$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa File: c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa (raw, json) Hash identifier: oNqac3q7u/TIDCjs0X3oW8F5Kes0oy/urahMjcnao5M= Subject key identifier: EC:0F:4D:D4:07:6A:77:09:F7:95:13:9E:EF:95:B2:1D:0A:FA:D1:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8E31BBCBF4F724EE53380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.41.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:e3:1b:bc:bf:4f:72:4e:e5:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=03694b2d-3522-47b6-a67b-4018626be10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:7d:da:41:21:1b:41:36:2d:34:4f:53:2f: cb:f0:ea:5a:9b:b5:a3:eb:17:6b:e2:f0:6c:6c:eb: bf:6f:a8:bc:11:45:73:f3:93:d4:69:bd:a9:5a:19: d4:79:cc:a1:f4:72:64:80:e8:59:ee:f6:2f:9c:ee: 0d:0a:5c:eb:c5:33:87:24:a1:05:32:5d:18:f4:3e: f0:9b:a2:bd:35:44:9e:7d:66:5a:05:0a:62:77:2f: d7:42:cf:c9:6b:68:89:ce:97:80:bc:11:02:43:9a: 85:ef:57:11:5e:11:35:f1:11:4d:39:b7:2e:16:0d: 4a:7b:f6:4f:20:5a:c0:45:6c:ee:62:52:50:b5:05: 36:99:2d:d1:98:26:ec:dc:85:83:2d:a7:77:fb:9b: 29:01:25:0a:39:3b:35:ab:c3:39:7d:6b:0b:01:65: 1a:b9:44:fa:65:e6:c9:28:fb:3d:c9:d0:c8:4d:b9: 03:48:32:04:7a:ff:68:52:fe:03:85:a8:0c:9d:7c: 2c:21:c8:63:33:9a:e3:fe:e0:d2:3e:19:6c:cc:79: ba:08:e4:3e:8b:1e:87:eb:19:2e:22:75:2b:f6:a1: ba:dc:8b:9b:44:f9:d3:54:96:30:84:8a:72:1d:6c: 06:b0:cf:f5:94:f1:35:a5:68:98:e3:b0:c2:5d:d7: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0F:4D:D4:07:6A:77:09:F7:95:13:9E:EF:95:B2:1D:0A:FA:D1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:38:0c:bf:03:fe:34:de:28:a0:3a:8f:23:81:29:b3:28:3b: 7b:70:f6:17:95:ad:a4:ef:57:2c:15:63:ec:e5:d3:7f:2f:f5: 14:22:6e:c1:be:bd:c1:15:b3:81:97:cf:58:aa:2d:a5:59:29: e6:36:0e:dc:3d:28:9b:c7:0e:48:28:cb:7c:c8:40:64:2c:f4: 19:09:c1:23:85:03:97:0d:5a:1a:56:b7:4f:f2:4f:7d:9c:d4: e9:76:50:fe:e6:78:18:f7:44:a6:b8:6e:9d:64:06:83:2d:87: 1b:d6:45:10:28:2b:9f:fd:5e:54:31:2c:fb:a9:8e:0a:cd:40: c5:13:6b:94:50:d8:15:34:f6:b8:9d:52:bb:84:c1:04:bb:63: 34:f6:99:85:1b:61:d0:50:0b:b6:c6:7a:03:b1:b7:24:d5:76: 60:16:db:ec:84:ab:e1:da:c6:6e:2d:43:e0:22:11:90:79:46: c2:11:61:64:c6:40:57:8e:05:e8:0a:cc:bc:5c:2f:67:e3:98: 79:ce:8e:91:ff:2e:b9:75:e7:e7:6a:94:07:db:73:7c:ab:ab: 9b:28:c7:cf:19:da:dc:93:18:b1:99:6d:d9:fd:62:da:c2:8c: 7d:2c:6f:19:ad:47:a8:f1:71:0f:a8:2c:f3:96:62:8e:25:6c: 29:ca:5d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+OMbvL9Pck7lM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDM2OTRiMmQtMzUyMi00N2I2LWE2N2ItNDAxODYyNmJlMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8J92kEhG0E2LTRPUy/L8Opam7Wj6xdr4vBs bOu/b6i8EUVz85PUab2pWhnUecyh9HJkgOhZ7vYvnO4NClzrxTOHJKEFMl0Y9D7w m6K9NUSefWZaBQpidy/XQs/Ja2iJzpeAvBECQ5qF71cRXhE18RFNObcuFg1Ke/ZP IFrARWzuYlJQtQU2mS3RmCbs3IWDLad3+5spASUKOTs1q8M5fWsLAWUauUT6ZebJ KPs9ydDITbkDSDIEev9oUv4DhagMnXwsIchjM5rj/uDSPhlszHm6COQ+ix6H6xku InUr9qG63IubRPnTVJYwhIpyHWwGsM/1lPE1pWiY47DCXdevPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwPTdQHancJ95UTnu+Vsh0K+tH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzBhM2U2MmQtMWNkZi0z ZjQ1LWJlMmItMzE3ZWM4MmUxZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC04DL8D/jTeKKA6jyOBKbMoO3tw9heVraTvVywVY+zl038v9RQibsG+ vcEVs4GXz1iqLaVZKeY2Dtw9KJvHDkgoy3zIQGQs9BkJwSOFA5cNWhpWt0/yT32c 1Ol2UP7meBj3RKa4bp1kBoMthxvWRRAoK5/9XlQxLPupjgrNQMUTa5RQ2BU09rid UruEwQS7YzT2mYUbYdBQC7bGegOxtyTVdmAW2+yEq+Haxm4tQ+AiEZB5RsIRYWTG QFeOBegKzLxcL2fjmHnOjpH/Lrl15+dqlAfbc3yrq5sox88Z2tyTGLGZbdn9YtrC jH0sbxmtR6jxcQ+oLPOWYo4lbCnKXQo= -----END CERTIFICATE-----Generated at Mon Apr 7 05:48:14 2025 by rpki-client