$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa File: c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa (raw, json) Hash identifier: 8iG07rIrYTjnxPod6iG8TfyNIFvzn/DX2/cy/78vD44= Subject key identifier: 52:F2:6F:A0:64:85:C3:B5:C7:81:5D:0D:D0:4A:F1:68:C1:96:53:36 Certificate issuer: /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7 Certificate serial: 010D0C9F432858489BA0A8DAD7BCBB516C5AF180 Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 6079 IP address blocks: 68.69.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:a8:da:d7:bc:bb:51:6c:5a:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=33053faf-3fb8-4583-880e-636b0f154a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:05:e9:42:3b:67:c9:6d:d0:73:06:63:33: 50:b0:4c:55:e0:71:e7:ed:f4:cd:a1:a5:26:90:11: 4d:bb:78:6f:9a:db:fa:80:49:05:5d:82:9f:94:0f: 65:da:2a:b8:ff:04:50:fd:6a:51:8a:71:c8:2c:d3: ea:64:0c:63:a0:2a:b3:a5:55:81:8e:66:47:7a:eb: af:9a:f8:d7:ee:b0:5d:ef:05:5f:f8:72:c1:91:dd: ed:f8:f2:53:1f:c1:19:a8:b7:56:6d:c3:7e:81:9a: 39:10:d3:55:79:d8:c1:ad:77:0a:47:13:d0:35:40: de:d6:bf:1a:78:28:09:36:7f:3b:97:24:e6:e6:bc: 23:b2:16:d8:0f:ab:99:f1:f9:1b:dd:9d:45:6f:2a: ce:8d:d8:d6:0b:a6:3c:36:bb:ac:ce:bd:b2:15:b8: 73:9b:76:73:6b:63:ba:7a:80:67:d2:10:bf:db:58: 45:b1:b0:32:4c:81:67:7c:86:d1:9b:2f:5c:70:87: c8:83:2f:55:16:2d:1a:da:2d:3b:b6:6b:13:05:2d: 66:eb:23:e5:59:46:2a:90:c5:4b:4a:e3:a7:55:8a: 01:02:cf:e1:4b:f4:d6:70:46:9c:04:96:d3:dd:9c: 2d:c0:e8:77:1c:f2:59:40:9c:c8:e6:dc:09:d2:38: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:6F:A0:64:85:C3:B5:C7:81:5D:0D:D0:4A:F1:68:C1:96:53:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl X509v3 Authority Key Identifier: keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer sbgp-ipAddrBlock: critical IPv4: 68.69.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:53:d6:25:33:d3:cc:6c:c5:e1:3b:dd:0c:d5:5a:cf:72:27: ea:d5:36:8e:43:d1:fa:8e:ff:cf:ed:52:0f:22:46:9f:93:75: 08:78:b9:9e:e4:c0:f6:02:78:f7:8d:b8:78:b9:00:8d:01:4f: b8:23:3d:0e:27:a1:2c:04:e6:89:66:14:c6:c4:79:03:93:8a: 97:f2:e2:55:f4:14:46:1f:bb:25:aa:a0:d7:fc:34:65:97:ec: c6:af:19:a4:ec:48:39:71:2c:ed:a5:08:cf:5a:88:ca:eb:22: 2f:2f:c4:87:7d:e8:91:1d:40:89:60:61:92:0d:09:a2:1b:1f: f6:2d:8f:70:f4:b8:42:54:2a:25:b4:05:fe:18:0b:48:24:5a: 13:17:bb:d1:43:38:9f:23:d0:d3:8a:69:c1:66:6c:92:05:30: 7c:aa:29:7e:58:ff:ba:89:86:cb:5a:c6:93:9a:29:31:ad:1f: 72:2f:74:70:ac:5a:2c:17:36:7d:ef:33:be:02:2a:c3:8d:13: 3c:1e:23:da:38:4e:d7:1a:bb:ef:0d:41:bb:0f:f1:1d:8d:28: 14:87:3f:f3:3f:1d:3c:a5:5b:2b:0f:b0:5a:ae:d4:08:b6:1c: db:82:b7:84:e1:bc:ae:04:03:f1:de:b3:c9:aa:e3:da:b4:e5: a3:55:6e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKja17y7UWxa8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk1YTZhYzItNzgxYS00NTk5LWJlNmMtMjhiNmJjMjg1 N2M3MB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk MzMwNTNmYWYtM2ZiOC00NTgzLTg4MGUtNjM2YjBmMTU0YTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xwF6UI7Z8lt0HMGYzNQsExV4HHn7fTNoaUm kBFNu3hvmtv6gEkFXYKflA9l2iq4/wRQ/WpRinHILNPqZAxjoCqzpVWBjmZHeuuv mvjX7rBd7wVf+HLBkd3t+PJTH8EZqLdWbcN+gZo5ENNVedjBrXcKRxPQNUDe1r8a eCgJNn87lyTm5rwjshbYD6uZ8fkb3Z1FbyrOjdjWC6Y8Nruszr2yFbhzm3Zza2O6 eoBn0hC/21hFsbAyTIFnfIbRmy9ccIfIgy9VFi0a2i07tmsTBS1m6yPlWUYqkMVL SuOnVYoBAs/hS/TWcEacBJbT3ZwtwOh3HPJZQJzI5twJ0jiGbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLyb6BkhcO1x4FdDdBK8WjBllM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wOTVh NmFjMi03ODFhLTQ1OTktYmU2Yy0yOGI2YmMyODU3YzcvYzBjZmEyMmYtMzhiZC0z ZGYwLWFjNmUtZjRjNWJhYTJhNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDk1YTZhYzItNzgxYS00NTk5LWJl NmMtMjhiNmJjMjg1N2M3LzA5NWE2YWMyLTc4MWEtNDU5OS1iZTZjLTI4YjZiYzI4 NTdjNy5jcmwwHwYDVR0jBBgwFoAUc/bEO6SXRroAJs2YBsfQINFl8UUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wOTVhNmFjMi03ODFhLTQ1OTktYmU2Yy0yOGI2 YmMyODU3YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJT1iUz08xsxeE73QzVWs9yJ+rVNo5D0fqO/8/tUg8iRp+TdQh4uZ7k wPYCePeNuHi5AI0BT7gjPQ4noSwE5olmFMbEeQOTipfy4lX0FEYfuyWqoNf8NGWX 7MavGaTsSDlxLO2lCM9aiMrrIi8vxId96JEdQIlgYZINCaIbH/Ytj3D0uEJUKiW0 Bf4YC0gkWhMXu9FDOJ8j0NOKacFmbJIFMHyqKX5Y/7qJhstaxpOaKTGtH3IvdHCs WiwXNn3vM74CKsONEzweI9o4Ttcau+8NQbsP8R2NKBSHP/M/HTylWysPsFqu1Ai2 HNuCt4ThvK4EA/Hes8mq49q05aNVbpw= -----END CERTIFICATE-----Generated at Fri Apr 4 16:01:38 2025 by rpki-client