$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0c407ea-52e9-3eed-a531-6a55414973ea.roa File: f0c407ea-52e9-3eed-a531-6a55414973ea.roa (raw, json) Hash identifier: 9CL/OpTTsaIs5PkLlRlkBiNwkjaWjf/Cu1nnr2xalSE= Subject key identifier: DB:D1:5C:E9:2F:F7:9E:D1:33:16:88:D0:E4:E8:A1:E6:C8:5F:84:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C4ACD933421876BA89AE4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0c407ea-52e9-3eed-a531-6a55414973ea.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 68.47.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:4a:cd:93:34:21:87:6b:a8:9a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1b93e456-b74d-46ba-a5b6-66ca727c4cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:2d:2b:c5:82:50:1f:fe:0f:84:ec:d5:3e: 52:ae:ef:11:aa:72:9f:53:41:ce:92:29:ab:92:b7: 33:a3:41:aa:d2:33:bf:b4:8d:66:cf:5e:6a:d7:1b: 7b:5e:03:6c:96:c6:33:90:02:5a:05:49:f0:73:08: 01:6e:8b:d2:bc:83:9a:a0:1b:b2:53:58:88:bf:e0: 7c:50:ca:1b:3e:aa:f7:90:9e:31:82:0d:44:59:83: 1f:02:0f:29:53:8e:3a:73:1d:2c:c4:a3:aa:53:c4: 4f:6c:33:58:b9:ae:27:25:63:e0:87:cc:00:7b:15: e7:ec:00:6b:42:24:1f:ee:52:2f:3a:bd:18:4b:eb: c1:8a:24:69:6c:c9:29:aa:a9:81:ea:2d:3e:e6:8b: 7a:05:62:7a:ee:dd:a9:e5:fb:06:61:72:25:1a:ee: 66:3a:94:1b:2e:2e:0a:b7:7c:57:77:89:c3:5b:1b: 3c:62:01:23:1f:3a:85:8e:25:81:73:bb:bc:b4:c3: 7b:3d:83:1f:b9:3b:1c:a5:3e:14:38:c6:da:4a:dd: c5:45:45:44:4d:bd:30:8f:de:86:7c:24:77:eb:b9: ce:c0:b1:8e:b2:54:a8:eb:87:df:ac:47:7e:e5:b0: f1:a2:57:c6:bc:78:e4:ab:19:52:91:53:c8:b5:55: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D1:5C:E9:2F:F7:9E:D1:33:16:88:D0:E4:E8:A1:E6:C8:5F:84:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0c407ea-52e9-3eed-a531-6a55414973ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7f:fa:7d:3c:a8:47:13:fc:67:75:75:db:9a:df:4b:61:93: 61:c8:9e:40:2d:e5:b1:1e:f4:49:56:b7:72:ac:fe:3a:f2:25: 52:b2:f0:4e:e8:0c:18:08:3b:34:6c:c4:a4:40:82:2d:81:48: fa:0f:8d:69:3c:3f:b2:99:e5:1c:c4:5d:cf:f6:86:da:2d:94: 13:5c:a9:23:07:4f:2c:3c:dd:a4:80:06:fb:4b:73:cf:1e:87: 4a:57:65:00:b3:34:cc:11:f5:fd:6c:87:60:d6:fd:5a:0b:0a: 46:85:35:a5:16:76:e1:2e:f3:32:c7:ca:e2:6b:a1:60:47:af: a7:27:51:b1:22:72:1d:2e:a4:f7:95:45:04:6b:98:c0:50:8c: 1f:ff:f5:f1:ba:85:03:5f:4a:58:11:ac:5b:f4:8d:b2:2f:72: 10:5d:47:64:e7:73:b7:05:1a:98:21:a2:0a:a9:06:88:9a:43: a9:c0:ce:f2:b7:e2:2c:88:1c:85:49:75:b4:ac:2f:cf:94:f5: 6b:98:20:82:da:4a:3b:62:19:c6:c2:ec:14:99:bd:8c:42:be: 18:22:14:00:8b:a7:00:e7:56:f2:e3:b0:41:56:d9:c3:29:7a: 6d:a3:ff:d8:cf:d0:59:d7:a7:3b:d7:cf:69:46:b3:51:d3:27: 9a:cf:f5:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebErNkzQhh2uomuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWI5M2U0NTYtYjc0ZC00NmJhLWE1YjYtNjZjYTcyN2M0Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiEtK8WCUB/+D4Ts1T5Sru8RqnKfU0HOkimr krczo0Gq0jO/tI1mz15q1xt7XgNslsYzkAJaBUnwcwgBbovSvIOaoBuyU1iIv+B8 UMobPqr3kJ4xgg1EWYMfAg8pU446cx0sxKOqU8RPbDNYua4nJWPgh8wAexXn7ABr QiQf7lIvOr0YS+vBiiRpbMkpqqmB6i0+5ot6BWJ67t2p5fsGYXIlGu5mOpQbLi4K t3xXd4nDWxs8YgEjHzqFjiWBc7u8tMN7PYMfuTscpT4UOMbaSt3FRUVETb0wj96G fCR367nOwLGOslSo64ffrEd+5bDxolfGvHjkqxlSkVPItVVBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvRXOkv957RMxaI0OTooebIX4RgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjBjNDA3ZWEtNTJlOS0z ZWVkLWE1MzEtNmE1NTQxNDk3M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx/+n08qEcT/Gd1ddua30thk2HInkAt5bEe9ElWt3Ks/jryJVKy8E7o DBgIOzRsxKRAgi2BSPoPjWk8P7KZ5RzEXc/2htotlBNcqSMHTyw83aSABvtLc88e h0pXZQCzNMwR9f1sh2DW/VoLCkaFNaUWduEu8zLHyuJroWBHr6cnUbEich0upPeV RQRrmMBQjB//9fG6hQNfSlgRrFv0jbIvchBdR2Tnc7cFGpghogqpBoiaQ6nAzvK3 4iyIHIVJdbSsL8+U9WuYIILaSjtiGcbC7BSZvYxCvhgiFACLpwDnVvLjsEFW2cMp em2j/9jP0FnXpzvXz2lGs1HTJ5rP9cw= -----END CERTIFICATE-----Generated at Mon Apr 7 09:36:13 2025 by rpki-client