$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab6ad5-460a-39bb-b188-2f966fea855e.roa File: d5ab6ad5-460a-39bb-b188-2f966fea855e.roa (raw, json) Hash identifier: MFqZ61HDLT7UUMOKD6kVGwE2cQUgNeOdNMr00nbCLKw= Subject key identifier: B5:4F:0D:9A:33:DE:AB:11:68:A3:7D:5E:5A:09:9E:66:E5:D1:59:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0DDD17C72824CBF4FEF40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab6ad5-460a-39bb-b188-2f966fea855e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.60.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:dd:d1:7c:72:82:4c:bf:4f:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a4c6e552-2af0-47f8-a5d4-171a8e6b616b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:2c:95:4f:b3:6e:5e:8d:1e:f4:c6:5d:f3: 8c:6f:75:b6:3f:ee:74:dc:f3:c0:53:56:67:d3:a7: 9b:e8:6b:d2:9d:45:90:33:a2:c9:03:ea:1c:cb:f2: e5:f2:c2:ce:75:45:cc:5c:d8:53:62:c3:6c:4a:49: e1:21:9f:4c:60:7c:92:a9:56:3c:3d:8a:75:50:76: 74:70:9c:9e:ec:81:58:22:83:f7:a2:67:69:87:8a: 59:6c:21:44:6e:c5:d5:40:f3:4a:6a:98:00:80:6e: 69:8a:ad:77:3e:52:b8:29:88:ca:e8:89:67:71:9d: 9f:72:49:67:68:ab:94:f7:ae:1b:1d:46:ba:4c:a9: 14:07:58:d0:2e:63:7c:8e:f2:66:34:ff:55:a1:92: bf:86:10:ae:32:40:d5:42:78:92:ec:37:81:81:42: 0a:0e:f8:97:ec:dd:49:05:47:9a:0d:91:49:d3:c4: 98:9a:db:77:92:1b:69:a3:fe:a0:f7:87:6f:3e:3a: 04:d4:1d:dc:44:08:01:a4:b1:ad:b5:9d:bc:f0:99: 62:a8:47:7e:48:02:dc:82:b0:ca:4c:a2:ba:53:d5: e0:3d:a9:df:8d:e2:42:02:6e:da:b8:9f:74:67:41: f4:3d:61:8e:6a:05:c5:5c:8b:dd:fc:eb:97:c3:79: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4F:0D:9A:33:DE:AB:11:68:A3:7D:5E:5A:09:9E:66:E5:D1:59:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5ab6ad5-460a-39bb-b188-2f966fea855e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b3:20:f9:7c:a7:f8:85:e7:d6:ce:9d:30:75:39:a8:c7:20: 93:e8:9b:0c:6c:6a:1e:be:f2:ad:5c:30:6b:45:34:1c:01:28: 2f:46:10:7f:3b:12:c1:16:4f:c9:85:bf:19:62:a6:7c:98:ab: a3:07:cb:76:65:be:4c:25:2a:bc:07:de:bf:3d:58:e0:a0:07: 54:64:6f:f5:13:b2:5b:38:e7:87:42:e0:cb:89:78:b5:b9:38: c1:25:27:1b:e7:11:dd:d7:e3:32:0f:b9:61:fb:cb:48:d1:07: 26:fb:41:52:c9:b0:dc:de:28:60:7a:fc:88:f1:97:ca:2e:71: 1d:1a:b2:20:49:98:20:ec:8a:27:84:aa:6e:14:cf:23:49:b5: 13:a4:18:1e:2d:c9:13:dd:90:f9:9b:a0:f0:8e:30:91:97:63: 84:1e:e5:b7:d1:eb:17:8a:89:86:6a:40:13:7f:f8:17:8a:a3: fd:f0:17:50:b4:ff:c8:d7:a2:76:f2:61:22:7f:89:a6:71:5c: 02:b7:f4:3c:f6:45:21:c8:d5:a0:14:9d:89:55:a8:96:b0:2e: 38:72:3a:75:db:14:9a:22:47:44:5f:db:0f:55:cf:f1:cd:17: 2f:d3:64:c4:b5:9e:1a:9e:a7:dc:6e:13:25:b3:1d:72:58:f2: 85:c2:97:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssN3RfHKCTL9P70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTRjNmU1NTItMmFmMC00N2Y4LWE1ZDQtMTcxYThlNmI2MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoMslU+zbl6NHvTGXfOMb3W2P+503PPAU1Zn 06eb6GvSnUWQM6LJA+ocy/Ll8sLOdUXMXNhTYsNsSknhIZ9MYHySqVY8PYp1UHZ0 cJye7IFYIoP3omdph4pZbCFEbsXVQPNKapgAgG5piq13PlK4KYjK6IlncZ2fckln aKuU964bHUa6TKkUB1jQLmN8jvJmNP9VoZK/hhCuMkDVQniS7DeBgUIKDviX7N1J BUeaDZFJ08SYmtt3khtpo/6g94dvPjoE1B3cRAgBpLGttZ288JliqEd+SALcgrDK TKK6U9XgPanfjeJCAm7auJ90Z0H0PWGOagXFXIvd/OuXw3kALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVPDZoz3qsRaKN9XloJnmbl0VmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDVhYjZhZDUtNDYwYS0z OWJiLWIxODgtMmY5NjZmZWE4NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABezIPl8p/iF59bOnTB1OajHIJPomwxsah6+8q1cMGtFNBwBKC9GEH87 EsEWT8mFvxlipnyYq6MHy3ZlvkwlKrwH3r89WOCgB1Rkb/UTsls454dC4MuJeLW5 OMElJxvnEd3X4zIPuWH7y0jRByb7QVLJsNzeKGB6/Ijxl8oucR0asiBJmCDsiieE qm4UzyNJtROkGB4tyRPdkPmboPCOMJGXY4Qe5bfR6xeKiYZqQBN/+BeKo/3wF1C0 /8jXonbyYSJ/iaZxXAK39Dz2RSHI1aAUnYlVqJawLjhyOnXbFJoiR0Rf2w9Vz/HN Fy/TZMS1nhqep9xuEyWzHXJY8oXCl4g= -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:19 2025 by rpki-client