$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/effb1571-5756-3202-838d-79eb18c0b60e.roa File: effb1571-5756-3202-838d-79eb18c0b60e.roa (raw, json) Hash identifier: opzo4dnpjZtCSi7idMP+F1eMKVzokrWusL/Hv32gg90= Subject key identifier: 1C:05:71:63:DE:5D:D6:87:D1:B7:CF:DD:70:90:84:4A:AA:BE:28:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BF8AF7BFC9ECD560D4C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/effb1571-5756-3202-838d-79eb18c0b60e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 68.87.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:f8:af:7b:fc:9e:cd:56:0d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5ca875e4-1bcd-4cfb-b2c0-75c51b2762e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:93:c2:b5:27:58:96:f8:ae:df:32:26:25: 55:58:23:8f:45:98:25:1b:45:8f:8c:92:18:ba:b7: 36:6e:8d:86:d9:b1:10:73:f3:fe:b3:dc:0e:1f:48: ec:d0:13:bc:38:ab:aa:e5:fb:b1:2b:68:14:03:9a: 98:f0:48:0e:32:80:65:63:68:e1:81:ab:0f:3e:2c: 22:c6:7a:90:81:16:0c:95:11:f5:e9:c1:f4:f5:de: 37:76:2f:ef:2f:b7:6c:90:11:9f:37:31:36:e8:b0: 2b:8f:7b:96:51:fd:42:93:1b:51:c1:42:0d:08:a7: 7f:9e:5b:78:7f:83:10:18:db:cf:a0:a7:c3:4a:b1: 1f:44:17:02:40:2a:aa:a5:ba:e0:7b:7a:c3:12:cf: fc:a8:fb:78:d5:ab:03:57:7e:06:c7:1e:e9:94:2e: e7:86:84:0c:b2:d6:48:29:8e:c7:db:39:d2:0f:4f: 24:4d:8f:6f:17:c5:9b:33:80:f6:1c:08:1b:4b:ef: c2:a8:fa:d3:2a:a9:a7:5b:7a:7c:fe:74:d1:5e:5c: cb:44:d2:77:22:19:f3:40:35:c7:8c:69:98:9b:8c: 81:a5:83:29:d9:93:0a:31:56:12:15:fa:74:5f:7d: 13:b8:56:0f:66:e4:05:48:35:89:77:f1:20:83:e5: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:05:71:63:DE:5D:D6:87:D1:B7:CF:DD:70:90:84:4A:AA:BE:28:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/effb1571-5756-3202-838d-79eb18c0b60e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:28:bb:94:66:a2:82:b5:82:90:21:eb:53:2e:e1:e9:43:c0: 32:c4:28:15:fe:71:4e:a2:61:ba:a6:2e:50:d3:66:4b:f8:cd: 48:e8:68:7e:25:33:7a:e1:97:7f:dd:13:fe:d7:e3:96:12:b1: ec:76:f7:36:15:bf:7a:ab:96:3d:a0:7b:67:be:72:67:ed:78: 88:db:87:7e:69:d9:3d:d2:64:97:18:11:a8:f0:4c:8b:68:86: bb:9f:0b:a1:c8:4e:98:03:71:b7:37:6b:d3:98:b7:6a:20:a0: 3e:5f:c9:fc:d7:a8:3d:17:8f:44:91:f8:48:6c:2b:87:48:45: 27:41:2f:88:f0:be:0c:12:22:f3:69:00:2d:6d:80:b0:40:54: 22:49:a1:46:bd:a3:d2:47:9c:79:2f:bd:62:ad:2f:51:04:ea: 51:af:d3:5e:b9:33:82:3b:5c:e2:80:1b:af:3b:84:4d:01:02: 36:98:f8:b9:a8:fe:4c:ee:ee:1d:96:37:73:a2:75:a1:10:c9: 2b:d3:ea:08:4b:31:1e:d5:dd:1b:7a:31:1f:f6:5c:06:30:89: 7b:75:5c:30:b4:3a:5b:2e:f5:c1:c0:c1:2f:94:4c:bb:93:73: 1a:cd:14:66:cb:8f:fb:0a:c4:1e:0b:d1:d5:85:94:e7:b1:4e: 0d:aa:56:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea/ive/yezVYNTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWNhODc1ZTQtMWJjZC00Y2ZiLWIyYzAtNzVjNTFiMjc2MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxWTwrUnWJb4rt8yJiVVWCOPRZglG0WPjJIY urc2bo2G2bEQc/P+s9wOH0js0BO8OKuq5fuxK2gUA5qY8EgOMoBlY2jhgasPPiwi xnqQgRYMlRH16cH09d43di/vL7dskBGfNzE26LArj3uWUf1CkxtRwUINCKd/nlt4 f4MQGNvPoKfDSrEfRBcCQCqqpbrge3rDEs/8qPt41asDV34Gxx7plC7nhoQMstZI KY7H2znSD08kTY9vF8WbM4D2HAgbS+/CqPrTKqmnW3p8/nTRXlzLRNJ3IhnzQDXH jGmYm4yBpYMp2ZMKMVYSFfp0X30TuFYPZuQFSDWJd/Egg+Vv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwFcWPeXdaH0bfP3XCQhEqqvijHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZmYjE1NzEtNTc1Ni0z MjAyLTgzOGQtNzllYjE4YzBiNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgou5RmooK1gpAh61Mu4elDwDLEKBX+cU6iYbqmLlDTZkv4zUjoaH4l M3rhl3/dE/7X45YSsex29zYVv3qrlj2ge2e+cmfteIjbh35p2T3SZJcYEajwTIto hrufC6HITpgDcbc3a9OYt2ogoD5fyfzXqD0Xj0SR+EhsK4dIRSdBL4jwvgwSIvNp AC1tgLBAVCJJoUa9o9JHnHkvvWKtL1EE6lGv0165M4I7XOKAG687hE0BAjaY+Lmo /kzu7h2WN3OidaEQySvT6ghLMR7V3Rt6MR/2XAYwiXt1XDC0Olsu9cHAwS+UTLuT cxrNFGbLj/sKxB4L0dWFlOexTg2qVgI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:34:13 2025 by rpki-client