$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa File: f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa (raw, json) Hash identifier: tdFk49/rriInHKB3Ti5+RjpCiJa9mpekDLbwyEMiMzI= Subject key identifier: BA:94:86:B8:9F:B8:1C:BA:8F:9A:6B:B8:91:89:2E:92:C2:DB:2C:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7954BFAC35722F2B8AC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.51.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:95:4b:fa:c3:57:22:f2:b8:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1b21f3d1-acfe-4c63-aaad-6039ddfe2354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:b9:dc:e2:18:2b:af:24:69:f2:69:66:86: 69:41:10:42:a0:e8:62:77:8f:01:38:cc:a5:5c:1d: c8:25:74:64:6c:98:9b:4c:fe:68:84:ac:cc:32:f5: 90:56:c0:b6:36:52:11:b0:d2:48:31:ef:7d:4c:f4: c7:c9:24:72:df:7f:5d:b8:68:25:92:0c:ec:ee:94: d0:c1:01:02:8a:82:2b:c0:25:8b:55:c6:87:1e:77: c2:3f:f4:55:15:d4:5d:21:89:07:e5:e1:5f:23:ad: e9:2c:0d:41:88:85:e3:16:45:ef:ca:25:b3:ab:2a: e8:a9:34:5d:36:3d:2b:ff:f8:9e:b1:d0:50:8e:92: 0a:fb:3c:4d:71:aa:5c:26:cd:71:33:fc:91:f1:8b: 4e:67:e6:d3:b4:07:44:04:66:2b:b1:f2:75:aa:97: 64:95:3f:e2:b1:5b:4f:1b:a3:b7:38:29:f9:42:1f: 60:42:46:7f:7e:2b:e3:ac:15:10:ad:b9:cb:d1:1c: c2:fb:a8:4b:a1:28:93:31:f3:fb:72:ae:f6:45:c2: e2:f3:96:07:47:41:3a:b4:71:f1:37:d5:a2:c8:89: b5:28:7e:da:9d:3c:88:31:bf:17:52:05:d1:c5:4b: f5:5a:36:ea:cf:15:7c:5e:63:a1:0c:50:d0:0a:53: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:94:86:B8:9F:B8:1C:BA:8F:9A:6B:B8:91:89:2E:92:C2:DB:2C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8fe9ffc-c91f-3714-aa4f-5fd5fcf707f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:1e:72:47:1a:37:6d:a3:a6:f1:a3:69:23:14:74:b4:91:81: aa:41:25:9d:86:9b:6a:9d:fc:e3:a5:6d:9c:b4:4e:0c:3c:35: e9:55:22:98:30:f2:b2:fc:9c:7c:34:a2:29:87:74:32:0e:f4: 0b:e5:9c:93:1a:bf:d2:de:ca:09:a3:e0:09:01:4d:35:5e:e3: 7c:7f:00:6e:9f:21:43:f4:b7:b5:2f:23:0a:6d:cc:fa:3d:15: fc:94:5b:fe:d5:f0:ff:64:62:10:10:8e:f4:94:35:4a:4a:56: 08:fe:bd:6a:34:2a:66:40:a2:3c:5b:a5:a9:c2:4e:6f:0e:ba: 77:aa:1c:20:15:b4:e0:dd:58:1f:23:e3:b0:36:12:63:95:29: 90:ea:a4:bd:ce:a6:97:7d:94:c7:18:b2:b7:ad:83:52:74:b7: 07:18:b6:41:75:d0:fc:ac:6c:a6:0c:95:7a:02:07:c7:eb:34: 46:ed:5c:8d:7d:a4:0a:61:14:77:d9:00:e8:84:bc:33:3b:a0: 6e:14:fb:11:c9:8d:b1:5c:93:0c:40:4a:3c:5f:8e:f1:12:ba: a1:62:d9:c6:8a:a4:9b:cf:65:56:c1:f0:07:81:74:d5:ba:10: ff:1c:3e:03:76:39:7d:f8:a2:51:f3:d3:1d:75:42:2d:77:b5: 79:b3:92:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj095VL+sNXIvK4rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWIyMWYzZDEtYWNmZS00YzYzLWFhYWQtNjAzOWRkZmUyMzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIe53OIYK68kafJpZoZpQRBCoOhid48BOMyl XB3IJXRkbJibTP5ohKzMMvWQVsC2NlIRsNJIMe99TPTHySRy339duGglkgzs7pTQ wQECioIrwCWLVcaHHnfCP/RVFdRdIYkH5eFfI63pLA1BiIXjFkXvyiWzqyroqTRd Nj0r//iesdBQjpIK+zxNcapcJs1xM/yR8YtOZ+bTtAdEBGYrsfJ1qpdklT/isVtP G6O3OCn5Qh9gQkZ/fivjrBUQrbnL0RzC+6hLoSiTMfP7cq72RcLi85YHR0E6tHHx N9WiyIm1KH7anTyIMb8XUgXRxUv1WjbqzxV8XmOhDFDQClMMlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqUhrifuBy6j5pruJGJLpLC2yyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhmZTlmZmMtYzkxZi0z NzE0LWFhNGYtNWZkNWZjZjcwN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAeckcaN22jpvGjaSMUdLSRgapBJZ2Gm2qd/OOlbZy0Tgw8NelVIpgw 8rL8nHw0oimHdDIO9AvlnJMav9Leygmj4AkBTTVe43x/AG6fIUP0t7UvIwptzPo9 FfyUW/7V8P9kYhAQjvSUNUpKVgj+vWo0KmZAojxbpanCTm8OuneqHCAVtODdWB8j 47A2EmOVKZDqpL3Oppd9lMcYsretg1J0twcYtkF10PysbKYMlXoCB8frNEbtXI19 pAphFHfZAOiEvDM7oG4U+xHJjbFckwxASjxfjvESuqFi2caKpJvPZVbB8AeBdNW6 EP8cPgN2OX34olHz0x11Qi13tXmzkuM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:57:51 2025 by rpki-client