$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5a57c4d-5a63-3385-a850-effabf7399f3.roa File: e5a57c4d-5a63-3385-a850-effabf7399f3.roa (raw, json) Hash identifier: CQXd626nJZseV9j+e0kvOydA01R+JNb/e3fy8oi1s2Y= Subject key identifier: E4:E0:E0:62:CE:BC:85:4F:FA:C4:5F:E7:2D:8E:DD:57:75:D8:35:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CDE40A66825E47A110580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5a57c4d-5a63-3385-a850-effabf7399f3.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.52.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:de:40:a6:68:25:e4:7a:11:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=6a49ac0e-ae36-4bdb-a955-25d7e2876442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:b1:52:ea:ba:52:f8:03:e7:ac:e9:1b:60: 88:3d:7a:01:47:cf:b7:87:8b:91:94:36:4c:0d:34: 25:0d:44:d7:b6:75:53:cd:f1:fa:d7:ba:f0:d9:56: b9:c2:ba:13:66:f3:9a:e0:b8:83:02:b3:04:a6:e1: 86:be:cf:79:72:9b:2e:1e:5b:e1:fe:b1:4f:1c:1b: bb:39:bf:72:ce:e5:a9:b4:6d:93:f7:82:53:e8:d2: 42:c3:6b:6d:7e:f0:7e:36:07:16:19:4d:7b:26:a0: 1f:fe:39:bb:69:ca:d2:b1:a0:f1:6e:40:8d:81:53: 78:39:b3:2b:01:61:5a:a4:cb:3f:91:26:44:78:1e: 28:f1:f3:6a:26:b3:0a:9e:a0:c0:8e:d3:da:58:12: 61:9e:94:7b:8e:2e:ac:c8:a5:82:3c:2a:23:57:fe: 23:94:fd:32:2f:42:f6:a3:be:9f:d8:9b:07:46:fa: 02:67:61:48:76:d1:80:28:52:85:5a:bf:dc:69:6e: 04:ca:77:13:84:4c:d1:aa:f5:23:93:0b:94:35:3b: 3e:eb:35:12:d8:ff:bb:4a:e2:c7:c4:b6:34:56:98: a5:c3:db:f3:0d:7d:f6:87:fe:69:21:25:11:cb:cb: 3c:6a:72:74:74:c3:3d:82:a2:1a:d4:6a:08:9b:3f: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E0:E0:62:CE:BC:85:4F:FA:C4:5F:E7:2D:8E:DD:57:75:D8:35:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5a57c4d-5a63-3385-a850-effabf7399f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:64:67:16:cd:95:11:4d:85:28:1a:b2:74:16:99:e5:e6:5f: 91:97:3e:b8:b4:05:f1:0c:71:83:46:d5:46:a6:e6:f0:07:1b: 1e:a0:ab:ac:ed:a9:f6:fb:40:91:2b:24:8f:b4:e8:41:59:e3: 62:06:13:ca:47:61:7f:e3:55:b9:d4:71:c1:55:3b:b2:9d:8c: 71:1d:c9:c8:4a:ed:4f:f2:d2:c9:18:ec:d0:89:aa:74:63:92: 4b:f6:83:07:bf:bb:70:21:c5:bd:77:50:07:76:1a:4f:1c:3b: de:75:ab:08:58:fb:74:89:e8:a2:c0:69:46:9d:b0:23:4d:82: 24:6c:1d:29:7e:be:72:0a:9b:5d:e4:6b:95:46:d9:22:27:3e: 3d:8b:46:70:bc:bd:d1:d7:7b:c7:96:4f:5c:63:60:ad:b3:25: ae:a1:7b:fe:fa:6e:d9:cd:ab:4d:2c:23:7b:dc:07:ae:96:a1: 4e:7b:7b:d4:c3:70:96:f9:ee:7d:eb:e9:28:f1:e2:d3:19:65: a6:b8:5e:e2:2a:0a:87:8f:45:e8:f0:08:55:82:dc:24:fa:e0: 05:c9:9b:48:57:07:43:f8:92:1f:e7:5a:6e:30:df:c1:2d:49: ae:26:d8:8a:e8:d2:40:50:d5:51:ca:5e:ea:8a:3e:cb:c7:08: d6:92:4c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebN5Apmgl5HoRBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NmE0OWFjMGUtYWUzNi00YmRiLWE5NTUtMjVkN2UyODc2NDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+uxUuq6UvgD56zpG2CIPXoBR8+3h4uRlDZM DTQlDUTXtnVTzfH617rw2Va5wroTZvOa4LiDArMEpuGGvs95cpsuHlvh/rFPHBu7 Ob9yzuWptG2T94JT6NJCw2ttfvB+NgcWGU17JqAf/jm7acrSsaDxbkCNgVN4ObMr AWFapMs/kSZEeB4o8fNqJrMKnqDAjtPaWBJhnpR7ji6syKWCPCojV/4jlP0yL0L2 o76f2JsHRvoCZ2FIdtGAKFKFWr/caW4EyncThEzRqvUjkwuUNTs+6zUS2P+7SuLH xLY0Vpilw9vzDX32h/5pISURy8s8anJ0dMM9gqIa1GoImz+WgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTg4GLOvIVP+sRf5y2O3Vd12DXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTVhNTdjNGQtNWE2My0z Mzg1LWE4NTAtZWZmYWJmNzM5OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFkZxbNlRFNhSgasnQWmeXmX5GXPri0BfEMcYNG1Uam5vAHGx6gq6zt qfb7QJErJI+06EFZ42IGE8pHYX/jVbnUccFVO7KdjHEdychK7U/y0skY7NCJqnRj kkv2gwe/u3Ahxb13UAd2Gk8cO951qwhY+3SJ6KLAaUadsCNNgiRsHSl+vnIKm13k a5VG2SInPj2LRnC8vdHXe8eWT1xjYK2zJa6he/76btnNq00sI3vcB66WoU57e9TD cJb57n3r6Sjx4tMZZaa4XuIqCoePRejwCFWC3CT64AXJm0hXB0P4kh/nWm4w38Et Sa4m2Iro0kBQ1VHKXuqKPsvHCNaSTGc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:11:30 2025 by rpki-client