$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa File: dfdb6820-06eb-3782-b934-97cafc7afa7c.roa (raw, json) Hash identifier: LPw4YIrue/u/HH/xEFFqr9hG64NHICPMr3XLHacfXs0= Subject key identifier: EE:8C:B4:17:D9:90:2B:C3:C4:20:C2:64:99:AA:43:5D:C6:11:BC:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7853DBEECBBF9427A7BBC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.36.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:85:3d:be:ec:bb:f9:42:7a:7b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a6d7199b-2d54-41ce-98d0-255a3ef4f900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:44:60:94:76:4c:87:15:41:0f:86:9f:63: 98:8a:77:fe:75:7d:cf:e5:91:3a:5b:38:22:bb:2d: af:50:a3:4c:e4:b7:60:35:c5:ff:68:b7:5c:f7:ae: ed:6c:dc:69:1f:d3:a0:c4:f1:3f:b4:43:c8:e6:d3: 71:5b:5a:ca:d0:c3:59:78:08:63:d0:7d:e8:99:77: 96:15:30:36:a0:a9:a8:b8:83:ce:5d:f9:11:05:03: 5e:11:ac:3e:b2:02:40:4c:79:c8:29:f9:a0:ef:a7: b9:f0:c5:75:e7:0a:fd:52:5d:1f:6f:22:b9:f0:81: 0e:fe:93:1b:3e:36:9a:7f:ef:ee:ed:a5:ff:08:c4: b9:6b:f1:3c:13:d3:1d:b7:7a:fd:a4:fd:d8:85:7b: 82:51:06:8b:03:bd:07:65:2d:e7:b9:86:2d:00:bd: 5a:29:bf:b0:0d:2d:67:55:8c:7d:2b:71:95:c4:16: cc:05:18:ba:cb:e2:8f:71:a4:56:c7:9e:c4:39:db: 94:43:70:c7:c8:30:7a:f0:46:a5:96:01:a5:24:c2: d6:36:6d:02:20:a6:16:a1:d1:98:9b:c2:04:48:8f: 9b:ef:7e:d6:ab:34:e3:38:55:ec:24:b2:99:24:58: 64:3d:95:7b:bf:ae:f0:15:4c:6a:9b:0d:51:5c:d6: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8C:B4:17:D9:90:2B:C3:C4:20:C2:64:99:AA:43:5D:C6:11:BC:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:89:bd:d7:bc:08:42:aa:b9:71:2c:a0:77:1a:c2:89:02:32: 53:49:71:9f:96:2d:d7:7d:34:2a:f0:9d:fa:70:cc:40:b7:f4: ff:8d:43:8c:44:73:8e:28:f3:54:3b:e1:75:5c:eb:3b:a2:33: fe:31:c6:30:bd:f4:da:44:04:f6:c9:33:c4:8d:3c:4b:bc:b7: 98:9c:69:23:da:a4:56:27:47:bc:f3:7f:9f:6a:22:1f:13:86: e3:a6:e0:c2:a4:c3:c4:1b:d0:a0:3e:97:58:00:d4:64:22:8a: c8:57:fb:6b:8d:12:83:35:81:5a:4d:2f:1f:6b:b7:94:16:9b: 7b:3f:58:2b:4f:c7:8c:c1:36:30:bf:d5:6a:4d:a6:a1:76:f4: 83:90:0f:b3:21:90:8a:29:af:5b:2f:e7:f4:df:ff:48:3e:1a: e7:53:14:e6:0b:53:d7:fe:93:eb:38:c2:ea:cb:0a:8d:07:c3: 8d:bc:4b:b4:33:6d:51:58:df:3d:f0:6e:cb:76:23:4f:e0:fc: 97:ef:54:f3:18:6d:53:a6:b7:20:3c:47:83:23:b5:40:26:9b: c6:41:d6:3f:49:fe:0f:b2:08:69:4a:bd:e5:10:99:f0:1c:b3: 30:ad:7d:f9:fc:8c:4e:59:ea:d2:29:1a:a5:a0:bf:c5:96:39: 9f:94:b1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094U9vuy7+UJ6e7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTZkNzE5OWItMmQ1NC00MWNlLTk4ZDAtMjU1YTNlZjRmOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF5EYJR2TIcVQQ+Gn2OYinf+dX3P5ZE6Wzgi uy2vUKNM5LdgNcX/aLdc967tbNxpH9OgxPE/tEPI5tNxW1rK0MNZeAhj0H3omXeW FTA2oKmouIPOXfkRBQNeEaw+sgJATHnIKfmg76e58MV15wr9Ul0fbyK58IEO/pMb Pjaaf+/u7aX/CMS5a/E8E9Mdt3r9pP3YhXuCUQaLA70HZS3nuYYtAL1aKb+wDS1n VYx9K3GVxBbMBRi6y+KPcaRWx57EOduUQ3DHyDB68EallgGlJMLWNm0CIKYWodGY m8IESI+b737WqzTjOFXsJLKZJFhkPZV7v67wFUxqmw1RXNa/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6MtBfZkCvDxCDCZJmqQ13GEbxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZkYjY4MjAtMDZlYi0z NzgyLWI5MzQtOTdjYWZjN2FmYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWJvde8CEKquXEsoHcawokCMlNJcZ+WLdd9NCrwnfpwzEC39P+NQ4xE c44o81Q74XVc6zuiM/4xxjC99NpEBPbJM8SNPEu8t5icaSPapFYnR7zzf59qIh8T huOm4MKkw8Qb0KA+l1gA1GQiishX+2uNEoM1gVpNLx9rt5QWm3s/WCtPx4zBNjC/ 1WpNpqF29IOQD7MhkIopr1sv5/Tf/0g+GudTFOYLU9f+k+s4wurLCo0Hw428S7Qz bVFY3z3wbst2I0/g/JfvVPMYbVOmtyA8R4MjtUAmm8ZB1j9J/g+yCGlKveUQmfAc szCtffn8jE5Z6tIpGqWgv8WWOZ+UscA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:32 2025 by rpki-client