$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3f6ea17-4a19-3b5a-b6b0-7827e5345dc8.roa File: b3f6ea17-4a19-3b5a-b6b0-7827e5345dc8.roa (raw, json) Hash identifier: l52CRrdlcNvzYxYiOn6y8TnWIjgUAId9l7tLTQwo7T0= Subject key identifier: 71:DD:A8:90:9B:F0:0A:B9:EC:2F:84:3B:7B:55:1F:E3:30:E3:22:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF46BD150B231510725200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3f6ea17-4a19-3b5a-b6b0-7827e5345dc8.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.44.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:46:bd:15:0b:23:15:10:72:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=811a7e88-90a8-46d8-8efd-2031f7bedc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:66:01:5c:4c:8a:6c:ac:ed:6a:4f:91:0e:9f: 4a:2e:17:9e:37:10:57:2d:3e:4e:60:cd:e3:2d:7f: a5:fb:6e:e7:67:60:51:18:a0:85:90:5a:e8:04:64: 37:34:37:25:4b:0e:1d:79:49:fa:f1:30:0d:dd:ad: 26:b9:aa:d8:2d:58:34:b8:02:9c:f9:fc:e5:f3:d0: 00:4b:8b:6b:d7:15:b6:80:a4:f1:c4:5d:88:12:43: 44:59:dc:53:36:35:d3:b7:a5:9d:3c:63:86:85:bb: b6:6c:0c:80:05:6e:ea:9f:77:6d:f4:32:1e:dd:43: b8:27:65:9c:3e:ff:95:d9:05:9e:65:bf:9f:bb:08: 9d:19:90:64:33:93:94:ed:3e:20:4e:e8:51:45:7c: ce:ce:66:37:23:8e:6e:b3:fb:2a:77:00:53:11:3b: 34:6d:1f:0e:91:0f:1d:34:1a:5d:b7:d0:84:50:6d: 2a:d8:48:6a:7e:35:f7:59:01:15:65:3a:e1:a9:ab: f6:b2:dd:35:ee:ef:07:6f:77:bf:21:91:20:e7:a2: 3f:22:3a:cc:50:67:ec:4b:23:55:ce:96:50:ec:a9: 40:f4:d4:9f:84:fa:96:3b:fe:ac:74:7b:11:16:d6: 6d:1b:09:ce:e0:e9:5d:73:a2:d4:90:30:41:3b:69: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DD:A8:90:9B:F0:0A:B9:EC:2F:84:3B:7B:55:1F:E3:30:E3:22:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3f6ea17-4a19-3b5a-b6b0-7827e5345dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a6:c8:fe:a0:ee:66:16:34:bb:f8:73:41:c6:18:58:bd:57: 2e:09:d2:30:31:d6:a6:52:c5:b2:4f:3f:1e:98:24:53:fb:cf: d7:f5:79:76:e8:89:dc:d6:68:42:14:99:ae:8f:91:74:5d:6f: 8c:5d:98:88:6b:0f:a3:2b:6f:58:84:42:41:d9:ea:58:4d:c6: fc:b0:46:e8:ff:fa:77:0a:fa:86:55:a8:fd:da:31:87:91:cd: 96:04:12:3d:42:4a:65:eb:70:f3:4f:ab:b0:15:09:9f:bd:c2: 50:97:3a:cc:9c:1e:ab:79:1e:03:f7:79:95:17:63:8f:c9:08: 66:e1:07:47:9a:1b:c6:58:75:a2:4e:3e:be:2b:47:09:82:68: 85:2c:4c:ad:73:c5:cd:87:9e:2b:2f:80:a2:41:f9:c0:4f:d1: 94:4a:e3:d4:b4:3e:ca:d9:05:61:08:c5:74:1d:dc:ad:87:bc: 1d:12:6d:e2:a3:c2:32:e5:36:c4:1c:87:b1:3c:ce:01:1b:15: b4:29:e5:da:88:ad:9e:1c:b0:1d:70:dd:4b:fd:d9:b6:47:9e: 73:d4:e8:ba:73:49:76:69:c0:d2:fc:cb:5b:42:70:4a:30:62: bc:fd:51:bf:2a:f4:66:09:bb:d6:25:de:96:3a:b2:bb:c1:ab: 88:c5:0b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr0a9FQsjFRByUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODExYTdlODgtOTBhOC00NmQ4LThlZmQtMjAzMWY3YmVkYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGYBXEyKbKztak+RDp9KLheeNxBXLT5OYM3j LX+l+27nZ2BRGKCFkFroBGQ3NDclSw4deUn68TAN3a0muarYLVg0uAKc+fzl89AA S4tr1xW2gKTxxF2IEkNEWdxTNjXTt6WdPGOGhbu2bAyABW7qn3dt9DIe3UO4J2Wc Pv+V2QWeZb+fuwidGZBkM5OU7T4gTuhRRXzOzmY3I45us/sqdwBTETs0bR8OkQ8d NBpdt9CEUG0q2EhqfjX3WQEVZTrhqav2st017u8Hb3e/IZEg56I/IjrMUGfsSyNV zpZQ7KlA9NSfhPqWO/6sdHsRFtZtGwnO4Oldc6LUkDBBO2kISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHdqJCb8Aq57C+EO3tVH+Mw4yJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNmNmVhMTctNGExOS0z YjVhLWI2YjAtNzgyN2U1MzQ1ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEimyP6g7mYWNLv4c0HGGFi9Vy4J0jAx1qZSxbJPPx6YJFP7z9f1eXbo idzWaEIUma6PkXRdb4xdmIhrD6Mrb1iEQkHZ6lhNxvywRuj/+ncK+oZVqP3aMYeR zZYEEj1CSmXrcPNPq7AVCZ+9wlCXOsycHqt5HgP3eZUXY4/JCGbhB0eaG8ZYdaJO Pr4rRwmCaIUsTK1zxc2HnisvgKJB+cBP0ZRK49S0PsrZBWEIxXQd3K2HvB0SbeKj wjLlNsQch7E8zgEbFbQp5dqIrZ4csB1w3Uv92bZHnnPU6LpzSXZpwNL8y1tCcEow Yrz9Ub8q9GYJu9Yl3pY6srvBq4jFC7I= -----END CERTIFICATE-----Generated at Mon Apr 7 06:08:31 2025 by rpki-client