$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6e8740b-8661-3737-8a5c-574be6fba88a.roa File: d6e8740b-8661-3737-8a5c-574be6fba88a.roa (raw, json) Hash identifier: FKXPQDI20rT4S6NHoC0gE9pDOhlmOAk8tu1kAbjM7W0= Subject key identifier: 41:B9:0B:9E:7A:A9:76:E0:91:7D:AE:85:32:47:4D:2C:84:6C:CA:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8E74941EA9F607657E5A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6e8740b-8661-3737-8a5c-574be6fba88a.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.46.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:e7:49:41:ea:9f:60:76:57:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=00d94470-183e-45dd-addb-9ad46e29e2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:59:61:9e:c6:c1:d6:72:15:84:33:6b:06:c4: 2e:c8:31:9f:f7:1d:66:99:f2:97:ff:98:f3:e0:a6: c1:a4:54:19:90:7f:cd:db:bc:63:1d:a2:a6:84:29: 57:63:96:40:3d:69:e0:bb:0f:3f:2b:17:5e:1b:25: ba:e4:4d:02:0c:16:33:28:c7:34:3d:14:b6:c9:ba: 40:28:ea:3a:0d:73:ac:38:29:a8:3c:45:1b:f8:27: 16:41:bd:f2:79:98:f7:86:b4:bc:b3:aa:61:5b:5c: 51:10:4d:1a:49:dc:25:40:32:d3:2e:8f:e1:0f:48: 88:f1:46:c6:5e:87:b3:8f:e6:36:10:c2:00:51:ff: 5b:fa:84:d1:fe:b5:b6:d8:04:b9:15:31:c4:68:4d: 14:d2:9a:e1:19:f8:bf:0e:b8:3e:ca:05:af:eb:5d: 40:28:8f:bc:ec:65:38:ee:ce:84:88:65:ea:84:d0: 96:ea:6d:95:c5:cf:b0:e2:fa:a9:c0:92:33:af:d2: 09:16:69:4b:40:81:8f:98:6c:ef:c5:25:27:b9:79: 5a:0b:13:03:b7:c5:15:40:8d:45:a9:f7:44:91:a5: 56:b0:05:af:5b:58:80:dd:65:90:1d:2d:cc:ed:8b: bb:f6:a8:cb:70:23:1c:0b:57:28:8e:16:f0:21:aa: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B9:0B:9E:7A:A9:76:E0:91:7D:AE:85:32:47:4D:2C:84:6C:CA:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6e8740b-8661-3737-8a5c-574be6fba88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.46.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d3:98:be:de:94:97:75:92:a3:49:a9:fa:1c:27:e5:3d:7e: 73:6c:19:3a:37:91:4e:f2:8d:49:d4:54:8c:49:bf:26:a7:e2: 8d:45:4c:de:74:6d:5f:69:57:e8:5d:5f:01:8c:de:0a:2d:76: e3:14:98:37:c8:4a:ae:05:73:3f:e7:3b:f0:86:a6:09:c1:2f: 33:d2:f4:af:54:81:bc:b6:ce:54:8b:49:62:43:f8:c5:f3:52: ff:90:ab:9c:88:5a:e6:b0:f7:19:2a:b2:5d:a3:1e:65:72:91: fc:e4:1a:45:b5:d9:0f:72:fe:b2:f0:73:b6:da:25:ac:32:7a: ab:3d:b8:96:69:82:48:1c:6d:56:b8:77:1a:2a:1b:63:99:8a: 40:43:ba:75:62:63:49:e0:4e:3c:72:02:2e:e8:cf:e6:c0:c6: 56:73:d0:3a:f6:5d:76:0c:f0:5d:2e:7e:35:3a:26:a6:01:db: 51:79:40:0c:4d:c4:b0:9e:84:e3:34:0c:2f:20:31:25:5e:ed: 07:ac:0c:5a:9f:75:d7:0b:40:23:76:5d:67:e0:b2:cb:fc:ae: 4d:3d:29:83:61:50:3d:b5:94:cd:01:e2:36:83:82:cd:d5:2b: 9f:13:05:53:fd:bb:96:77:b0:3e:ed:b9:c1:d1:21:94:c4:72: 44:31:25:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+OdJQeqfYHZX5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDBkOTQ0NzAtMTgzZS00NWRkLWFkZGItOWFkNDZlMjllMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVlhnsbB1nIVhDNrBsQuyDGf9x1mmfKX/5jz 4KbBpFQZkH/N27xjHaKmhClXY5ZAPWnguw8/KxdeGyW65E0CDBYzKMc0PRS2ybpA KOo6DXOsOCmoPEUb+CcWQb3yeZj3hrS8s6phW1xREE0aSdwlQDLTLo/hD0iI8UbG Xoezj+Y2EMIAUf9b+oTR/rW22AS5FTHEaE0U0prhGfi/Drg+ygWv611AKI+87GU4 7s6EiGXqhNCW6m2Vxc+w4vqpwJIzr9IJFmlLQIGPmGzvxSUnuXlaCxMDt8UVQI1F qfdEkaVWsAWvW1iA3WWQHS3M7Yu79qjLcCMcC1cojhbwIaq6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG5C556qXbgkX2uhTJHTSyEbMpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDZlODc0MGItODY2MS0z NzM3LThhNWMtNTc0YmU2ZmJhODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfTmL7elJd1kqNJqfocJ+U9fnNsGTo3kU7yjUnUVIxJvyan4o1FTN50 bV9pV+hdXwGM3gotduMUmDfISq4Fcz/nO/CGpgnBLzPS9K9Ugby2zlSLSWJD+MXz Uv+Qq5yIWuaw9xkqsl2jHmVykfzkGkW12Q9y/rLwc7baJawyeqs9uJZpgkgcbVa4 dxoqG2OZikBDunViY0ngTjxyAi7oz+bAxlZz0Dr2XXYM8F0ufjU6JqYB21F5QAxN xLCehOM0DC8gMSVe7QesDFqfddcLQCN2XWfgssv8rk09KYNhUD21lM0B4jaDgs3V K58TBVP9u5Z3sD7tucHRIZTEckQxJfk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:36 2025 by rpki-client