$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3fde115-332a-3b9e-86a5-a74db39a674c.roa File: e3fde115-332a-3b9e-86a5-a74db39a674c.roa (raw, json) Hash identifier: XcSTbZlfQwnorYW7tUpl8tRJaglsdRJy1F9J4wD8i9o= Subject key identifier: AE:14:01:88:A5:47:EF:F2:85:44:DB:AA:3E:8F:B8:98:F8:31:F0:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BB44AAC423208D825B840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3fde115-332a-3b9e-86a5-a74db39a674c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 68.85.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:b4:4a:ac:42:32:08:d8:25:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=8b44e920-5067-42c8-b11d-c930b22cf2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:eb:1e:6f:0f:cf:46:25:57:e0:f5:e8:97: 4b:85:f7:cb:3d:3f:8c:34:5f:83:b2:82:c7:ba:a0: b3:c9:7d:03:8d:4c:85:0b:c4:59:fa:f2:27:c0:98: bd:05:5e:9b:94:d7:a4:38:31:0e:e3:b8:56:d7:4e: a1:2b:3c:cf:47:7c:cc:4d:75:47:e1:00:d9:68:3d: f1:14:4b:c2:4d:93:f4:52:ed:06:56:b9:71:75:e5: 6f:83:93:19:57:64:6d:14:75:d2:38:09:40:cf:88: 79:d6:15:96:18:d9:34:fe:3e:37:d8:5a:59:91:40: a0:6c:f2:db:e3:8d:43:a0:46:24:c7:f9:76:61:21: be:86:94:dd:e3:87:b6:13:e4:cb:10:1b:39:1d:e8: fb:24:42:f4:ee:ee:51:d7:a4:fa:cd:22:c0:4b:07: d3:66:f7:2c:b5:4d:a1:11:5d:69:97:c7:95:15:c7: df:3b:bc:b9:fb:f2:63:d8:4f:34:1c:a0:2e:fa:ec: 00:eb:56:9b:05:ba:b0:b1:4e:4e:eb:d0:ab:8d:34: a9:81:59:c2:ec:8e:15:a6:3e:d5:5f:43:81:1b:32: 53:c4:57:6f:34:a0:09:af:54:93:6c:c9:5b:41:74: 96:33:69:2e:8a:11:b1:25:3a:94:22:ce:8a:15:1d: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:14:01:88:A5:47:EF:F2:85:44:DB:AA:3E:8F:B8:98:F8:31:F0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3fde115-332a-3b9e-86a5-a74db39a674c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:62:65:30:57:2c:bf:3b:4c:10:18:7e:e6:d8:c1:f6:5d:9c: 7c:5e:97:d6:72:82:33:ae:44:a3:61:88:09:99:ec:95:1c:44: 8d:51:16:45:10:88:19:56:30:2f:c3:b8:b9:eb:f4:cb:93:2f: ea:c9:71:b0:90:c3:ec:6a:37:8d:ed:ff:88:02:3d:32:e3:6d: 51:b7:b4:86:bb:f5:6c:c2:25:ff:ad:9e:ce:65:ab:f3:5a:04: a6:19:99:c7:0f:44:6b:2f:7d:d5:7b:14:38:18:df:d3:80:2e: d5:d1:b8:3d:11:ec:a5:68:bf:5a:ec:2c:9f:f7:c7:c7:66:1b: 35:86:dd:0d:ac:c2:35:e6:1a:88:e9:f3:40:20:3a:7b:48:ee: c9:f9:8a:4e:bb:0a:3e:c4:28:04:b8:2d:2b:a8:10:65:e6:40: 2b:e3:8f:cf:d2:45:c5:39:71:da:c7:d4:4c:38:da:f6:6e:0e: dd:06:09:61:ba:b2:98:44:41:8e:64:c1:96:07:1d:3b:3d:16: b4:ba:9c:ab:15:a8:38:cf:53:22:8a:ce:39:9e:ff:9d:3b:91: 2f:ab:34:99:db:95:36:59:f1:51:af:34:8d:d7:8c:0a:89:d5: b1:ad:5f:76:9c:a7:1c:b6:04:84:9e:02:e4:2b:15:91:05:e5: ef:be:71:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea7RKrEIyCNgluEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OGI0NGU5MjAtNTA2Ny00MmM4LWIxMWQtYzkzMGIyMmNmMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicvrHm8Pz0YlV+D16JdLhffLPT+MNF+DsoLH uqCzyX0DjUyFC8RZ+vInwJi9BV6blNekODEO47hW106hKzzPR3zMTXVH4QDZaD3x FEvCTZP0Uu0GVrlxdeVvg5MZV2RtFHXSOAlAz4h51hWWGNk0/j432FpZkUCgbPLb 441DoEYkx/l2YSG+hpTd44e2E+TLEBs5Hej7JEL07u5R16T6zSLASwfTZvcstU2h EV1pl8eVFcffO7y5+/Jj2E80HKAu+uwA61abBbqwsU5O69CrjTSpgVnC7I4Vpj7V X0OBGzJTxFdvNKAJr1STbMlbQXSWM2kuihGxJTqUIs6KFR21awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4UAYilR+/yhUTbqj6PuJj4MfCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTNmZGUxMTUtMzMyYS0z YjllLTg2YTUtYTc0ZGIzOWE2NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9iZTBXLL87TBAYfubYwfZdnHxel9ZygjOuRKNhiAmZ7JUcRI1RFkUQ iBlWMC/DuLnr9MuTL+rJcbCQw+xqN43t/4gCPTLjbVG3tIa79WzCJf+tns5lq/Na BKYZmccPRGsvfdV7FDgY39OALtXRuD0R7KVov1rsLJ/3x8dmGzWG3Q2swjXmGojp 80AgOntI7sn5ik67Cj7EKAS4LSuoEGXmQCvjj8/SRcU5cdrH1Ew42vZuDt0GCWG6 sphEQY5kwZYHHTs9FrS6nKsVqDjPUyKKzjme/507kS+rNJnblTZZ8VGvNI3XjAqJ 1bGtX3acpxy2BISeAuQrFZEF5e++cVE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:04:22 2025 by rpki-client