$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e224cfc3-c4c8-3c8c-97a3-6ca32f53af96.roa File: e224cfc3-c4c8-3c8c-97a3-6ca32f53af96.roa (raw, json) Hash identifier: cCeGj2Ke2477GFt8A5OyRf5OckPLnZ8gfsadxebo/ZI= Subject key identifier: F1:DB:5B:D4:34:92:8D:1C:61:68:0B:09:9D:F2:FE:70:85:D3:AB:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D43A2CD4D690B5A360D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e224cfc3-c4c8-3c8c-97a3-6ca32f53af96.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 21508 IP address blocks: 68.85.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:43:a2:cd:4d:69:0b:5a:36:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c161049e-8483-4624-a690-1bd560238cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:08:35:23:7b:22:78:68:6b:dc:49:7b:10: 2a:2e:26:11:0f:f7:ae:fc:24:d5:e7:ae:bd:69:06: 51:5c:19:cd:e3:ee:00:46:18:b6:5a:9c:51:4c:0f: 65:94:84:c6:69:3e:e5:38:41:9d:3b:5b:0b:f4:b0: ec:d1:80:e5:d8:ea:86:38:40:3d:31:a9:f7:2d:d6: 10:9a:96:7a:c3:5b:b8:8a:75:3f:45:91:d0:1b:9a: 7d:e8:66:45:fb:7c:ab:74:ad:9d:86:38:62:da:fc: ed:a8:34:3a:50:5d:60:e2:2b:71:9e:3b:3b:fd:5d: ce:e0:4e:6d:36:7d:87:11:63:06:3d:9e:da:11:24: 36:84:3e:c7:31:5a:4c:37:79:d0:06:a8:20:0f:3c: 03:f6:0d:55:2d:c2:c4:b3:07:4a:cf:a1:58:5e:f6: a8:ea:7f:3b:cf:29:e2:6d:6c:07:cb:5d:aa:1f:f5: 3b:d4:c8:e2:c7:dc:2e:5c:57:ff:2b:e9:f1:24:4c: 60:f6:54:36:2e:f2:c2:06:f3:46:41:56:a4:e1:ab: 1b:19:b2:17:3b:98:d3:fb:a7:84:0f:b7:b2:bb:d9: 21:f3:dd:a7:83:64:84:da:90:a4:65:ae:5b:10:ac: 34:51:70:67:e2:3b:42:58:fd:4a:6c:68:c2:81:e1: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:5B:D4:34:92:8D:1C:61:68:0B:09:9D:F2:FE:70:85:D3:AB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e224cfc3-c4c8-3c8c-97a3-6ca32f53af96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:e5:6b:28:64:c6:83:79:cf:a6:05:3f:eb:9d:c9:be:26:16: 25:6f:6b:0a:d5:1f:63:e2:66:81:c4:d5:fa:04:2f:c8:23:f2: e0:ab:7a:08:fb:6d:e0:f1:9d:2b:7f:d4:d3:6d:17:14:e7:a5: ca:f6:08:c5:e9:f7:4b:55:f7:65:b0:4a:81:44:11:e8:95:78: 1f:77:bf:32:46:7d:28:62:21:44:86:85:68:ac:61:92:88:5b: 59:b4:d5:8e:a5:a5:7f:c9:6f:f4:58:e5:2d:01:04:d6:9e:96: 0d:33:c6:39:e1:8d:38:bf:06:ea:83:cd:fd:17:2b:2d:98:70: 73:c7:1c:01:26:a9:03:38:f0:34:ab:b9:b7:48:22:46:fa:e2: 18:a2:66:7d:ce:2a:67:49:ec:04:74:47:33:3a:fd:79:bb:07: 1e:bb:4e:60:38:c5:bd:60:79:f5:18:4a:5a:37:66:a0:00:10: b9:be:8f:54:c7:8e:17:e7:1f:25:46:08:b6:73:6d:39:3b:22: 40:9c:0b:d5:7b:8f:1e:10:ad:c0:1c:1d:c2:c4:dd:08:7f:1b: 6f:47:85:85:ae:cc:c1:ac:ce:00:d9:5f:bc:62:0d:a5:53:de: 58:5c:e4:50:06:53:46:19:82:19:1c:a7:8b:4f:4d:df:ce:9d: a2:64:ee:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebUOizU1pC1o2DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzE2MTA0OWUtODQ4My00NjI0LWE2OTAtMWJkNTYwMjM4Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha0INSN7Inhoa9xJexAqLiYRD/eu/CTV5669 aQZRXBnN4+4ARhi2WpxRTA9llITGaT7lOEGdO1sL9LDs0YDl2OqGOEA9Man3LdYQ mpZ6w1u4inU/RZHQG5p96GZF+3yrdK2dhjhi2vztqDQ6UF1g4itxnjs7/V3O4E5t Nn2HEWMGPZ7aESQ2hD7HMVpMN3nQBqggDzwD9g1VLcLEswdKz6FYXvao6n87zyni bWwHy12qH/U71Mjix9wuXFf/K+nxJExg9lQ2LvLCBvNGQVak4asbGbIXO5jT+6eE D7eyu9kh892ng2SE2pCkZa5bEKw0UXBn4jtCWP1KbGjCgeHbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHbW9Q0ko0cYWgLCZ3y/nCF06vzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTIyNGNmYzMtYzRjOC0z YzhjLTk3YTMtNmNhMzJmNTNhZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7layhkxoN5z6YFP+udyb4mFiVvawrVH2PiZoHE1foEL8gj8uCregj7 beDxnSt/1NNtFxTnpcr2CMXp90tV92WwSoFEEeiVeB93vzJGfShiIUSGhWisYZKI W1m01Y6lpX/Jb/RY5S0BBNaelg0zxjnhjTi/BuqDzf0XKy2YcHPHHAEmqQM48DSr ubdIIkb64hiiZn3OKmdJ7AR0RzM6/Xm7Bx67TmA4xb1gefUYSlo3ZqAAELm+j1TH jhfnHyVGCLZzbTk7IkCcC9V7jx4QrcAcHcLE3Qh/G29HhYWuzMGszgDZX7xiDaVT 3lhc5FAGU0YZghkcp4tPTd/OnaJk7uc= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:57 2025 by rpki-client