$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da8bb066-e825-3694-8442-d05e07904524.roa File: da8bb066-e825-3694-8442-d05e07904524.roa (raw, json) Hash identifier: XSaWXO9aycRTfjGw7DOO/3/TxFnisouD39QNixvVvb8= Subject key identifier: 69:43:D1:26:2A:37:B0:F1:B5:22:5F:73:F8:F9:41:E9:61:6F:A6:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B82030DD0FAF7E0FCC580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da8bb066-e825-3694-8442-d05e07904524.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.59.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:82:03:0d:d0:fa:f7:e0:fc:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7a9f3d24-3993-47b7-bc83-7683f9e3ed06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d7:88:f3:dc:8e:75:24:a1:7d:20:92:da:14: 8b:de:1a:83:24:0c:9c:da:48:14:96:d6:d0:1c:3c: 15:a2:c9:92:b2:61:d9:61:0c:66:b0:99:1e:b3:9e: 8a:5b:13:89:70:af:e6:21:4e:ab:27:9e:8b:90:6b: 51:da:97:a1:da:f4:82:95:0a:62:ac:7f:10:b4:d5: 63:f9:8a:0f:21:af:2d:7c:6d:c1:59:52:cc:f0:1e: 1b:68:87:e7:31:1f:b0:02:38:f8:93:e7:51:6f:c4: 00:6f:9d:db:91:84:dc:1b:18:bb:24:76:61:24:e8: 5c:b0:e9:af:0c:cf:97:59:06:b4:b8:b3:d5:eb:be: 03:8d:8a:29:e9:3a:44:eb:c6:0e:c7:de:57:34:64: 16:11:8b:fe:76:20:59:b6:fb:cb:97:44:5a:d3:12: 64:ed:45:07:32:a2:12:4b:3e:a2:2a:48:a8:54:cc: 18:ab:b5:64:e2:b7:9f:9a:20:0f:0f:1a:60:87:cf: 80:23:4a:b3:4d:72:fe:89:43:56:c2:12:41:55:ba: 3b:6b:3c:5c:a9:ab:66:ae:2e:2f:94:eb:68:6e:9e: eb:70:c0:86:01:90:46:dc:c2:20:51:e1:4b:62:6c: 15:45:89:56:1a:de:4a:85:1f:a3:d9:e1:aa:20:dc: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:D1:26:2A:37:B0:F1:B5:22:5F:73:F8:F9:41:E9:61:6F:A6:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da8bb066-e825-3694-8442-d05e07904524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:43:6a:cb:e7:53:2f:f1:c7:d8:94:50:aa:7f:cb:93:75:93: 88:60:02:d6:24:19:77:5d:e3:18:9d:20:68:fc:5e:93:4e:1c: 1e:fc:c3:a7:99:a7:2f:0f:c9:92:73:9d:ce:77:22:6b:da:12: 14:27:f4:85:f7:8f:44:fd:b2:35:65:fa:bc:a7:87:30:0f:46: ee:80:75:f2:3b:d5:5b:c7:64:b7:ef:27:8d:c4:ec:13:d5:4b: ba:07:b5:ef:c6:f2:dd:e1:81:ea:c5:1b:0d:ac:2a:3b:10:ac: 7b:64:08:33:fd:00:8e:6f:5a:54:f0:91:5f:95:74:d3:4a:93: c1:d0:6a:e3:f2:24:ae:0b:b2:8f:11:c5:92:d2:77:02:6c:37: 3d:b4:48:43:5c:3b:b0:9f:f2:f8:22:96:06:15:5b:08:84:b2: ea:ad:18:6d:d3:6a:d7:4e:2f:cb:3f:6f:4b:22:c4:0f:0e:92: e9:e9:24:12:0f:73:6f:1b:6b:35:ef:81:89:f8:51:89:ff:f5: 23:62:a6:16:53:68:1b:8d:38:4b:37:09:c0:8c:11:61:e3:10: 58:bf:6f:b4:84:4f:0a:90:48:5d:80:e9:52:06:a5:36:6f:5a: 70:50:d5:d2:c9:9b:54:69:72:0b:3f:37:54:67:78:20:6a:18: 48:31:1f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4IDDdD69+D8xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2E5ZjNkMjQtMzk5My00N2I3LWJjODMtNzY4M2Y5ZTNlZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39eI89yOdSShfSCS2hSL3hqDJAyc2kgUltbQ HDwVosmSsmHZYQxmsJkes56KWxOJcK/mIU6rJ56LkGtR2peh2vSClQpirH8QtNVj +YoPIa8tfG3BWVLM8B4baIfnMR+wAjj4k+dRb8QAb53bkYTcGxi7JHZhJOhcsOmv DM+XWQa0uLPV674DjYop6TpE68YOx95XNGQWEYv+diBZtvvLl0Ra0xJk7UUHMqIS Sz6iKkioVMwYq7Vk4refmiAPDxpgh8+AI0qzTXL+iUNWwhJBVbo7azxcqatmri4v lOtobp7rcMCGAZBG3MIgUeFLYmwVRYlWGt5KhR+j2eGqINywDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlD0SYqN7DxtSJfc/j5Qelhb6acMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE4YmIwNjYtZTgyNS0z Njk0LTg0NDItZDA1ZTA3OTA0NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVDasvnUy/xx9iUUKp/y5N1k4hgAtYkGXdd4xidIGj8XpNOHB78w6eZ py8PyZJznc53ImvaEhQn9IX3j0T9sjVl+rynhzAPRu6AdfI71VvHZLfvJ43E7BPV S7oHte/G8t3hgerFGw2sKjsQrHtkCDP9AI5vWlTwkV+VdNNKk8HQauPyJK4Lso8R xZLSdwJsNz20SENcO7Cf8vgilgYVWwiEsuqtGG3TatdOL8s/b0sixA8OkunpJBIP c28bazXvgYn4UYn/9SNiphZTaBuNOEs3CcCMEWHjEFi/b7SETwqQSF2A6VIGpTZv WnBQ1dLJm1Rpcgs/N1RneCBqGEgxH3U= -----END CERTIFICATE-----Generated at Mon Apr 7 16:14:12 2025 by rpki-client