$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0795bf6-844c-3f99-a4a3-f5b4c8f6dbe0.roa File: e0795bf6-844c-3f99-a4a3-f5b4c8f6dbe0.roa (raw, json) Hash identifier: HSA3uvjbIUKaAl1ajm/03A0TlBL2YCj2Bo4ZZ4InfHM= Subject key identifier: 86:E0:7C:9A:1B:BC:72:35:F1:82:A7:4D:6A:C8:AB:BC:34:C7:3F:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492184163C23A0906FE73A3540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0795bf6-844c-3f99-a4a3-f5b4c8f6dbe0.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 33655 IP address blocks: 68.87.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:16:3c:23:a0:90:6f:e7:3a:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=7ac6f2e9-48fb-4e25-b279-f41b72678c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:86:83:08:da:6c:dd:cd:ac:f2:c7:ba:b5: 65:c0:c3:73:4b:2e:fb:11:09:29:80:2f:9c:b3:89: ef:09:15:92:26:9d:23:b1:45:5c:78:9c:78:9c:44: 89:27:13:af:3d:45:f4:d6:68:e7:f4:31:94:bc:f6: a0:7d:ff:b4:0b:05:a3:82:38:ea:7c:30:22:7b:81: f6:db:55:4e:b7:21:20:b8:a3:4a:ca:0e:bf:26:96: af:60:80:08:2e:14:06:1b:14:2f:41:96:d9:ab:ac: c3:22:61:83:78:e2:11:a6:9c:f8:3a:2b:8e:b0:78: b6:7d:f3:8e:26:9f:55:77:52:f4:8e:3e:d0:35:39: 43:81:63:78:c9:5c:52:f3:87:88:bf:7d:31:57:f1: ed:c4:d2:2a:fa:67:db:da:2e:d8:2a:a0:41:e4:b1: b8:20:79:d0:cd:b5:39:ab:84:f7:2c:e5:79:a7:f3: 31:f2:35:eb:f6:b2:50:c9:5a:fc:4a:a9:f1:9e:23: d1:f5:cc:a0:ae:81:14:a1:4d:d6:5e:9f:e6:d2:56: b1:ec:43:69:a0:20:3c:1e:b5:89:cc:83:53:fc:75: e0:ac:a8:bf:7c:51:5b:5a:75:2f:65:48:9f:ab:d3: f9:b9:2a:06:f9:27:59:2a:de:1c:7a:c3:e3:12:4f: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E0:7C:9A:1B:BC:72:35:F1:82:A7:4D:6A:C8:AB:BC:34:C7:3F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0795bf6-844c-3f99-a4a3-f5b4c8f6dbe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:12:73:18:21:57:ac:b5:01:fc:16:12:01:fb:11:d1:a1:fe: b0:d6:fb:df:a9:2c:07:b7:03:7e:78:66:53:e6:c9:b9:76:22: 11:94:37:32:f7:ef:31:36:0e:3d:04:b0:3a:7a:5a:c8:d0:d5: 62:d4:d5:b0:c5:5e:c7:bf:9f:43:e6:db:e0:e3:79:2d:a9:55: 2e:28:5d:e0:e8:64:9d:71:d5:44:0b:3f:d4:3a:5a:02:07:63: 3e:5b:36:14:c8:30:e7:e7:ec:f0:53:48:30:9f:2a:35:ac:d3: 9b:99:7b:00:88:2e:10:74:79:a5:b4:c9:ca:79:3f:26:50:a1: 0e:e6:25:27:7e:05:d2:b7:ad:4a:df:6e:1a:d4:76:14:5d:fa: cd:00:d6:76:1a:b3:bb:a6:29:ab:83:30:24:97:e2:66:2e:4e: 00:1c:33:29:55:ae:47:dd:31:6a:ac:bf:96:c0:fa:e0:8e:aa: 19:ef:cb:6f:be:4c:15:ca:f2:c4:a6:6a:82:ad:bc:df:8e:86: a5:65:09:79:53:16:89:4b:60:b5:d0:5e:97:4b:4f:af:06:39: 2e:9f:be:4b:5e:bc:f2:95:de:47:eb:45:cb:13:4f:87:9a:37: 13:2a:45:36:49:84:89:86:ef:cf:34:d5:d6:df:ca:30:03:0f: 3b:e3:4d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBY8I6CQb+c6NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk N2FjNmYyZTktNDhmYi00ZTI1LWIyNzktZjQxYjcyNjc4YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieSGgwjabN3NrPLHurVlwMNzSy77EQkpgC+c s4nvCRWSJp0jsUVceJx4nESJJxOvPUX01mjn9DGUvPagff+0CwWjgjjqfDAie4H2 21VOtyEguKNKyg6/JpavYIAILhQGGxQvQZbZq6zDImGDeOIRppz4OiuOsHi2ffOO Jp9Vd1L0jj7QNTlDgWN4yVxS84eIv30xV/HtxNIq+mfb2i7YKqBB5LG4IHnQzbU5 q4T3LOV5p/Mx8jXr9rJQyVr8SqnxniPR9cygroEUoU3WXp/m0lax7ENpoCA8HrWJ zINT/HXgrKi/fFFbWnUvZUifq9P5uSoG+SdZKt4cesPjEk97LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbgfJobvHI18YKnTWrIq7w0xz/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTA3OTViZjYtODQ0Yy0z Zjk5LWE0YTMtZjViNGM4ZjZkYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0ScxghV6y1AfwWEgH7EdGh/rDW+9+pLAe3A354ZlPmybl2IhGUNzL3 7zE2Dj0EsDp6WsjQ1WLU1bDFXse/n0Pm2+DjeS2pVS4oXeDoZJ1x1UQLP9Q6WgIH Yz5bNhTIMOfn7PBTSDCfKjWs05uZewCILhB0eaW0ycp5PyZQoQ7mJSd+BdK3rUrf bhrUdhRd+s0A1nYas7umKauDMCSX4mYuTgAcMylVrkfdMWqsv5bA+uCOqhnvy2++ TBXK8sSmaoKtvN+OhqVlCXlTFolLYLXQXpdLT68GOS6fvktevPKV3kfrRcsTT4ea NxMqRTZJhImG78801dbfyjADDzvjTeI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:47:16 2025 by rpki-client