$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e8f97e-f37e-3042-8d70-59889e626e7b.roa File: c3e8f97e-f37e-3042-8d70-59889e626e7b.roa (raw, json) Hash identifier: ITFvCQXvy0Rl9SmBkr9q91Sx6Ud7x/78lnCvmdaLXv0= Subject key identifier: 7B:11:E8:F2:45:C3:D8:52:D8:A5:FB:DD:B4:8B:1C:CE:2F:30:36:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B84009EB294CB71730F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e8f97e-f37e-3042-8d70-59889e626e7b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.86.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:84:00:9e:b2:94:cb:71:73:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f63ffd52-58ba-422d-951c-e00a11de5aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:f2:5b:7b:6f:82:88:3e:43:6d:17:82:ae: 22:67:90:7d:1b:ff:74:b2:30:05:86:eb:9a:6e:fa: 4b:a3:b4:32:ad:2d:44:fe:4e:4d:ea:73:79:af:d2: a7:42:83:46:e8:c2:2d:8f:65:aa:4f:93:9b:bb:4c: d6:9a:35:96:43:be:01:cf:a0:54:7b:78:e5:6e:eb: 2d:6c:42:9b:20:7b:ea:85:7b:92:ce:40:d7:37:1c: dd:94:05:5d:f3:da:e6:35:ba:a0:9a:c8:86:0c:71: 03:cf:fb:82:a6:18:64:81:7f:91:f7:84:b4:fe:bd: 1a:c0:f5:97:17:70:47:01:c2:67:ce:ae:fc:f5:bc: be:64:8d:66:b7:18:69:48:2d:43:08:b9:91:fb:c8: ac:5b:70:5c:96:87:34:88:86:e6:6a:6e:3a:e1:43: 98:6d:b7:04:98:58:f4:bb:ef:76:8a:f9:3d:37:6c: 8b:71:28:d7:6d:b1:42:4a:2c:85:58:7d:9b:29:4f: ec:4e:50:82:34:a9:24:44:db:66:5c:55:bf:6e:6c: 63:5b:3e:de:f8:bd:1d:a1:c3:39:a2:7a:40:dd:50: 65:71:39:37:49:b7:02:30:0d:b1:f1:3d:e3:7a:52: 8a:27:71:25:c8:cc:84:68:3f:6b:b7:48:b3:1e:00: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:E8:F2:45:C3:D8:52:D8:A5:FB:DD:B4:8B:1C:CE:2F:30:36:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e8f97e-f37e-3042-8d70-59889e626e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:97:1b:de:a2:60:88:83:c9:a3:15:ba:39:ae:27:74:0e:f4: 3f:59:17:f3:b4:e9:df:b7:e4:06:2f:8e:59:ca:68:b1:86:62: 40:30:4e:c0:a1:5a:06:5c:02:9e:77:7c:56:67:d9:d9:ed:5d: 32:24:da:e3:a6:d2:29:a0:06:cb:32:f9:b4:87:22:d4:d6:88: 99:2c:c7:b2:1e:ef:76:d5:46:2e:e4:f2:79:05:a6:b0:3b:aa: 9e:4c:32:68:0d:02:b7:69:e2:3d:a2:c9:8e:3a:a2:d3:87:db: fe:b7:4e:0a:ae:e7:7d:87:09:9c:30:62:08:fb:0f:f1:42:1b: c1:cb:80:c1:86:04:1d:d6:2d:80:40:95:c4:e0:36:21:dc:28: f7:53:8b:3a:0b:6e:f3:62:1d:4e:72:b4:a4:08:cb:9a:df:6f: 06:b0:3d:b1:e6:37:26:06:90:94:17:63:34:82:1c:12:29:0e: 1a:bd:42:1c:0a:a9:97:77:d8:2c:12:ef:dc:cf:66:e5:37:1d: e2:8a:60:de:9d:56:ae:49:95:84:b7:b5:2e:f0:c3:d2:0a:78: ce:63:7f:0e:81:b0:55:12:5c:51:73:aa:86:e0:ba:2b:23:9c: 84:35:aa:0a:73:f9:9a:5c:fd:9e:1c:70:a1:8c:5d:e2:c5:48: b2:51:c4:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4QAnrKUy3FzD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjYzZmZkNTItNThiYS00MjJkLTk1MWMtZTAwYTExZGU1YWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofLyW3tvgog+Q20Xgq4iZ5B9G/90sjAFhuua bvpLo7QyrS1E/k5N6nN5r9KnQoNG6MItj2WqT5Obu0zWmjWWQ74Bz6BUe3jlbust bEKbIHvqhXuSzkDXNxzdlAVd89rmNbqgmsiGDHEDz/uCphhkgX+R94S0/r0awPWX F3BHAcJnzq789by+ZI1mtxhpSC1DCLmR+8isW3Bcloc0iIbmam464UOYbbcEmFj0 u+92ivk9N2yLcSjXbbFCSiyFWH2bKU/sTlCCNKkkRNtmXFW/bmxjWz7e+L0docM5 onpA3VBlcTk3SbcCMA2x8T3jelKKJ3ElyMyEaD9rt0izHgBisQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsR6PJFw9hS2KX73bSLHM4vMDbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzNlOGY5N2UtZjM3ZS0z MDQyLThkNzAtNTk4ODllNjI2ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOXG96iYIiDyaMVujmuJ3QO9D9ZF/O06d+35AYvjlnKaLGGYkAwTsCh WgZcAp53fFZn2dntXTIk2uOm0imgBssy+bSHItTWiJksx7Ie73bVRi7k8nkFprA7 qp5MMmgNArdp4j2iyY46otOH2/63Tgqu532HCZwwYgj7D/FCG8HLgMGGBB3WLYBA lcTgNiHcKPdTizoLbvNiHU5ytKQIy5rfbwawPbHmNyYGkJQXYzSCHBIpDhq9QhwK qZd32CwS79zPZuU3HeKKYN6dVq5JlYS3tS7ww9IKeM5jfw6BsFUSXFFzqobguisj nIQ1qgpz+Zpc/Z4ccKGMXeLFSLJRxMM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:06:02 2025 by rpki-client