$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae1b6c4-2498-3b3d-ab1c-acf65252b2f6.roa File: bae1b6c4-2498-3b3d-ab1c-acf65252b2f6.roa (raw, json) Hash identifier: NARWKNX0id7OXEwgKA5PZc5XIjB2DWFS1c6bnr7jtPk= Subject key identifier: 2C:09:16:0F:3B:57:7F:E4:52:EB:BA:05:3A:8F:87:B0:C4:22:8B:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F786E9825B01A4A4A98200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae1b6c4-2498-3b3d-ab1c-acf65252b2f6.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.37.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:86:e9:82:5b:01:a4:a4:a9:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f19a1921-e47a-474f-ab9e-3c7e604247e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:72:f2:1b:f7:d3:66:50:7c:31:7f:2b:09:8c: 87:df:eb:c8:9b:04:6d:df:0f:09:d7:50:25:46:b0: b6:6b:64:ff:f2:d7:e8:2e:61:ae:97:90:81:82:b0: a1:34:5a:63:c6:32:e5:c6:76:76:ae:c6:0a:45:68: 26:57:cf:82:08:a3:b8:ad:2b:85:a6:93:79:ba:2e: 9b:62:b9:3a:88:73:26:84:e5:69:87:a7:15:78:3e: 87:60:d5:46:a9:3d:a7:f9:f9:04:13:d9:f3:f9:c4: 43:c4:82:d0:58:f5:30:04:ec:9c:eb:2d:40:f5:ac: a6:4d:72:d6:37:fa:f9:52:a3:a9:9b:5e:63:41:ec: 0f:02:59:9a:6e:04:dd:9d:02:f8:06:06:a3:3a:54: 09:93:30:ef:95:df:a0:17:eb:90:1d:83:98:58:c0: 9f:36:82:72:6c:5e:7a:3c:7f:89:5c:01:fe:26:3f: 5e:8c:e1:a0:eb:0b:a8:03:eb:63:64:3a:6f:04:cd: 24:01:ff:17:72:83:c5:c7:db:bf:11:88:a4:8f:5a: 30:63:47:49:d2:9e:62:16:84:58:35:4c:dc:04:93: 9a:1a:3c:68:6a:97:93:51:58:0e:26:de:8f:fd:70: eb:e8:bd:e4:f3:75:a6:db:39:6e:de:eb:85:bb:df: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:09:16:0F:3B:57:7F:E4:52:EB:BA:05:3A:8F:87:B0:C4:22:8B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae1b6c4-2498-3b3d-ab1c-acf65252b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:16:2b:32:22:19:69:d8:03:bd:20:38:a4:a4:62:71:1b:fc: 69:00:de:0e:93:30:36:7d:9e:c4:8e:ec:4a:f3:05:cf:74:a8: 25:ad:3b:a9:87:4b:67:37:4c:51:cf:91:e3:26:e4:d4:b0:8e: 22:72:82:7d:78:78:a5:17:7a:03:71:8b:62:de:74:ed:e5:31: 4c:28:14:74:29:db:a6:0a:73:08:51:39:be:84:bc:99:f2:9f: 58:16:79:89:64:6c:8c:56:b9:0f:71:c7:82:cc:67:f2:3d:d6: e9:3d:71:42:c1:ff:40:08:68:c6:a1:de:a6:66:e0:24:c3:a0: bf:67:df:4b:b7:4f:d2:ce:f0:f7:d8:25:04:fe:72:0e:f5:e8: 0d:6b:58:55:53:be:5b:38:7d:b4:9a:6c:7e:a5:5a:43:fd:d5: 92:03:1f:79:4d:92:6f:e0:c1:2d:77:0f:05:b4:ee:08:56:94: 04:a9:af:dd:cf:56:0e:b2:5c:fe:2c:66:d9:60:bb:cf:73:d7: 81:bc:2d:24:9d:9c:96:db:91:7a:61:65:c1:41:18:a1:3c:e2: 5b:d1:85:2e:5d:d3:b9:e3:89:17:16:bf:28:7d:de:08:d1:8e: eb:f7:d7:b4:eb:4c:c0:05:8f:75:2f:79:dd:4b:3a:16:d4:00: 52:0e:a6:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094bpglsBpKSpggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjE5YTE5MjEtZTQ3YS00NzRmLWFiOWUtM2M3ZTYwNDI0N2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnLyG/fTZlB8MX8rCYyH3+vImwRt3w8J11Al RrC2a2T/8tfoLmGul5CBgrChNFpjxjLlxnZ2rsYKRWgmV8+CCKO4rSuFppN5ui6b Yrk6iHMmhOVph6cVeD6HYNVGqT2n+fkEE9nz+cRDxILQWPUwBOyc6y1A9aymTXLW N/r5UqOpm15jQewPAlmabgTdnQL4BgajOlQJkzDvld+gF+uQHYOYWMCfNoJybF56 PH+JXAH+Jj9ejOGg6wuoA+tjZDpvBM0kAf8XcoPFx9u/EYikj1owY0dJ0p5iFoRY NUzcBJOaGjxoapeTUVgOJt6P/XDr6L3k83Wm2zlu3uuFu98jfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwJFg87V3/kUuu6BTqPh7DEIouzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFlMWI2YzQtMjQ5OC0z YjNkLWFiMWMtYWNmNjUyNTJiMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMWKzIiGWnYA70gOKSkYnEb/GkA3g6TMDZ9nsSO7ErzBc90qCWtO6mH S2c3TFHPkeMm5NSwjiJygn14eKUXegNxi2LedO3lMUwoFHQp26YKcwhROb6EvJny n1gWeYlkbIxWuQ9xx4LMZ/I91uk9cULB/0AIaMah3qZm4CTDoL9n30u3T9LO8PfY JQT+cg716A1rWFVTvls4fbSabH6lWkP91ZIDH3lNkm/gwS13DwW07ghWlASpr93P Vg6yXP4sZtlgu89z14G8LSSdnJbbkXphZcFBGKE84lvRhS5d07njiRcWvyh93gjR juv317TrTMAFj3Uved1LOhbUAFIOpuA= -----END CERTIFICATE-----Generated at Sat Apr 12 13:01:54 2025 by rpki-client