$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa File: cd520bef-42d3-3f61-ae02-704de30c779d.roa (raw, json) Hash identifier: QF/lLpdKJRlEYonVOBZck4fjNmYh9JodhUWjrA9+Vwg= Subject key identifier: 26:C2:D5:7B:DA:09:F9:DC:60:F6:53:1E:2D:1C:2E:BD:46:F0:06:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F78AD68A9EEFC9AF829BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.41.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8a:d6:8a:9e:ef:c9:af:82:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b80ee88a-46a9-4f00-8189-613ecf1cb708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:b4:28:74:e3:ba:7b:76:8b:17:26:71:bc: 0a:64:fe:9c:81:0e:a1:c6:bd:eb:e4:67:f9:43:39: 1c:b1:0a:3d:94:a4:28:3b:8a:29:28:7c:bd:86:d3: f5:81:79:d7:83:d9:67:bf:9b:a6:ff:d4:be:49:a1: 67:1c:3a:70:5c:e3:dd:31:68:ee:83:c0:36:89:1b: 46:44:e9:5a:dd:49:3e:1d:c2:db:6c:eb:c8:6d:16: 72:fe:42:f7:8f:1c:84:0d:91:b0:c6:61:bc:ed:af: 4d:d6:c4:b5:1c:e7:2f:de:52:86:5d:ff:7b:14:fb: e3:0d:2f:ac:32:8a:26:43:a1:bd:39:f0:d5:da:28: b2:79:f8:09:82:4a:db:da:5a:96:0b:fc:37:89:81: 16:6d:2b:4e:cb:cb:91:81:50:dc:c9:98:4e:1b:b4: 4a:86:de:29:91:a8:4c:c9:93:5b:71:75:74:56:f8: df:cc:8e:12:2f:e5:fe:2f:65:de:f2:d1:fa:70:34: 63:1b:b6:fa:77:46:a2:4e:9f:2f:3e:51:c9:34:e4: 6a:19:c9:69:8d:ef:18:cf:5a:d0:57:24:3a:df:d7: cc:63:1d:a6:35:5b:67:ba:d9:96:3a:e7:ec:c7:54: 75:35:49:54:75:b1:69:e4:ba:40:85:30:b1:d4:39: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C2:D5:7B:DA:09:F9:DC:60:F6:53:1E:2D:1C:2E:BD:46:F0:06:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f3:47:da:cc:f0:17:b6:11:5f:b6:6d:19:9f:2c:ab:7a:58: f1:6d:18:6c:a6:54:15:ef:fe:06:24:ad:66:c4:3b:38:49:4d: 1b:e0:4b:4c:e8:30:68:75:23:85:59:fc:2e:3b:86:b9:e0:73: 4e:02:67:31:9b:91:e6:15:7c:e7:41:7b:a2:a3:91:bd:4f:bc: 05:01:fa:86:8d:be:77:ee:7d:fc:ab:d8:c0:51:f6:ac:17:ec: 47:4b:b5:79:93:c3:23:42:6a:ad:cf:ac:ea:36:52:5e:e6:ec: ca:9a:09:6a:ad:b0:54:b2:55:f0:9d:51:1b:bd:51:42:67:a8: fb:bb:e0:e6:aa:f6:b0:fe:71:d2:0d:5b:ff:6e:67:a9:06:c8: ef:7b:5c:91:ca:78:a7:e1:49:da:2c:60:8d:67:f9:08:64:15: db:f1:74:96:0e:da:ea:a2:fc:19:14:19:3d:ca:56:4d:63:70: 1a:c4:59:52:0d:43:ab:38:5d:a4:16:79:47:cc:a0:8e:00:84: 34:53:e9:6a:03:f1:00:6c:9c:6f:50:25:6a:e2:5a:31:3b:31: ce:a2:ad:f2:5e:be:7e:34:5f:19:99:38:9c:9f:3a:f3:4f:d9: 04:ed:32:1a:53:1f:8e:04:86:75:f4:b7:9c:e3:01:cf:7f:a8: fd:f6:43:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094rWip7vya+Cm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjgwZWU4OGEtNDZhOS00ZjAwLTgxODktNjEzZWNmMWNiNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3m0KHTjunt2ixcmcbwKZP6cgQ6hxr3r5Gf5 QzkcsQo9lKQoO4opKHy9htP1gXnXg9lnv5um/9S+SaFnHDpwXOPdMWjug8A2iRtG ROla3Uk+HcLbbOvIbRZy/kL3jxyEDZGwxmG87a9N1sS1HOcv3lKGXf97FPvjDS+s MoomQ6G9OfDV2iiyefgJgkrb2lqWC/w3iYEWbStOy8uRgVDcyZhOG7RKht4pkahM yZNbcXV0VvjfzI4SL+X+L2Xe8tH6cDRjG7b6d0aiTp8vPlHJNORqGclpje8Yz1rQ VyQ639fMYx2mNVtnutmWOufsx1R1NUlUdbFp5LpAhTCx1DnB6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbC1XvaCfncYPZTHi0cLr1G8AYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q1MjBiZWYtNDJkMy0z ZjYxLWFlMDItNzA0ZGUzMGM3NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3zR9rM8Be2EV+2bRmfLKt6WPFtGGymVBXv/gYkrWbEOzhJTRvgS0zo MGh1I4VZ/C47hrngc04CZzGbkeYVfOdBe6Kjkb1PvAUB+oaNvnfuffyr2MBR9qwX 7EdLtXmTwyNCaq3PrOo2Ul7m7MqaCWqtsFSyVfCdURu9UUJnqPu74Oaq9rD+cdIN W/9uZ6kGyO97XJHKeKfhSdosYI1n+QhkFdvxdJYO2uqi/BkUGT3KVk1jcBrEWVIN Q6s4XaQWeUfMoI4AhDRT6WoD8QBsnG9QJWriWjE7Mc6irfJevn40XxmZOJyfOvNP 2QTtMhpTH44EhnX0t5zjAc9/qP32Q0g= -----END CERTIFICATE-----Generated at Sat Apr 12 15:14:19 2025 by rpki-client