$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa File: 4de974c0-a88b-3292-9f16-0430edcbd00d.roa (raw, json) Hash identifier: c/3TBcI5hl1UQzyXB+OWi7lzkQWNywl31shsPtGAg4w= Subject key identifier: 22:15:4F:62:64:C3:40:81:B1:13:76:7B:20:D7:1A:AC:D9:8D:8D:32 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F432858492CAE8A01C7EA7DBA6D790400 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 68.71.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8a:01:c7:ea:7d:ba:6d:79:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=20ed9df3-6f4d-4d8a-9f80-a4456a8511df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:2a:f7:ae:de:5a:c4:8b:f3:2a:3c:28:d0: 58:4c:cf:bc:58:c0:c9:a3:4e:8b:bf:fd:f7:f2:1a: c4:67:a5:43:0f:3d:0d:cd:5b:85:74:b7:a5:05:fc: 54:89:69:34:c2:3a:2b:71:f5:84:69:3e:11:be:6c: e8:13:ab:00:17:f0:8f:1a:e5:d5:5a:6e:e3:94:c0: f3:3b:54:be:79:c8:49:71:de:91:97:46:ee:99:aa: 65:d6:72:2b:01:d9:f7:ed:19:57:a4:cf:4e:6e:a1: b7:9e:25:01:e2:1f:fc:ac:03:e2:13:13:25:5a:ab: 81:19:b4:f7:ad:01:65:5c:5c:f0:67:48:e4:ae:ee: af:1a:2b:d9:0c:5a:a1:1c:c5:80:cc:e9:21:89:42: 80:64:2b:5f:9c:3a:8e:fa:9f:cf:bf:45:82:ea:c2: 29:10:a3:11:9d:63:ff:18:6c:d8:29:d4:04:26:58: 90:20:1d:0e:ba:57:c2:ea:b8:79:7c:21:40:0c:68: eb:bd:82:dc:15:ae:6c:e6:c9:03:74:e9:0a:eb:ad: 15:5d:30:01:52:91:59:96:fb:4e:be:28:64:f0:1f: 6e:7f:e5:f8:9e:27:30:e8:4e:60:5d:41:4c:2c:68: 41:2a:02:e3:8b:40:18:cf:a7:89:88:4e:c6:80:dc: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:4F:62:64:C3:40:81:B1:13:76:7B:20:D7:1A:AC:D9:8D:8D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c9:18:89:f9:48:d4:00:94:97:e1:20:aa:f0:6b:6a:d7:62: f3:c9:88:0a:3c:18:2b:0e:1d:6a:49:2d:a6:a2:b2:a1:c1:7b: 05:8d:4c:63:08:07:4b:88:66:64:8a:c5:fa:3c:16:90:31:c1: db:10:f3:b9:6e:91:ee:14:b9:21:31:89:21:08:ee:b8:0b:d5: 4c:29:28:18:6c:e9:a6:84:2d:e7:77:36:cc:e5:34:f7:e5:3b: a3:dd:9a:60:2f:38:78:b1:c2:44:c2:03:35:26:e8:a8:30:2e: 06:4f:07:49:af:78:17:57:da:ac:8b:1b:b1:79:83:45:19:b2: 21:85:9a:a0:8a:9a:83:b2:e7:95:ac:d1:31:10:06:36:7a:fc: bf:8b:a0:7e:37:b6:00:ff:17:b7:8a:65:ee:d3:f6:94:f2:fe: b8:32:84:5d:f0:57:f9:ec:91:41:ba:9b:e2:38:ce:bd:ba:4b: 1d:d8:a9:16:ce:fa:85:92:5f:d1:eb:93:14:b3:03:27:66:87: 02:0b:d2:8d:de:44:86:fb:1d:56:0c:8f:0e:c5:95:53:7c:fa: aa:a2:b5:4b:f8:9c:10:a0:05:59:80:9d:b5:9b:ca:66:6d:05: 9d:e5:d8:95:17:ae:f2:c0:37:32:78:a3:54:c0:1d:a6:c4:d1: a0:0b:9f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrooBx+p9um15BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjBlZDlkZjMtNmY0ZC00ZDhhLTlmODAtYTQ0NTZhODUxMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVcq967eWsSL8yo8KNBYTM+8WMDJo06Lv/33 8hrEZ6VDDz0NzVuFdLelBfxUiWk0wjorcfWEaT4RvmzoE6sAF/CPGuXVWm7jlMDz O1S+echJcd6Rl0bumapl1nIrAdn37RlXpM9ObqG3niUB4h/8rAPiExMlWquBGbT3 rQFlXFzwZ0jkru6vGivZDFqhHMWAzOkhiUKAZCtfnDqO+p/Pv0WC6sIpEKMRnWP/ GGzYKdQEJliQIB0OulfC6rh5fCFADGjrvYLcFa5s5skDdOkK660VXTABUpFZlvtO vihk8B9uf+X4nicw6E5gXUFMLGhBKgLji0AYz6eJiE7GgNxKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIVT2Jkw0CBsRN2eyDXGqzZjY0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNGRlOTc0YzAtYTg4Yi0z MjkyLTlmMTYtMDQzMGVkY2JkMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHJGIn5SNQAlJfhIKrwa2rXYvPJiAo8GCsOHWpJLaaisqHBewWNTGMI B0uIZmSKxfo8FpAxwdsQ87luke4UuSExiSEI7rgL1UwpKBhs6aaELed3NszlNPfl O6PdmmAvOHixwkTCAzUm6KgwLgZPB0mveBdX2qyLG7F5g0UZsiGFmqCKmoOy55Ws 0TEQBjZ6/L+LoH43tgD/F7eKZe7T9pTy/rgyhF3wV/nskUG6m+I4zr26Sx3YqRbO +oWSX9HrkxSzAydmhwIL0o3eRIb7HVYMjw7FlVN8+qqitUv4nBCgBVmAnbWbymZt BZ3l2JUXrvLANzJ4o1TAHabE0aALn20= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:07 2025 by rpki-client