$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4ee9c4-7391-3d2b-afee-8fb063928517.roa File: ba4ee9c4-7391-3d2b-afee-8fb063928517.roa (raw, json) Hash identifier: CufaidWPdlLnYR7g3FdS6LIWAaXM/mh7307x04vEOfk= Subject key identifier: 7D:3A:7D:C1:D2:AC:CD:35:F6:E0:5B:43:0F:49:BF:18:36:64:5A:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D64A0C572D879165B7600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4ee9c4-7391-3d2b-afee-8fb063928517.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 68.85.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:64:a0:c5:72:d8:79:16:5b:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d2a15bbc-74ac-4dcc-8c1f-af0573b9e883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:c3:ba:f2:8a:59:45:d3:83:bd:28:5a:98: 51:1b:d1:9c:48:65:43:cd:08:a2:1a:d8:90:48:c0: 6c:4c:f3:f8:67:23:9d:a5:28:54:53:49:22:56:48: 54:54:b7:b2:e7:91:ce:7c:70:c1:78:71:5d:4b:81: af:a0:52:b5:aa:f5:1c:70:00:e8:91:68:34:13:95: a4:af:78:f4:5a:12:85:f8:17:31:ac:37:85:c7:3b: 44:cb:28:d5:f4:6c:33:0c:ad:31:eb:33:f8:47:45: e8:99:ca:17:70:1d:1c:eb:6d:52:c1:3e:32:8c:46: e6:2c:f9:21:ae:50:cb:8a:e4:1a:ea:34:3a:7f:ce: 16:cb:9f:2e:1a:9d:21:82:10:b5:e9:8a:60:1c:47: aa:ae:e0:79:66:93:6c:bc:3d:1b:60:1b:84:48:37: 82:16:a0:6f:5d:20:7c:c2:27:bc:a9:b2:11:f7:b1: 72:89:89:db:0c:ab:75:6c:d1:0b:6d:81:9e:f0:fc: 1e:fe:ee:45:7b:a2:6e:ef:86:9b:e8:dc:e9:0d:fd: ae:c2:c9:19:b6:9d:c8:35:31:6a:2d:47:10:06:9e: 66:c2:61:1d:02:06:8e:41:8f:d5:ea:b2:0e:72:85: 8e:e5:22:1f:82:6f:33:2b:be:8c:d9:88:6e:3c:78: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3A:7D:C1:D2:AC:CD:35:F6:E0:5B:43:0F:49:BF:18:36:64:5A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba4ee9c4-7391-3d2b-afee-8fb063928517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5c:36:12:b3:02:7f:c2:89:23:8b:80:f9:36:7d:d7:7f:c2: 92:94:59:55:4f:06:48:d2:69:ba:57:b8:05:e8:64:c2:db:91: 27:86:2e:67:49:d0:74:fa:b1:36:bf:76:3e:d8:9c:7e:09:d3: fc:a6:d1:13:a5:7f:2f:5a:44:e4:f3:13:40:9a:1e:37:fb:97: 90:fa:b4:ef:77:28:d6:04:8f:9b:92:7d:74:70:73:4d:09:1e: 8f:86:a6:86:03:a6:3c:ed:45:0a:ab:02:16:d7:2e:ba:a9:de: 31:97:63:21:90:e8:8b:d8:8d:19:f8:ee:b3:49:0b:d7:85:a8: 9c:82:37:fc:ea:56:3e:fb:f1:d0:4e:9d:72:8e:91:cc:60:0b: 0d:7f:16:36:ed:bb:2b:d7:cd:3f:9d:49:77:c4:45:dd:11:ee: c9:e3:63:37:23:be:11:03:ac:27:01:96:2c:b1:98:53:58:32: 07:57:01:ad:86:f2:49:a6:d9:6d:ef:87:07:c5:03:a3:84:77: 1a:aa:d0:c3:b8:30:64:d8:9f:90:94:f5:9c:be:58:a5:c8:d0: af:21:17:20:94:2e:24:a4:9e:43:f4:6f:0b:fc:b0:61:1e:c0: 53:f2:e4:31:b5:d0:dc:ed:d5:dc:a3:24:bd:71:d4:f0:8e:fe: b6:aa:dd:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebWSgxXLYeRZbdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDJhMTViYmMtNzRhYy00ZGNjLThjMWYtYWYwNTczYjllODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiarDuvKKWUXTg70oWphRG9GcSGVDzQiiGtiQ SMBsTPP4ZyOdpShUU0kiVkhUVLey55HOfHDBeHFdS4GvoFK1qvUccADokWg0E5Wk r3j0WhKF+BcxrDeFxztEyyjV9GwzDK0x6zP4R0XomcoXcB0c621SwT4yjEbmLPkh rlDLiuQa6jQ6f84Wy58uGp0hghC16YpgHEeqruB5ZpNsvD0bYBuESDeCFqBvXSB8 wie8qbIR97FyiYnbDKt1bNELbYGe8Pwe/u5Fe6Ju74ab6NzpDf2uwskZtp3INTFq LUcQBp5mwmEdAgaOQY/V6rIOcoWO5SIfgm8zK76M2YhuPHiDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH06fcHSrM019uBbQw9Jvxg2ZFreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE0ZWU5YzQtNzM5MS0z ZDJiLWFmZWUtOGZiMDYzOTI4NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApcNhKzAn/CiSOLgPk2fdd/wpKUWVVPBkjSabpXuAXoZMLbkSeGLmdJ 0HT6sTa/dj7YnH4J0/ym0ROlfy9aROTzE0CaHjf7l5D6tO93KNYEj5uSfXRwc00J Ho+GpoYDpjztRQqrAhbXLrqp3jGXYyGQ6IvYjRn47rNJC9eFqJyCN/zqVj778dBO nXKOkcxgCw1/FjbtuyvXzT+dSXfERd0R7snjYzcjvhEDrCcBliyxmFNYMgdXAa2G 8kmm2W3vhwfFA6OEdxqq0MO4MGTYn5CU9Zy+WKXI0K8hFyCULiSknkP0bwv8sGEe wFPy5DG10Nzt1dyjJL1x1PCO/raq3XM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:09:09 2025 by rpki-client