$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c024060c-01ed-3125-8a45-c334e375c9a3.roa File: c024060c-01ed-3125-8a45-c334e375c9a3.roa (raw, json) Hash identifier: VX3dWwUTDHHcaptkDpveKxvYcw1JhGR1f7S+6BMLzXE= Subject key identifier: 0C:91:E0:9E:67:EF:2D:CE:BA:13:E9:D7:70:C3:38:21:05:1F:86:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8EEC0B8FAA152B7BE3F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c024060c-01ed-3125-8a45-c334e375c9a3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.56.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:ee:c0:b8:fa:a1:52:b7:be:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4f208e5c-ca15-4a88-a039-6053b2cb4411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:62:9d:39:0e:d5:1b:56:d4:5b:fa:bc:81: 9a:51:90:7b:32:2d:2c:18:e7:7a:1c:54:a4:ec:3a: cb:44:47:4c:25:8d:9e:cc:c7:c5:d8:39:6e:42:61: 7f:4c:58:be:50:e8:57:94:9b:bd:47:8e:6a:76:cc: ef:a9:b5:98:a2:c3:d3:91:50:6a:b5:06:10:0b:7b: 03:9a:78:cc:30:59:11:3a:9a:fd:ad:94:ec:c6:8d: 56:54:07:0c:a6:e7:d4:30:0e:b0:c2:18:59:c1:74: b5:0f:34:9f:2b:da:2e:1e:90:84:ad:8d:81:c4:f2: 8e:83:1e:07:63:e5:81:13:03:08:f4:42:d9:e4:21: a6:ca:12:ac:5b:0c:1f:0d:db:44:82:33:f0:99:7f: 54:58:26:03:3f:22:5d:62:78:55:5e:8d:ad:36:d3: 03:88:b6:43:5f:a7:b9:8f:c4:c7:91:d9:a9:f8:fa: 36:91:3a:c9:ff:86:dc:d2:5e:7a:79:f5:23:67:fb: 85:05:01:a8:97:87:35:47:ba:e8:36:98:8a:82:43: 49:f2:76:b9:52:37:be:a9:14:7b:72:d5:6b:1e:4f: 6a:d8:c5:2b:69:ed:d6:62:4c:0b:a3:c1:6e:33:6d: 0b:6b:5f:57:6c:d7:c1:80:6a:4b:cf:46:ce:4d:95: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:91:E0:9E:67:EF:2D:CE:BA:13:E9:D7:70:C3:38:21:05:1F:86:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c024060c-01ed-3125-8a45-c334e375c9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:13:0f:b6:7c:62:ed:7f:a2:85:0a:2b:a9:33:7a:b7:01:4a: cb:2f:6e:51:48:e6:e7:8d:fe:7c:b8:76:e5:25:35:1c:8e:6f: 1e:bd:9e:c6:cc:44:d4:6c:35:99:03:e8:0a:ee:4a:5b:7d:6e: 2f:41:5f:a9:40:16:17:c0:c0:eb:6c:b1:35:95:02:46:f3:f8: 0f:24:11:77:5a:ba:00:34:8d:10:6e:73:34:31:9a:14:95:d6: 51:cb:bd:2e:39:11:e7:e3:b2:45:8f:5a:1f:f1:e0:ae:29:15: 35:6e:95:8a:b1:cc:87:fb:21:e9:bb:5a:a4:c5:08:da:3b:96: 88:5f:74:85:3e:dc:15:78:43:6f:ce:d0:4a:56:50:ef:83:32: f6:f5:61:0b:6c:0c:53:f2:03:4b:7e:95:c8:ca:69:b7:80:45: 39:98:33:7b:0a:82:1d:18:29:ab:88:9e:0f:a2:05:40:ce:67: 20:f2:68:57:25:62:34:de:91:53:75:d3:2a:3f:6b:84:7c:87: 29:5c:41:f0:51:7b:f9:25:41:1d:34:3e:19:f5:7a:f1:9b:4c: 31:15:2c:12:5c:4a:09:82:7c:b1:df:df:e6:15:29:a3:88:51: f0:41:d3:b1:e3:6e:35:3f:05:8b:4d:bc:91:69:3a:c6:73:b1: 59:01:1d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+O7AuPqhUre+P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NGYyMDhlNWMtY2ExNS00YTg4LWEwMzktNjA1M2IyY2I0NDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH9inTkO1RtW1Fv6vIGaUZB7Mi0sGOd6HFSk 7DrLREdMJY2ezMfF2DluQmF/TFi+UOhXlJu9R45qdszvqbWYosPTkVBqtQYQC3sD mnjMMFkROpr9rZTsxo1WVAcMpufUMA6wwhhZwXS1DzSfK9ouHpCErY2BxPKOgx4H Y+WBEwMI9ELZ5CGmyhKsWwwfDdtEgjPwmX9UWCYDPyJdYnhVXo2tNtMDiLZDX6e5 j8THkdmp+Po2kTrJ/4bc0l56efUjZ/uFBQGol4c1R7roNpiKgkNJ8na5Uje+qRR7 ctVrHk9q2MUrae3WYkwLo8FuM20La19XbNfBgGpLz0bOTZV/ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyR4J5n7y3OuhPp13DDOCEFH4ZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzAyNDA2MGMtMDFlZC0z MTI1LThhNDUtYzMzNGUzNzVjOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0TD7Z8Yu1/ooUKK6kzercBSssvblFI5ueN/ny4duUlNRyObx69nsbM RNRsNZkD6AruSlt9bi9BX6lAFhfAwOtssTWVAkbz+A8kEXdaugA0jRBuczQxmhSV 1lHLvS45EefjskWPWh/x4K4pFTVulYqxzIf7Iem7WqTFCNo7lohfdIU+3BV4Q2/O 0EpWUO+DMvb1YQtsDFPyA0t+lcjKabeARTmYM3sKgh0YKauIng+iBUDOZyDyaFcl YjTekVN10yo/a4R8hylcQfBRe/klQR00Phn1evGbTDEVLBJcSgmCfLHf3+YVKaOI UfBB07HjbjU/BYtNvJFpOsZzsVkBHYs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:31 2025 by rpki-client