$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ea6bd1-62df-3240-8147-d390d52e5910.roa File: f0ea6bd1-62df-3240-8147-d390d52e5910.roa (raw, json) Hash identifier: Mo/Alj1c6C114DHsVGxpK9d1frc8AwM648W2HKoN4Q0= Subject key identifier: 12:DD:2A:E6:1E:11:53:14:D1:58:1D:AE:10:42:CA:E3:DA:EC:96:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B7B646C3510F30F9CEE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ea6bd1-62df-3240-8147-d390d52e5910.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 68.47.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:7b:64:6c:35:10:f3:0f:9c:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=eeaf1358-ef27-4e7a-b29f-1cb1f1c87a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:c7:92:ea:4a:a4:6a:c9:a2:e3:f1:16:c5: 2f:bb:9c:05:11:8d:71:6a:45:04:cd:a2:71:ee:c9: 1d:9c:8e:5c:71:62:a7:ed:22:07:10:dd:00:34:f7: 71:70:1b:c0:d6:c1:c0:41:14:03:06:f4:fe:71:4e: 5c:a4:80:96:36:99:6e:79:c6:14:9d:e4:4b:0b:e2: 38:c7:11:32:e0:31:c9:db:8b:05:66:3a:81:a1:5d: b9:4d:da:89:65:b9:1c:af:9b:61:6e:6f:ab:5c:51: f0:fe:43:08:2a:02:d0:27:54:d8:81:fa:05:0c:65: c5:a3:be:fc:bb:e4:e2:8c:87:e0:70:91:c9:56:aa: 2f:fa:cc:8c:07:bb:7a:23:a6:3f:2a:84:d6:1a:e0: 32:ce:85:3d:99:42:f6:94:b8:09:d6:28:4e:19:f4: c6:07:1c:20:d7:f3:f3:c9:34:7c:c2:0c:9d:ab:60: 09:78:06:91:eb:41:f4:a5:0c:69:e9:9e:a4:82:84: ac:cf:a4:d6:c3:56:9e:11:ae:9c:8c:9b:31:1a:30: 09:ce:a1:e7:89:4a:b8:55:5e:73:9d:0f:8c:05:60: 35:69:a1:cb:cf:ba:3e:5f:4c:7b:54:de:de:02:9a: 62:15:fa:0a:53:1b:4e:44:67:8d:20:62:ac:e9:59: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DD:2A:E6:1E:11:53:14:D1:58:1D:AE:10:42:CA:E3:DA:EC:96:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ea6bd1-62df-3240-8147-d390d52e5910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:45:30:43:b2:5a:19:6c:1a:e0:a2:30:01:19:59:13:0b:19: c9:d9:20:01:62:a5:e6:d2:82:22:b7:c8:66:4e:9b:9d:09:ad: 6f:99:81:42:2b:99:ce:e5:b8:73:07:f9:25:da:18:dc:fb:57: 46:94:bc:26:16:e2:4f:45:c1:60:1a:21:27:0f:1c:4d:85:d6: 37:25:ff:43:df:bd:e3:7d:95:81:eb:b6:26:95:f2:ca:3d:8d: 4c:83:92:21:74:eb:83:f7:cf:e7:ec:20:5d:7d:52:1d:70:0b: ef:49:26:3b:43:eb:94:90:dc:75:ba:1c:42:d4:ec:04:99:42: 82:b1:28:f5:ff:8b:31:6b:b8:e7:43:f1:7f:d8:2a:e4:35:76: 16:fd:9a:15:a6:9a:c1:07:70:c9:6a:01:2b:b5:1d:dc:58:b1: 1f:dd:40:0e:62:f2:f2:3d:0e:0d:6e:d3:90:71:c8:3c:bb:a3: 62:f4:d8:17:70:b9:1d:a8:39:03:7c:c7:2f:0f:b7:81:4b:4a: ab:01:e7:76:e8:0e:5a:65:6e:98:c6:44:a7:6a:fd:ce:87:d3: 79:54:55:ff:a9:72:15:27:2b:40:f8:69:8e:bd:8f:16:4a:62: 60:b0:53:9c:e1:46:ac:23:92:9c:68:4a:ba:45:bf:eb:33:7e: 86:4d:1f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea3tkbDUQ8w+c7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWVhZjEzNTgtZWYyNy00ZTdhLWIyOWYtMWNiMWYxYzg3YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy3HkupKpGrJouPxFsUvu5wFEY1xakUEzaJx 7skdnI5ccWKn7SIHEN0ANPdxcBvA1sHAQRQDBvT+cU5cpICWNpluecYUneRLC+I4 xxEy4DHJ24sFZjqBoV25TdqJZbkcr5thbm+rXFHw/kMIKgLQJ1TYgfoFDGXFo778 u+TijIfgcJHJVqov+syMB7t6I6Y/KoTWGuAyzoU9mUL2lLgJ1ihOGfTGBxwg1/Pz yTR8wgydq2AJeAaR60H0pQxp6Z6kgoSsz6TWw1aeEa6cjJsxGjAJzqHniUq4VV5z nQ+MBWA1aaHLz7o+X0x7VN7eAppiFfoKUxtORGeNIGKs6VlGUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLdKuYeEVMU0VgdrhBCyuPa7JYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjBlYTZiZDEtNjJkZi0z MjQwLTgxNDctZDM5MGQ1MmU1OTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtFMEOyWhlsGuCiMAEZWRMLGcnZIAFipebSgiK3yGZOm50JrW+ZgUIr mc7luHMH+SXaGNz7V0aUvCYW4k9FwWAaIScPHE2F1jcl/0PfveN9lYHrtiaV8so9 jUyDkiF064P3z+fsIF19Uh1wC+9JJjtD65SQ3HW6HELU7ASZQoKxKPX/izFruOdD 8X/YKuQ1dhb9mhWmmsEHcMlqASu1HdxYsR/dQA5i8vI9Dg1u05BxyDy7o2L02Bdw uR2oOQN8xy8Pt4FLSqsB53boDlplbpjGRKdq/c6H03lUVf+pchUnK0D4aY69jxZK YmCwU5zhRqwjkpxoSrpFv+szfoZNH1I= -----END CERTIFICATE-----Generated at Mon Apr 7 09:52:29 2025 by rpki-client