$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa File: cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa (raw, json) Hash identifier: yfEHhUfLzjZy1X4Hy3qcuxz2y64DvgXV2eYnb/fBLDs= Subject key identifier: 4C:7F:8C:C3:3B:0C:8C:DD:17:BB:39:5B:61:81:D6:A5:F6:B5:8D:6A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8EF5F89A7C5692C4FCD30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.56.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:ef:5f:89:a7:c5:69:2c:4f:cd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=c66cdd88-9af6-4d3d-97b1-6caae773e54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:37:fa:d4:10:3d:1e:51:02:26:1f:64:1d:80: e2:42:30:42:39:b2:bb:aa:8a:6c:05:c5:81:de:cb: ac:aa:32:94:92:e6:97:b6:a2:00:d4:f2:b4:1a:a5: 79:40:a3:c9:7a:2c:5c:0b:5f:3d:6d:09:59:18:b9: b5:27:17:75:f4:a9:60:c3:28:84:58:b5:b9:86:ae: a2:16:c7:e0:ff:2d:61:9c:59:4b:66:5e:6c:10:28: c3:c2:b4:9d:9e:f4:4e:1f:93:bd:0a:1e:48:00:9d: 76:f2:70:02:35:44:5d:2c:8d:23:43:8b:c1:82:cb: d1:1f:a3:f4:c4:a8:47:62:22:51:88:ce:db:fc:ea: 2e:bb:85:96:e1:fa:9d:d3:77:61:ce:ee:f7:75:0b: f8:32:51:5f:81:5d:85:f5:75:c0:f3:6a:83:ad:b2: 7a:06:eb:13:4b:2e:c9:16:8b:4e:83:f2:66:22:41: b5:0e:6e:94:44:19:e4:a5:09:1f:27:b7:6e:02:4d: 1b:ea:13:66:d7:2b:4f:a7:0f:38:b0:6b:aa:d4:be: 60:85:ec:3c:a9:65:83:5f:3e:38:6a:59:93:e0:86: 4c:75:bf:9b:a5:d1:6f:c9:c9:17:18:91:97:b4:d4: 3a:2d:81:6c:79:86:69:86:a3:d1:99:29:20:21:a4: 48:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7F:8C:C3:3B:0C:8C:DD:17:BB:39:5B:61:81:D6:A5:F6:B5:8D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:96:2b:25:de:28:a6:19:b2:3f:79:93:05:0d:d3:5f:a7:7f: 33:c7:c1:0f:2e:ce:5e:a2:c3:12:12:72:09:b1:5d:09:b6:e6: 5a:5f:5d:2e:e9:f6:77:ad:4c:74:3b:05:f7:a3:a0:a5:1d:ff: f4:38:c0:6a:37:ee:56:54:d2:f3:b3:61:b4:c5:23:0c:76:40: 9f:09:bf:12:0c:01:0c:6a:be:75:29:f0:6d:5f:7c:37:19:71: dc:78:0c:83:b9:2a:e6:6f:bf:62:8a:99:25:3a:25:03:3a:a1: b3:47:e8:98:b8:c9:cc:f1:c3:1e:30:e6:3e:84:af:99:22:9d: 76:9b:a5:50:15:06:71:6c:af:1f:04:c7:77:9d:a6:bb:66:a2: e8:ec:23:06:2f:29:5e:ea:3b:85:31:95:45:d8:79:1e:75:18: 47:71:39:b0:4d:f4:51:57:77:73:57:2f:79:c7:f1:7d:2c:d5: a8:60:ba:45:67:34:c7:af:15:94:b1:90:e4:62:f2:30:ee:9d: 15:b2:c6:26:d7:db:b6:bf:4a:83:ce:9c:a6:18:79:05:4b:ee: a9:2f:21:93:09:21:4f:fe:c2:ad:21:79:55:b6:42:96:e6:34: 15:eb:9b:18:db:22:b8:2d:96:0b:f3:c1:cb:1d:34:e1:b7:5d: f5:50:55:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+O9fiafFaSxPzTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YzY2Y2RkODgtOWFmNi00ZDNkLTk3YjEtNmNhYWU3NzNlNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjf61BA9HlECJh9kHYDiQjBCObK7qopsBcWB 3susqjKUkuaXtqIA1PK0GqV5QKPJeixcC189bQlZGLm1Jxd19KlgwyiEWLW5hq6i Fsfg/y1hnFlLZl5sECjDwrSdnvROH5O9Ch5IAJ128nACNURdLI0jQ4vBgsvRH6P0 xKhHYiJRiM7b/Oouu4WW4fqd03dhzu73dQv4MlFfgV2F9XXA82qDrbJ6BusTSy7J FotOg/JmIkG1Dm6URBnkpQkfJ7duAk0b6hNm1ytPpw84sGuq1L5ghew8qWWDXz44 almT4IZMdb+bpdFvyckXGJGXtNQ6LYFseYZphqPRmSkgIaRIHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx/jMM7DIzdF7s5W2GB1qX2tY1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I5NGI1YjQtNTAwYi0z NDIyLTg3ZmQtMjFlN2YxYzFiNDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaWKyXeKKYZsj95kwUN01+nfzPHwQ8uzl6iwxIScgmxXQm25lpfXS7p 9netTHQ7BfejoKUd//Q4wGo37lZU0vOzYbTFIwx2QJ8JvxIMAQxqvnUp8G1ffDcZ cdx4DIO5KuZvv2KKmSU6JQM6obNH6Ji4yczxwx4w5j6Er5kinXabpVAVBnFsrx8E x3edprtmoujsIwYvKV7qO4UxlUXYeR51GEdxObBN9FFXd3NXL3nH8X0s1ahgukVn NMevFZSxkORi8jDunRWyxibX27a/SoPOnKYYeQVL7qkvIZMJIU/+wq0heVW2Qpbm NBXrmxjbIrgtlgvzwcsdNOG3XfVQVWs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:21 2025 by rpki-client