$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f40c09ad-d1e9-364f-a755-0a4872030459.roa File: f40c09ad-d1e9-364f-a755-0a4872030459.roa (raw, json) Hash identifier: 2CXdGxxB1lULgoAT8CPGbVrFE0InbAqhCVFJgFBABxE= Subject key identifier: E8:D0:FB:A1:03:B5:5E:68:F1:C4:8F:D1:74:A0:9F:9F:A2:55:F9:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF436F60BF91FCC516D680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f40c09ad-d1e9-364f-a755-0a4872030459.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.39.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:43:6f:60:bf:91:fc:c5:16:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=0db72a19-8939-4419-8812-c65799b7f98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f9:34:91:38:53:f4:7e:1e:9b:1d:b7:61:e8: 06:1d:67:28:34:31:74:4f:85:17:af:b1:0c:52:c9: 8d:19:b7:d8:55:97:c5:23:94:6d:86:d2:5d:ee:08: 9b:9e:43:5c:18:a4:bd:f2:30:ca:d8:55:60:56:0a: cc:48:43:16:33:3c:71:05:e7:9b:07:05:ae:a3:33: 30:9b:2b:fc:ba:67:49:e3:d7:c5:cd:d5:b2:6d:ea: 50:7f:0d:1d:fd:48:2b:06:5d:27:9f:de:e9:7a:62: ed:95:a3:7b:9c:01:a3:53:94:09:2b:ad:f3:d2:67: 7c:00:54:69:66:37:3d:42:6c:fa:4a:95:50:06:97: 2b:4a:88:c8:d3:3f:67:1e:4f:94:91:e7:b4:09:5d: eb:70:5c:c9:f6:c0:f4:33:28:f7:df:22:0a:3f:b4: 60:ab:17:cd:de:9e:52:1a:a9:99:15:dd:e2:f3:78: 95:1f:4e:e8:bc:04:3d:bc:0b:30:73:04:3d:74:9c: 96:98:63:dc:86:d9:cc:f7:46:f7:10:e1:b6:36:b1: 82:1a:3b:bc:72:84:2b:25:8d:a8:32:e1:1a:92:0f: 14:c8:b8:3d:02:c6:09:2f:58:b9:f8:c0:22:94:be: 48:34:4a:3d:5c:f7:cc:09:e0:b7:04:ce:99:fb:2f: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D0:FB:A1:03:B5:5E:68:F1:C4:8F:D1:74:A0:9F:9F:A2:55:F9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f40c09ad-d1e9-364f-a755-0a4872030459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ec:2b:4f:7c:9f:b4:52:c5:90:f1:4f:d9:18:2c:a8:b8:2e: 11:c8:6a:9a:7f:11:84:bf:ff:89:59:73:92:b0:72:9e:a2:b1: 22:be:28:c0:4a:ed:47:60:cd:81:df:dc:f9:af:26:fa:13:8d: a4:8e:7a:35:63:b6:5d:65:91:30:f3:49:27:d6:d1:e4:7f:e6: 7f:51:b5:36:0d:c7:20:c5:0b:26:f2:de:1b:bb:3c:5b:15:4e: d1:8d:92:8b:f8:da:93:42:c2:0c:78:0d:38:25:71:af:7c:28: 39:6e:ad:08:bc:d8:fb:a2:c6:3d:07:d1:b6:35:c6:f2:52:92: 56:10:cf:36:c7:4f:52:aa:af:d1:bf:7a:56:e7:99:3e:0f:49: 35:61:c7:37:76:60:6b:f6:26:22:93:f5:b0:c1:19:37:35:f7: ba:9f:03:fb:70:bf:24:4b:1e:2b:60:f1:46:cf:8a:b6:d6:57: 65:44:51:90:2b:9c:bc:1d:9e:e2:95:39:fc:c2:8f:36:6b:22: ea:5c:12:f6:77:ec:71:4c:96:3a:33:1e:cb:4c:d4:9c:d3:22: e6:ba:7a:53:bd:2d:e0:ae:87:d5:86:7f:a9:68:da:21:cf:de: f2:e0:7f:ef:a9:66:34:e6:42:ab:77:02:38:19:80:89:84:55: 18:66:f8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr0NvYL+R/MUW1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MGRiNzJhMTktODkzOS00NDE5LTg4MTItYzY1Nzk5YjdmOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfk0kThT9H4emx23YegGHWcoNDF0T4UXr7EM UsmNGbfYVZfFI5RthtJd7gibnkNcGKS98jDK2FVgVgrMSEMWMzxxBeebBwWuozMw myv8umdJ49fFzdWybepQfw0d/UgrBl0nn97pemLtlaN7nAGjU5QJK63z0md8AFRp Zjc9Qmz6SpVQBpcrSojI0z9nHk+Ukee0CV3rcFzJ9sD0Myj33yIKP7RgqxfN3p5S GqmZFd3i83iVH07ovAQ9vAswcwQ9dJyWmGPchtnM90b3EOG2NrGCGju8coQrJY2o MuEakg8UyLg9AsYJL1i5+MAilL5INEo9XPfMCeC3BM6Z+y/BiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjQ+6EDtV5o8cSP0XSgn5+iVfk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQwYzA5YWQtZDFlOS0z NjRmLWE3NTUtMGE0ODcyMDMwNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDsK098n7RSxZDxT9kYLKi4LhHIapp/EYS//4lZc5Kwcp6isSK+KMBK 7UdgzYHf3PmvJvoTjaSOejVjtl1lkTDzSSfW0eR/5n9RtTYNxyDFCyby3hu7PFsV TtGNkov42pNCwgx4DTglca98KDlurQi82Puixj0H0bY1xvJSklYQzzbHT1Kqr9G/ elbnmT4PSTVhxzd2YGv2JiKT9bDBGTc197qfA/twvyRLHitg8UbPirbWV2VEUZAr nLwdnuKVOfzCjzZrIupcEvZ37HFMljozHstM1JzTIua6elO9LeCuh9WGf6lo2iHP 3vLgf++pZjTmQqt3AjgZgImEVRhm+NY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:24 2025 by rpki-client