$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b53988-7731-3a29-be25-75f3c7545f1a.roa File: d5b53988-7731-3a29-be25-75f3c7545f1a.roa (raw, json) Hash identifier: POfPp3SA2sEKDbHXeG1ogXnPhf0JKDJXafBoaPCmG5k= Subject key identifier: 85:BD:FB:9E:7F:9C:5F:B2:3C:7D:92:2A:7E:EF:E6:C0:B5:B2:02:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0D288A32154C169825EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b53988-7731-3a29-be25-75f3c7545f1a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.39.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:d2:88:a3:21:54:c1:69:82:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a9194cdc-1c23-48d9-956f-1ac50c821556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:41:1f:b7:9f:43:d3:33:85:97:b2:fc:df: 8a:a0:7b:65:73:05:d5:94:44:0a:0b:8b:40:06:47: 4c:bb:ff:90:b9:ee:ef:e6:12:4f:0f:f5:7f:e9:0c: 81:e6:24:33:50:f8:87:53:0a:ff:9a:9f:e8:57:66: af:a1:17:3c:e9:85:db:43:7d:94:c1:37:07:bd:90: 55:dd:5c:c7:0b:b4:fa:08:ce:fc:fa:06:b5:5b:87: a3:cf:88:5f:43:0b:03:91:7a:a0:eb:23:ad:8d:a5: 6c:36:d6:2d:cb:89:68:11:ab:93:9a:e2:25:c5:3f: 33:a8:48:79:82:9d:f1:9d:b3:93:6d:47:d6:b5:4d: 1c:85:f1:41:37:82:d8:45:f2:78:9d:38:dc:55:d0: 0f:87:16:f0:d4:92:29:3c:25:69:9e:90:21:62:23: 23:38:3a:fa:39:e4:08:1a:a6:f3:1b:ff:c4:15:14: 84:48:0c:94:b9:93:28:9a:c3:bb:67:6d:c1:cd:8e: ef:df:c1:4a:00:d6:fb:50:e5:1b:90:5f:79:6e:3f: 25:f7:01:40:d0:72:b9:58:48:84:d8:b0:75:66:56: af:36:a2:3e:e0:f9:33:44:65:25:f0:32:2a:8e:63: e9:82:f5:e5:44:5e:a0:b5:0e:86:92:06:d7:ec:12: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:FB:9E:7F:9C:5F:B2:3C:7D:92:2A:7E:EF:E6:C0:B5:B2:02:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b53988-7731-3a29-be25-75f3c7545f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0f:9f:80:cb:71:77:50:e3:4e:fd:97:df:c6:e6:57:45:cf: a3:1a:eb:d7:5f:1c:f8:df:49:88:c8:c3:47:f4:c3:d6:d7:c4: 2c:4f:7f:09:2c:6e:c4:8d:a6:a3:85:cd:bc:05:92:61:7e:70: c4:c2:30:7f:e6:4d:d1:01:9c:58:d8:b1:6d:36:3b:5c:b7:0c: a0:56:37:9c:37:c2:23:9e:d6:5f:5d:9c:5f:3d:d1:53:00:db: f6:10:6b:b9:ef:72:7d:dd:49:78:ac:32:94:ef:0e:1a:87:99: 1c:7e:21:14:81:1f:29:e6:64:c3:18:2d:51:ef:6b:2b:01:03: 82:7a:17:66:c7:a3:f6:3f:45:f2:32:6d:ca:6c:3d:76:0f:e4: fb:20:d2:3e:2b:d3:48:84:5a:06:46:5a:00:ba:ee:b7:6b:cc: fe:15:6c:50:28:14:91:7b:5d:4f:d5:af:51:27:9f:b7:3b:4c: b3:e2:5b:dd:25:77:23:0a:f1:36:c4:c0:b2:53:ef:0d:78:e6: 4f:d0:52:aa:02:27:3c:c7:1b:9d:24:99:a4:db:fb:4a:4d:36: 0a:02:89:4c:61:0f:7e:8d:55:4f:1d:66:6c:6d:4e:6e:9f:c2: 61:7a:f3:26:03:01:b6:23:43:80:a4:35:8f:db:69:d2:08:20: db:f6:7b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssNKIoyFUwWmCXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTkxOTRjZGMtMWMyMy00OGQ5LTk1NmYtMWFjNTBjODIxNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNBH7efQ9MzhZey/N+KoHtlcwXVlEQKC4tA BkdMu/+Que7v5hJPD/V/6QyB5iQzUPiHUwr/mp/oV2avoRc86YXbQ32UwTcHvZBV 3VzHC7T6CM78+ga1W4ejz4hfQwsDkXqg6yOtjaVsNtYty4loEauTmuIlxT8zqEh5 gp3xnbOTbUfWtU0chfFBN4LYRfJ4nTjcVdAPhxbw1JIpPCVpnpAhYiMjODr6OeQI GqbzG//EFRSESAyUuZMomsO7Z23BzY7v38FKANb7UOUbkF95bj8l9wFA0HK5WEiE 2LB1ZlavNqI+4PkzRGUl8DIqjmPpgvXlRF6gtQ6GkgbX7BJMMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW9+55/nF+yPH2SKn7v5sC1sgJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDViNTM5ODgtNzczMS0z YTI5LWJlMjUtNzVmM2M3NTQ1ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQPn4DLcXdQ4079l9/G5ldFz6Ma69dfHPjfSYjIw0f0w9bXxCxPfwks bsSNpqOFzbwFkmF+cMTCMH/mTdEBnFjYsW02O1y3DKBWN5w3wiOe1l9dnF890VMA 2/YQa7nvcn3dSXisMpTvDhqHmRx+IRSBHynmZMMYLVHvaysBA4J6F2bHo/Y/RfIy bcpsPXYP5Psg0j4r00iEWgZGWgC67rdrzP4VbFAoFJF7XU/Vr1Enn7c7TLPiW90l dyMK8TbEwLJT7w145k/QUqoCJzzHG50kmaTb+0pNNgoCiUxhD36NVU8dZmxtTm6f wmF68yYDAbYjQ4CkNY/badIIINv2e+A= -----END CERTIFICATE-----Generated at Mon Apr 7 18:46:54 2025 by rpki-client