$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa File: c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa (raw, json) Hash identifier: gGrXBCbzq01wVEtjvMNbJE4zZ+xldeugDtU4zzrDul4= Subject key identifier: E9:0F:BB:1F:6C:CD:5E:04:DC:88:77:0D:54:E1:B7:D8:E9:D1:E4:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B8300B6761F5EF5E1CBF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.63.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:83:00:b6:76:1f:5e:f5:e1:cb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c584aca5-49f9-4af7-8f5f-e5088e2e0b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:7e:39:91:7a:85:30:a2:7b:dd:4f:39:04: 8f:ef:16:2d:fe:ac:01:71:99:06:71:03:f1:b5:9c: c7:5a:d7:88:d9:14:cc:48:e0:f4:70:cc:90:24:b0: dd:87:90:d1:04:6b:a0:5f:02:b0:cb:f4:6e:99:34: 92:c7:eb:c2:fa:9c:72:af:14:01:f4:93:73:22:b6: 4f:ec:b7:09:0f:a0:83:98:fa:04:37:2d:c1:7a:4e: c6:d1:f1:96:f3:6e:11:a9:b5:2f:69:6f:90:2b:a2: c3:18:19:71:be:92:35:b6:df:ad:0c:7c:e9:18:21: 6e:e9:cb:86:44:44:db:48:08:b5:29:72:21:59:33: 4b:79:2e:f4:ab:78:7b:28:4b:47:9d:03:83:68:3f: 31:38:0d:a7:1c:35:c8:4a:57:2f:7a:d3:da:42:ad: c3:ac:00:15:c5:f3:05:17:b9:fb:1f:6f:15:01:ec: 94:c1:52:b6:73:6a:95:84:ff:97:74:ee:88:57:d3: 8c:21:b3:49:c8:09:1f:de:92:a9:16:18:5d:d2:44: 2e:da:7b:26:1a:50:33:9e:68:9f:02:09:dd:64:e4: 5b:bc:8d:24:6c:7c:9b:38:40:d8:bc:04:52:4d:22: 66:be:e5:49:64:ed:ab:a4:5f:cf:3a:ae:8e:44:d0: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0F:BB:1F:6C:CD:5E:04:DC:88:77:0D:54:E1:B7:D8:E9:D1:E4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9ad3447-18c7-38ef-ac9c-e44d3285849f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.63.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:99:b1:9c:64:8b:c4:31:77:9c:40:0c:e5:7a:8a:5a:ba:e1: e7:44:8c:5a:7c:d6:ff:14:bc:1d:57:d2:67:ba:fa:6d:eb:27: 36:da:64:0a:70:0a:a7:6a:f5:15:dd:f3:b0:c6:bd:f5:a5:f2: 1c:bd:34:f2:69:91:fc:80:77:25:65:94:d9:05:18:d3:30:5a: 83:7a:e2:48:25:e7:16:6a:01:21:9b:b1:e8:c2:bc:bb:56:96: 88:cf:72:58:7f:93:7d:e8:e1:9e:ce:9c:4f:76:dc:9a:eb:bc: 42:21:0b:ca:8f:17:cc:13:64:11:8a:86:ff:b8:3f:36:0d:ac: d6:bb:9f:c6:cb:16:c7:81:25:5e:e2:f6:aa:e7:d1:95:a3:5e: 46:9c:fd:48:7c:b0:d8:4c:61:83:b9:6a:cb:7b:aa:a3:ac:07: 75:bd:36:52:86:48:a4:7b:65:77:be:38:67:3b:ca:ec:52:e8: 87:e3:db:8a:1a:74:bf:d8:cc:a9:94:df:c4:4b:46:f1:6a:7d: 6d:37:08:70:4e:d5:d1:b3:21:83:03:bf:86:88:00:b0:94:95: 5b:a8:b9:76:e6:0b:c2:0f:f6:30:8b:c5:08:12:c3:54:7c:04: aa:78:64:b2:9e:db:21:83:ea:91:68:2d:da:f1:25:90:50:77: b6:6e:bf:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4MAtnYfXvXhy/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzU4NGFjYTUtNDlmOS00YWY3LThmNWYtZTUwODhlMmUwYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6B+OZF6hTCie91POQSP7xYt/qwBcZkGcQPx tZzHWteI2RTMSOD0cMyQJLDdh5DRBGugXwKwy/RumTSSx+vC+pxyrxQB9JNzIrZP 7LcJD6CDmPoENy3Bek7G0fGW824RqbUvaW+QK6LDGBlxvpI1tt+tDHzpGCFu6cuG RETbSAi1KXIhWTNLeS70q3h7KEtHnQODaD8xOA2nHDXISlcvetPaQq3DrAAVxfMF F7n7H28VAeyUwVK2c2qVhP+XdO6IV9OMIbNJyAkf3pKpFhhd0kQu2nsmGlAznmif AgndZORbvI0kbHybOEDYvARSTSJmvuVJZO2rpF/POq6ORND9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkPux9szV4E3Ih3DVTht9jp0eSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzlhZDM0NDctMThjNy0z OGVmLWFjOWMtZTQ0ZDMyODU4NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+ZsZxki8Qxd5xADOV6ilq64edEjFp81v8UvB1X0me6+m3rJzbaZApw Cqdq9RXd87DGvfWl8hy9NPJpkfyAdyVllNkFGNMwWoN64kgl5xZqASGbsejCvLtW lojPclh/k33o4Z7OnE923JrrvEIhC8qPF8wTZBGKhv+4PzYNrNa7n8bLFseBJV7i 9qrn0ZWjXkac/Uh8sNhMYYO5ast7qqOsB3W9NlKGSKR7ZXe+OGc7yuxS6Ifj24oa dL/YzKmU38RLRvFqfW03CHBO1dGzIYMDv4aIALCUlVuouXbmC8IP9jCLxQgSw1R8 BKp4ZLKe2yGD6pFoLdrxJZBQd7Zuv2k= -----END CERTIFICATE-----Generated at Mon Apr 7 05:59:06 2025 by rpki-client