$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0b5d2cf-89af-3746-ab01-f0e848901128.roa File: c0b5d2cf-89af-3746-ab01-f0e848901128.roa (raw, json) Hash identifier: 50RQCQHnPkMRSGfk+1TeHmxjEzPBQstjX5itVf9lc1o= Subject key identifier: 13:58:7E:0F:38:0B:CB:50:35:22:E1:FB:3B:C8:4E:56:0B:C4:87:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8DE2E41D45024DBC28B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0b5d2cf-89af-3746-ab01-f0e848901128.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.37.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:de:2e:41:d4:50:24:db:c2:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fc853274-63f8-4db0-89c2-6a31841fa75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:56:f4:a9:a1:94:c1:38:0e:8d:ba:0a:4a:43: 65:5e:f5:31:2c:1e:3a:be:f3:ae:a4:2c:30:66:24: c6:82:c5:e5:e6:f8:04:d9:e6:bb:11:f5:f1:9d:64: 1e:6c:e0:16:c1:54:0b:4c:20:55:c1:c1:27:73:5d: 02:c1:be:a9:40:12:37:d9:03:cd:40:93:ba:a3:77: 04:b7:81:78:0a:0e:56:df:5e:c0:66:25:2a:7f:7b: 08:5a:bc:e3:08:95:d4:e7:1e:e9:b7:1e:ca:64:77: 5c:de:94:fe:2b:e8:0d:76:02:5a:dc:36:cc:e8:f3: 74:bd:ee:c4:7e:8d:6a:81:a9:35:7b:92:66:16:ff: 92:67:da:d6:62:62:e1:1f:0b:29:fb:88:6d:e5:ba: 73:54:bb:b1:ac:dd:2f:b0:56:1b:d0:93:fd:be:ad: 6e:4b:e3:54:08:22:0c:1c:44:cc:c8:60:22:aa:94: 44:ce:16:07:85:22:ee:73:96:08:8d:a0:f1:da:ad: 52:12:a9:e1:17:d3:25:ca:d2:6c:49:4f:1b:d8:a4: 75:fe:9a:fa:68:5a:50:53:ca:1e:6d:44:6a:2f:5d: b6:df:23:4e:c4:2f:ef:aa:52:6b:7e:3b:13:9d:39: 1c:a3:11:a8:aa:ed:f7:31:3b:4d:55:4f:f1:dd:a2: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:58:7E:0F:38:0B:CB:50:35:22:E1:FB:3B:C8:4E:56:0B:C4:87:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0b5d2cf-89af-3746-ab01-f0e848901128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:69:72:0d:3e:bb:79:a1:31:9f:fc:a3:0b:94:66:a7:0b:98: 4b:c1:49:e7:32:84:24:ba:20:d2:02:81:61:cf:25:5d:a1:be: 6a:6a:ff:79:a4:67:67:5d:28:b2:da:60:26:e6:e4:5e:4b:73: 23:ca:58:90:e6:bd:d9:4c:72:76:ac:b9:e8:3c:38:bf:fd:e0: 52:94:e9:4c:ff:40:d3:08:9c:a7:eb:60:77:bc:03:8c:e5:84: 31:e3:28:31:82:3a:ec:76:48:df:4c:1b:15:31:db:69:cb:b3: 9c:b8:7f:30:2b:c8:fd:96:1d:55:b2:15:a7:0b:d1:92:3e:4a: a2:64:a4:68:9b:60:25:b5:59:25:54:79:a7:2c:a8:2a:cf:2e: 39:75:0b:2b:fb:47:cd:5e:4a:20:8f:f4:b0:54:8e:4c:29:20: e7:17:ca:76:a6:d4:ba:95:26:2a:fc:19:da:5f:50:e4:fd:52: c5:89:8a:bb:28:67:f5:55:b4:df:ca:40:03:ea:4a:f4:0c:4e: 18:22:db:62:d1:46:64:a5:d6:4b:05:90:15:9d:81:a5:ef:c3: a5:93:f3:f1:1f:ba:02:39:05:93:cd:6e:34:5a:b2:93:57:ba: 6e:cf:dd:dc:fd:a9:6e:3e:e3:8a:34:4d:aa:d3:bc:91:b5:21: d5:bb:63:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+N4uQdRQJNvCi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmM4NTMyNzQtNjNmOC00ZGIwLTg5YzItNmEzMTg0MWZhNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1b0qaGUwTgOjboKSkNlXvUxLB46vvOupCww ZiTGgsXl5vgE2ea7EfXxnWQebOAWwVQLTCBVwcEnc10Cwb6pQBI32QPNQJO6o3cE t4F4Cg5W317AZiUqf3sIWrzjCJXU5x7ptx7KZHdc3pT+K+gNdgJa3DbM6PN0ve7E fo1qgak1e5JmFv+SZ9rWYmLhHwsp+4ht5bpzVLuxrN0vsFYb0JP9vq1uS+NUCCIM HETMyGAiqpREzhYHhSLuc5YIjaDx2q1SEqnhF9MlytJsSU8b2KR1/pr6aFpQU8oe bURqL1223yNOxC/vqlJrfjsTnTkcoxGoqu33MTtNVU/x3aIP/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNYfg84C8tQNSLh+zvITlYLxIdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzBiNWQyY2YtODlhZi0z NzQ2LWFiMDEtZjBlODQ4OTAxMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVpcg0+u3mhMZ/8owuUZqcLmEvBSecyhCS6INICgWHPJV2hvmpq/3mk Z2ddKLLaYCbm5F5LcyPKWJDmvdlMcnasueg8OL/94FKU6Uz/QNMInKfrYHe8A4zl hDHjKDGCOux2SN9MGxUx22nLs5y4fzAryP2WHVWyFacL0ZI+SqJkpGibYCW1WSVU eacsqCrPLjl1Cyv7R81eSiCP9LBUjkwpIOcXynam1LqVJir8GdpfUOT9UsWJirso Z/VVtN/KQAPqSvQMThgi22LRRmSl1ksFkBWdgaXvw6WT8/EfugI5BZPNbjRaspNX um7P3dz9qW4+44o0TarTvJG1IdW7Y0c= -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:18 2025 by rpki-client