$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa File: d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa (raw, json) Hash identifier: N2Edl93p9EBm+wf5X+PnLiR0O9rVdeeaBYdURIW3BMA= Subject key identifier: 36:A7:01:BB:2F:A6:6B:DE:AA:FB:E7:31:3A:70:89:20:72:69:2F:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7850FAE28E6DCC3838880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.36.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:85:0f:ae:28:e6:dc:c3:83:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=7f54dfb5-cdb8-4343-825b-15aa664bdd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:3e:78:39:53:49:fa:01:28:3a:38:82:28: 0c:a9:65:f9:c3:3b:f7:24:c6:4e:11:1c:b5:20:b1: 31:14:55:1e:a8:c3:68:62:e4:ac:55:35:b1:90:01: de:1b:b4:21:83:43:81:ff:54:7d:00:85:72:82:dd: 4c:22:f9:ee:bf:c3:86:0f:5f:ec:51:95:d4:a9:5c: 55:a4:ce:6e:32:6d:4a:04:2f:bb:23:63:c1:44:ca: 8a:d5:85:18:7d:2e:a6:d1:b1:bd:40:d8:47:db:28: 7e:0a:e5:59:91:32:bc:9b:03:73:e4:92:b5:28:0c: 85:61:91:a4:d2:3b:3b:57:89:f4:9d:b9:df:a7:42: c3:ae:96:cd:91:8e:ee:44:50:6d:41:61:da:96:58: 51:80:50:43:f8:0e:91:d1:8f:06:13:43:c2:21:35: 2d:a8:9c:01:be:61:25:63:96:c0:8a:ac:bb:c8:37: c1:58:c7:75:32:c6:d2:09:0a:7e:67:3e:72:33:56: f1:df:e3:2d:d7:08:05:46:c1:2f:0b:1e:4a:4a:10: de:5b:5b:2a:be:cd:8d:7a:d7:d9:eb:7c:1e:d2:f4: a2:d9:38:0c:5d:6b:7c:41:8c:69:22:07:90:9b:eb: 27:3b:42:5b:5e:16:00:89:91:11:b2:b2:17:44:a2: ca:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A7:01:BB:2F:A6:6B:DE:AA:FB:E7:31:3A:70:89:20:72:69:2F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d4:66:9e:df:31:c9:a0:ef:bc:9d:00:d3:34:69:b2:a0:fc: 45:29:62:14:37:14:7a:0a:46:c2:55:06:f3:f0:be:2b:a1:e8: c7:6b:2f:5c:8d:b4:3d:49:a6:7c:3d:bc:f1:e4:22:9c:17:44: 1a:ae:93:18:63:01:4d:52:9c:30:3e:5c:85:a5:b9:e3:d7:b6: 7b:9b:2a:46:d8:e3:e1:b3:d4:29:46:d5:9d:e6:d8:85:6d:50: e8:c1:72:74:4f:4e:e0:60:7c:d4:ad:05:2e:a3:20:f6:fa:0e: c9:78:26:57:69:28:47:5a:1c:da:8d:c2:1d:03:7a:b3:71:9c: e5:ea:c7:0e:32:41:4f:2a:10:15:58:2e:1a:01:8a:c2:29:84: 03:7b:c5:e4:cf:7a:6a:69:c7:60:4d:2c:a4:71:f9:e8:9d:60: 19:4e:0a:17:54:da:75:0b:78:60:f0:21:c4:74:6e:11:c2:7c: de:5c:1c:d5:5b:9c:e1:85:7f:db:2d:14:6d:93:a1:9e:26:d5: ee:ec:ae:c8:5e:d7:b0:ac:25:82:80:09:e5:82:1b:65:de:ed: a5:bf:72:1b:89:97:a0:f6:b4:c6:7d:f3:36:72:d0:3a:58:1b: 49:43:ea:8e:c5:c1:05:93:ce:4d:bb:72:5d:fc:66:80:38:50: ed:e0:a7:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094UPrijm3MODiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk N2Y1NGRmYjUtY2RiOC00MzQzLTgyNWItMTVhYTY2NGJkZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot4+eDlTSfoBKDo4gigMqWX5wzv3JMZOERy1 ILExFFUeqMNoYuSsVTWxkAHeG7Qhg0OB/1R9AIVygt1MIvnuv8OGD1/sUZXUqVxV pM5uMm1KBC+7I2PBRMqK1YUYfS6m0bG9QNhH2yh+CuVZkTK8mwNz5JK1KAyFYZGk 0js7V4n0nbnfp0LDrpbNkY7uRFBtQWHallhRgFBD+A6R0Y8GE0PCITUtqJwBvmEl Y5bAiqy7yDfBWMd1MsbSCQp+Zz5yM1bx3+Mt1wgFRsEvCx5KShDeW1sqvs2NetfZ 63we0vSi2TgMXWt8QYxpIgeQm+snO0JbXhYAiZERsrIXRKLKoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDanAbsvpmveqvvnMTpwiSByaS8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA5NmMwYWUtZjNjMy0z NmFkLTg2MWQtMmNhOGE2YWVjODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfUZp7fMcmg77ydANM0abKg/EUpYhQ3FHoKRsJVBvPwviuh6MdrL1yN tD1Jpnw9vPHkIpwXRBqukxhjAU1SnDA+XIWluePXtnubKkbY4+Gz1ClG1Z3m2IVt UOjBcnRPTuBgfNStBS6jIPb6Dsl4JldpKEdaHNqNwh0DerNxnOXqxw4yQU8qEBVY LhoBisIphAN7xeTPemppx2BNLKRx+eidYBlOChdU2nULeGDwIcR0bhHCfN5cHNVb nOGFf9stFG2ToZ4m1e7srshe17CsJYKACeWCG2Xe7aW/chuJl6D2tMZ98zZy0DpY G0lD6o7FwQWTzk27cl38ZoA4UO3gp8Y= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:31 2025 by rpki-client