$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1efa58e-f678-3727-9d68-fc4c6ed9e0af.roa File: f1efa58e-f678-3727-9d68-fc4c6ed9e0af.roa (raw, json) Hash identifier: kXtKyq+JDNLIJCtAzz+DvRdTsEIRqbzQHIbaJoq7Ynw= Subject key identifier: D8:F4:40:96:FF:09:DB:9E:B9:72:DA:54:21:32:B1:BC:89:41:8B:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0DCD4E5930070C32CB480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1efa58e-f678-3727-9d68-fc4c6ed9e0af.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.58.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:dc:d4:e5:93:00:70:c3:2c:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5b9ad6ea-7afe-439b-9158-cfb9ab8e9ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:69:8a:77:89:1d:33:7a:ef:ed:f4:b4:40:7b: ed:45:ad:52:5e:ad:94:5a:5d:72:60:b1:d4:b7:b7: c9:4a:42:f9:a1:2d:f9:68:ee:15:14:f9:7d:86:57: c6:87:59:39:57:bf:90:5a:0d:4f:b8:b7:8e:e5:d3: 9e:26:ce:b3:54:b1:fa:02:f9:2e:f8:c1:b5:1c:3a: 16:a3:b9:a7:3e:22:0b:fb:1a:9d:62:ac:09:7f:0f: 0f:a3:df:89:41:60:26:82:6a:6a:48:51:70:78:60: 0f:66:5f:fc:a7:eb:c2:f8:03:e1:1c:50:5b:61:41: f4:1c:bb:53:4c:de:41:16:21:78:32:a9:c8:74:04: 1f:2d:1a:34:9d:35:dd:b3:0a:bb:4c:6b:31:b9:ea: 21:8b:52:6d:93:21:33:08:a0:76:b5:26:b0:6c:e4: 94:5d:bb:de:db:28:07:e7:aa:59:9d:72:ef:55:f1: a5:23:d5:46:d6:78:3f:29:17:7c:8b:56:75:fe:db: 38:bb:4c:71:ec:6f:99:d1:4b:ab:7a:80:d8:f2:ca: cf:61:8d:52:c4:38:79:ca:0a:31:da:2f:7d:58:67: 9a:82:aa:2b:02:b4:3a:3a:f4:a3:ed:ce:6d:58:a5: 63:91:72:9a:5d:a8:ef:54:36:7f:4f:a4:66:f8:48: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F4:40:96:FF:09:DB:9E:B9:72:DA:54:21:32:B1:BC:89:41:8B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1efa58e-f678-3727-9d68-fc4c6ed9e0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:e2:20:31:14:88:9c:e3:f8:47:14:e4:36:dc:82:eb:d8:b0: c2:ff:2a:bd:2d:60:39:2b:da:4d:26:32:12:f9:9f:22:dd:21: d9:36:e9:df:b4:ec:01:9f:5a:5a:fe:eb:f8:8d:2e:1b:66:0d: 6a:0b:5a:cf:cc:a1:29:a8:3c:f1:ec:84:d2:09:3f:e9:e0:c6: b1:09:7c:c1:48:9a:9c:9f:21:52:e6:0e:2c:a4:66:be:cb:f6: 44:99:a5:24:ba:a7:61:af:2d:bb:83:27:8e:96:9c:1d:ae:19: bf:64:e3:3d:70:d5:c9:df:47:ab:36:28:45:8d:62:fb:5c:b1: 57:64:30:94:b0:22:e0:86:a3:b2:64:64:25:32:d6:77:3d:20: 46:a7:c1:16:f3:3c:79:a4:38:2e:93:15:71:dc:0c:2e:cb:06: 3f:88:5b:7f:e4:2b:5b:88:00:84:91:24:dc:e2:ae:97:81:32: 26:b6:8a:0d:c3:31:5f:a7:74:97:8d:d7:b0:e2:9f:62:ba:a3: c1:64:26:06:24:f4:56:90:b7:c1:da:87:24:37:4d:17:bf:3f: dc:19:75:d9:e5:45:af:f8:60:72:73:76:27:13:a5:9b:13:56: cb:27:8e:3e:0f:22:75:fa:56:5d:51:e3:ed:dd:5d:9e:84:eb: fd:06:87:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssNzU5ZMAcMMstIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NWI5YWQ2ZWEtN2FmZS00MzliLTkxNTgtY2ZiOWFiOGU5ZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGmKd4kdM3rv7fS0QHvtRa1SXq2UWl1yYLHU t7fJSkL5oS35aO4VFPl9hlfGh1k5V7+QWg1PuLeO5dOeJs6zVLH6Avku+MG1HDoW o7mnPiIL+xqdYqwJfw8Po9+JQWAmgmpqSFFweGAPZl/8p+vC+APhHFBbYUH0HLtT TN5BFiF4MqnIdAQfLRo0nTXdswq7TGsxueohi1JtkyEzCKB2tSawbOSUXbve2ygH 56pZnXLvVfGlI9VG1ng/KRd8i1Z1/ts4u0xx7G+Z0UureoDY8srPYY1SxDh5ygox 2i99WGeagqorArQ6OvSj7c5tWKVjkXKaXajvVDZ/T6Rm+EgwJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj0QJb/CdueuXLaVCEysbyJQYtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjFlZmE1OGUtZjY3OC0z NzI3LTlkNjgtZmM0YzZlZDllMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7iIDEUiJzj+EcU5DbcguvYsML/Kr0tYDkr2k0mMhL5nyLdIdk26d+0 7AGfWlr+6/iNLhtmDWoLWs/MoSmoPPHshNIJP+ngxrEJfMFImpyfIVLmDiykZr7L 9kSZpSS6p2GvLbuDJ46WnB2uGb9k4z1w1cnfR6s2KEWNYvtcsVdkMJSwIuCGo7Jk ZCUy1nc9IEanwRbzPHmkOC6TFXHcDC7LBj+IW3/kK1uIAISRJNzirpeBMia2ig3D MV+ndJeN17Din2K6o8FkJgYk9FaQt8HahyQ3TRe/P9wZddnlRa/4YHJzdicTpZsT Vssnjj4PInX6Vl1R4+3dXZ6E6/0Ghz0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:33:28 2025 by rpki-client