$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b64d97-3aca-36b8-8993-e62065a1968c.roa File: d2b64d97-3aca-36b8-8993-e62065a1968c.roa (raw, json) Hash identifier: nR4Yh/EWXEHDEXWx9j1VF3Eu/n+aQcr1ZOPmGd5DdeU= Subject key identifier: 10:F1:C0:3F:69:DD:2C:9D:9C:9A:03:82:26:5B:9E:75:56:58:D7:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C03AD7DAC3F3A039C88C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b64d97-3aca-36b8-8993-e62065a1968c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33652 IP address blocks: 68.87.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:03:ad:7d:ac:3f:3a:03:9c:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7992d9f8-f91e-4cfd-a980-d6892b973fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:35:ac:ce:15:a3:ea:48:e1:5f:97:f2:c3: e9:5a:08:4d:d8:cf:c9:47:bf:80:70:76:f9:4e:82: 5f:97:a8:27:17:36:de:98:27:4f:a8:70:04:99:e1: a7:94:c4:fb:45:40:d7:ad:db:8f:9a:74:de:22:2b: 11:6f:ab:ce:2c:fe:1f:9a:58:c0:e0:91:cd:f2:1c: 25:62:62:c4:8d:3e:03:1a:32:d1:74:e1:79:27:91: be:16:39:d5:8e:63:9e:02:c3:1d:46:41:18:99:ec: 73:19:d1:7c:5d:f3:48:ac:38:df:bf:aa:6a:52:90: 03:0b:ce:3b:58:71:0c:47:1a:97:f4:f1:58:ea:cc: cf:0d:3b:76:cf:9f:9e:89:84:5f:cd:09:2d:4b:1b: 4e:81:2b:63:37:12:52:27:39:56:4a:11:1c:76:e2: da:88:1a:59:a4:3b:ea:76:f7:07:34:12:78:68:aa: f5:f7:53:94:3a:7f:34:a6:ec:bf:63:98:1e:af:ae: 0b:fb:b0:2d:21:ed:4d:b0:1f:dc:f6:19:4e:5d:35: ba:7d:b1:8c:d7:17:be:62:ee:3a:11:df:a2:0b:52: be:0d:19:94:98:16:1e:0c:3e:81:91:35:1d:22:a0: f1:6e:4c:ca:26:a5:88:bf:54:01:bb:11:81:7f:62: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:C0:3F:69:DD:2C:9D:9C:9A:03:82:26:5B:9E:75:56:58:D7:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b64d97-3aca-36b8-8993-e62065a1968c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:da:8c:aa:2e:43:3c:ce:fa:2c:4f:e6:3c:48:16:de:48:38: 9d:ad:81:d2:f1:5e:5b:f4:cd:bc:a6:0b:65:86:0d:fa:36:05: 93:3a:ac:2f:60:4d:61:27:86:51:38:f1:da:63:ee:dc:fc:84: 2d:13:66:41:05:b5:87:28:db:d4:30:d6:10:f9:31:92:b6:21: b9:1b:29:0b:4f:e8:75:b1:2b:46:92:94:f7:33:63:96:d5:eb: d2:f5:e1:3e:ee:04:f6:43:ac:2d:aa:0e:cb:15:51:1e:f1:f9: 44:c8:96:e3:c1:a8:07:e9:f3:c2:11:95:19:a9:e6:20:4b:d6: c3:88:28:dd:0b:08:08:49:fb:42:9f:aa:d3:ab:2e:10:92:81: c0:1e:79:23:f4:0e:22:db:40:64:89:74:7f:ee:92:2f:01:9a: db:b1:77:e7:20:cf:bb:6d:96:1f:0e:cc:10:df:04:bd:00:28: 94:5f:f0:a1:fd:e1:0f:d5:24:8e:2d:fe:af:e3:91:47:d4:b3: 3a:66:51:d2:92:69:5c:e7:bc:c8:b1:a2:fb:71:43:7f:a7:91: e7:9a:27:57:a4:9d:17:a6:56:d5:cb:23:7c:5b:be:dd:92:2b: 95:e9:0d:8b:b3:15:1f:a9:5e:b3:ce:63:cc:c7:0c:75:2c:a7: 2a:6f:75:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebAOtfaw/OgOciMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Nzk5MmQ5ZjgtZjkxZS00Y2ZkLWE5ODAtZDY4OTJiOTczZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLI1rM4Vo+pI4V+X8sPpWghN2M/JR7+AcHb5 ToJfl6gnFzbemCdPqHAEmeGnlMT7RUDXrduPmnTeIisRb6vOLP4fmljA4JHN8hwl YmLEjT4DGjLRdOF5J5G+FjnVjmOeAsMdRkEYmexzGdF8XfNIrDjfv6pqUpADC847 WHEMRxqX9PFY6szPDTt2z5+eiYRfzQktSxtOgStjNxJSJzlWShEcduLaiBpZpDvq dvcHNBJ4aKr191OUOn80puy/Y5ger64L+7AtIe1NsB/c9hlOXTW6fbGM1xe+Yu46 Ed+iC1K+DRmUmBYeDD6BkTUdIqDxbkzKJqWIv1QBuxGBf2I5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDxwD9p3SydnJoDgiZbnnVWWNfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJiNjRkOTctM2FjYS0z NmI4LTg5OTMtZTYyMDY1YTE5NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFf3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLajKouQzzO+ixP5jxIFt5IOJ2tgdLxXlv0zbymC2WGDfo2BZM6rC9g TWEnhlE48dpj7tz8hC0TZkEFtYco29Qw1hD5MZK2IbkbKQtP6HWxK0aSlPczY5bV 69L14T7uBPZDrC2qDssVUR7x+UTIluPBqAfp88IRlRmp5iBL1sOIKN0LCAhJ+0Kf qtOrLhCSgcAeeSP0DiLbQGSJdH/uki8Bmtuxd+cgz7ttlh8OzBDfBL0AKJRf8KH9 4Q/VJI4t/q/jkUfUszpmUdKSaVznvMixovtxQ3+nkeeaJ1eknRemVtXLI3xbvt2S K5XpDYuzFR+pXrPOY8zHDHUspypvdQ8= -----END CERTIFICATE-----Generated at Mon Apr 7 03:51:29 2025 by rpki-client