5prVCWVTUE/UzFj FjivepWQfJ9sHzRFU9V5Xr9gAQifL5CpwK8lQ0T4R9PRADhzTOhUnNa8IVjq8/iW DR1PftddokA0QgtndQgHCOQGQKTS9lI0obMKsE2v6ID+F2uWx4U0C6mCmGc+tDPN EJmjxrRob6PrJz9rMiRXYmSk0xdNzycTNc4yjS5pfW5Y8N83qDFawRcWyH6sCCXc dmi0DAb5WmKlpNo68/upthmobO4CjEAmsnD/fixMdG4MJydTwdP1mMm0c0tT3Xch ieHSrFikjIvjqyU18gXQdx43e69CFtA= -----END CERTIFICATE-----Generated at Sun Apr 6 17:10:01 2025 by rpki-client