$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daa22494-6097-329f-94ad-24b5a13924e0.roa File: daa22494-6097-329f-94ad-24b5a13924e0.roa (raw, json) Hash identifier: Nm6UViQ1/kdAaQgwGwE7d4qDNGsywGkfNwnAxPiKxXM= Subject key identifier: 7C:73:64:E7:F7:4C:9F:33:AD:D9:47:C6:F8:AC:16:2B:41:49:34:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F34E43AFA7FE88756D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daa22494-6097-329f-94ad-24b5a13924e0.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.61.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f3:4e:43:af:a7:fe:88:75:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=68d02eff-7fd2-4e0c-9f72-4c544c591243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:03:14:b5:6b:3f:b4:0e:20:e3:8a:3d:8d: 3e:46:68:0a:12:4a:cf:96:dd:86:cd:49:73:ae:1d: 38:61:a9:d2:41:8f:a9:0c:08:e5:0c:7f:78:2e:a5: 29:25:dc:9c:e7:90:15:a4:b0:f7:69:df:71:a3:03: b9:57:46:89:06:92:3f:05:74:11:20:4d:92:d4:87: 07:cb:2d:c5:97:9d:d5:74:1c:83:30:f9:3b:5d:6b: f6:9a:12:85:1f:f9:7b:6c:bf:65:5b:07:85:48:90: 8a:fa:69:40:c4:a4:14:31:68:e8:53:de:4c:14:d7: f1:12:f9:06:e1:82:4e:f4:13:20:2b:c6:f8:95:64: af:6a:0d:d8:63:13:b7:06:6f:60:88:e5:7e:6a:29: 60:2a:17:25:ae:2f:bc:c7:54:70:16:0e:26:74:6b: 8b:b4:c4:a5:b1:9d:3c:80:e7:47:2c:f0:5c:12:84: 29:92:9f:8d:05:a3:7c:00:4e:fb:3c:3d:81:3f:88: 7e:02:13:8b:19:77:71:f1:63:b5:fe:59:1e:53:de: d4:33:91:c8:8d:03:2a:ae:7d:3b:ad:75:b6:fa:25: 3f:d6:5a:3d:e9:74:8c:5a:56:47:94:d2:c0:f1:33: 14:ec:6f:e2:cb:84:1b:82:90:d0:7f:84:0c:9e:75: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:73:64:E7:F7:4C:9F:33:AD:D9:47:C6:F8:AC:16:2B:41:49:34:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daa22494-6097-329f-94ad-24b5a13924e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:38:57:ad:6f:9b:a9:51:ba:ba:83:c2:05:9f:76:77:da:99: d9:6d:17:ac:a1:14:79:30:bc:d1:dd:85:e3:a4:cd:ad:e5:b5: d6:68:d1:0a:21:75:cf:fe:f2:f4:b8:6e:cd:28:0c:4a:99:bb: 8a:a8:6e:5d:82:b0:9b:61:98:34:a8:55:e7:8f:29:fe:96:da: 0d:fa:eb:5c:d8:43:67:51:ba:11:3e:8a:f5:e2:58:6b:5a:d0: af:ee:f6:ca:68:cd:b6:1f:f4:61:26:b8:99:78:f8:4a:04:19: 5e:c8:62:ce:90:1a:b3:05:87:29:1a:05:46:57:cb:8c:90:7c: 33:49:9d:21:8c:46:a3:cd:1e:b5:f2:6d:be:1f:d5:77:7d:8c: 1b:12:1c:60:68:2b:f3:48:b9:79:28:2e:7d:77:43:d7:00:7f: a4:88:5c:99:0e:b4:cc:57:57:da:54:3a:3d:71:6e:ce:c5:43: 55:c1:ce:63:ac:1f:c8:bc:04:33:9e:71:49:27:5f:59:9c:c5: aa:17:38:94:f7:2d:b0:bf:d0:1b:1b:07:71:e5:6d:6f:8f:30: 2c:a0:43:be:95:9e:75:3f:01:af:68:45:24:5f:7f:88:da:35: f7:d8:90:13:b7:05:6d:4f:43:75:fd:85:37:74:1d:49:69:90: e4:b6:5b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+PNOQ6+n/oh1bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjhkMDJlZmYtN2ZkMi00ZTBjLTlmNzItNGM1NDRjNTkxMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh4DFLVrP7QOIOOKPY0+RmgKEkrPlt2GzUlz rh04YanSQY+pDAjlDH94LqUpJdyc55AVpLD3ad9xowO5V0aJBpI/BXQRIE2S1IcH yy3Fl53VdByDMPk7XWv2mhKFH/l7bL9lWweFSJCK+mlAxKQUMWjoU95MFNfxEvkG 4YJO9BMgK8b4lWSvag3YYxO3Bm9giOV+ailgKhclri+8x1RwFg4mdGuLtMSlsZ08 gOdHLPBcEoQpkp+NBaN8AE77PD2BP4h+AhOLGXdx8WO1/lkeU97UM5HIjQMqrn07 rXW2+iU/1lo96XSMWlZHlNLA8TMU7G/iy4QbgpDQf4QMnnWaWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxzZOf3TJ8zrdlHxvisFitBSTRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFhMjI0OTQtNjA5Ny0z MjlmLTk0YWQtMjRiNWExMzkyNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMw4V61vm6lRurqDwgWfdnfamdltF6yhFHkwvNHdheOkza3ltdZo0Qoh dc/+8vS4bs0oDEqZu4qobl2CsJthmDSoVeePKf6W2g3661zYQ2dRuhE+ivXiWGta 0K/u9spozbYf9GEmuJl4+EoEGV7IYs6QGrMFhykaBUZXy4yQfDNJnSGMRqPNHrXy bb4f1Xd9jBsSHGBoK/NIuXkoLn13Q9cAf6SIXJkOtMxXV9pUOj1xbs7FQ1XBzmOs H8i8BDOecUknX1mcxaoXOJT3LbC/0BsbB3HlbW+PMCygQ76VnnU/Aa9oRSRff4ja NffYkBO3BW1PQ3X9hTd0HUlpkOS2W6M= -----END CERTIFICATE-----Generated at Mon Apr 7 16:26:14 2025 by rpki-client