$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef0b6d-c727-3f3a-a6b0-84ca8db2ff17.roa File: b4ef0b6d-c727-3f3a-a6b0-84ca8db2ff17.roa (raw, json) Hash identifier: eCYTYgq0V/YXFuD6eb3p3DMpGTmRcFRuBT+pQNTDiJM= Subject key identifier: 68:75:19:76:BD:9A:BB:5C:59:F2:7C:9E:37:33:FF:94:78:C1:AD:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6B509DEA6A203C4096C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef0b6d-c727-3f3a-a6b0-84ca8db2ff17.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 67.168.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:b5:09:de:a6:a2:03:c4:09:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=68322487-c3bb-4d4d-b5af-0666639b9745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:0a:ba:2d:ce:f8:b8:fe:bb:dd:71:e7:b1: e9:b9:a7:5e:4c:3e:9b:4f:1b:92:b8:58:4b:d8:88: 6d:32:3a:8c:bf:de:a7:26:62:6f:f5:86:b5:92:95: 71:4b:7e:37:4b:3f:0c:79:08:a0:25:52:97:d8:25: d8:a8:65:cb:c1:2a:29:6e:81:20:e2:39:e7:c8:3e: e8:68:69:1e:2c:24:37:db:74:04:61:e0:d5:e9:86: 86:6d:7d:94:e0:3d:f4:ec:31:b4:3d:d1:6b:e7:bd: d0:13:c9:55:e9:64:28:d1:55:1c:f9:f0:a4:35:70: e0:45:22:a3:60:b6:3e:ac:2e:43:5c:46:3f:79:f4: 7d:fc:ab:9d:76:d1:82:8d:2d:02:f3:6e:a0:32:8a: c7:e8:2a:24:b8:61:d0:9e:d6:3f:9b:66:07:b5:85: 21:c7:00:dd:4a:16:b3:a6:48:27:aa:9d:1f:43:2e: 79:5f:7f:a9:5e:6e:31:56:f2:29:47:13:4f:8d:c0: f8:f3:2d:b5:99:1e:5e:ef:86:32:47:79:57:7e:b4: 19:be:78:9a:52:4a:cf:bb:39:8f:da:38:c2:f1:98: 62:c5:1d:34:00:52:65:44:9e:ec:b3:93:a8:75:d9: f0:dc:9b:75:f5:df:c4:79:37:ff:99:e6:db:8d:9e: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:75:19:76:BD:9A:BB:5C:59:F2:7C:9E:37:33:FF:94:78:C1:AD:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef0b6d-c727-3f3a-a6b0-84ca8db2ff17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.168.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2d:b2:17:c8:10:ec:26:6f:17:b7:b8:ea:c2:69:ff:e0:e3: 07:be:a0:75:2b:e2:bf:5f:ab:da:06:c4:69:cf:ae:92:57:12: b7:a5:68:af:eb:da:b4:cb:6d:7c:8b:ce:de:f7:06:0d:88:ac: 40:2f:31:ea:97:63:ed:72:2e:b9:7f:79:1b:9c:84:cc:e1:04: 82:6d:08:ac:bb:db:ba:76:75:fc:0c:58:b3:c6:ef:29:f7:6f: 1f:c0:29:d4:3a:d2:b7:6b:a0:88:9a:53:36:4c:24:08:58:21: 42:22:5e:f4:03:04:0b:f6:d6:97:c4:e1:63:c7:af:68:75:ef: 1e:99:5c:de:1d:2b:ad:dc:ce:88:19:02:0e:c1:ce:d4:18:e0: 82:ac:8e:36:2d:9f:b0:7e:b1:ab:87:a9:9f:c9:cb:69:3c:84: 2a:a6:c8:8a:92:d5:29:18:cb:e7:80:9e:fb:c2:33:69:ff:1d: d8:6a:9c:3a:5c:3b:41:a3:4a:43:55:6a:be:30:c6:a8:61:0b: 5f:5e:d8:31:c8:d5:e7:17:ad:d8:40:94:7c:45:d0:f7:f7:f7: 8e:24:05:bd:be:6b:88:66:4c:19:0c:04:52:7c:17:95:f5:07: 18:5e:f2:c7:b8:d7:45:08:f5:ce:71:88:15:45:71:de:9c:85: 4d:50:b5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rUJ3qaiA8QJbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjgzMjI0ODctYzNiYi00ZDRkLWI1YWYtMDY2NjYzOWI5NzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWcKui3O+Lj+u91x57HpuadeTD6bTxuSuFhL 2IhtMjqMv96nJmJv9Ya1kpVxS343Sz8MeQigJVKX2CXYqGXLwSopboEg4jnnyD7o aGkeLCQ323QEYeDV6YaGbX2U4D307DG0PdFr573QE8lV6WQo0VUc+fCkNXDgRSKj YLY+rC5DXEY/efR9/KuddtGCjS0C826gMorH6CokuGHQntY/m2YHtYUhxwDdShaz pkgnqp0fQy55X3+pXm4xVvIpRxNPjcD48y21mR5e74YyR3lXfrQZvniaUkrPuzmP 2jjC8ZhixR00AFJlRJ7ss5Ooddnw3Jt19d/EeTf/mebbjZ6+XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh1GXa9mrtcWfJ8njcz/5R4wa1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRlZjBiNmQtYzcyNy0z ZjNhLWE2YjAtODRjYThkYjJmZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAtshfIEOwmbxe3uOrCaf/g4we+oHUr4r9fq9oGxGnPrpJXErelaK/r 2rTLbXyLzt73Bg2IrEAvMeqXY+1yLrl/eRuchMzhBIJtCKy727p2dfwMWLPG7yn3 bx/AKdQ60rdroIiaUzZMJAhYIUIiXvQDBAv21pfE4WPHr2h17x6ZXN4dK63czogZ Ag7BztQY4IKsjjYtn7B+sauHqZ/Jy2k8hCqmyIqS1SkYy+eAnvvCM2n/HdhqnDpc O0GjSkNVar4wxqhhC19e2DHI1ecXrdhAlHxF0Pf3944kBb2+a4hmTBkMBFJ8F5X1 Bxhe8se410UI9c5xiBVFcd6chU1QtQI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:22 2025 by rpki-client