$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa File: ebce2800-71e6-302f-a9a7-77ba35072652.roa (raw, json) Hash identifier: GkGq+O9dbCZCs8YsdNb6fEPtKo97xagCTI5ukcfyOy0= Subject key identifier: A2:18:BE:CF:04:3D:94:FD:5E:10:2F:9F:38:03:35:86:78:DE:61:2C Certificate issuer: /CN=94550438-10ef-444f-b785-f7bc6eba08e7 Certificate serial: 010D0C9F432858497279AC34BC3A2E75801ABD00 Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 15267 IP address blocks: 68.69.224.0/19 maxlen: 19 68.69.224.0/20 maxlen: 20 68.69.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:ac:34:bc:3a:2e:75:80:1a:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=d56359c1-ed8b-44bf-b897-1898e9c6c5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:47:f9:42:96:20:4d:af:ea:e9:e0:59:37: a3:a3:14:e4:db:27:78:2d:87:ff:54:23:c2:53:c5: 77:ad:fd:b8:97:ca:23:eb:e5:8b:98:60:05:12:2c: 5b:af:a4:55:d6:9d:10:d2:64:b6:33:dc:b6:9e:df: 1e:1f:b6:f0:74:1e:49:64:50:9c:32:6a:6c:e4:43: 15:7d:d8:ed:48:3b:5a:68:d1:99:ca:66:20:71:8f: 03:9a:18:be:e1:aa:a2:be:28:7f:69:bb:90:a9:11: 97:e5:9b:f4:2e:63:3f:40:e4:84:56:49:a8:18:44: 20:d9:b3:2f:bf:a5:36:2a:e4:b9:01:99:f0:96:b1: ff:c3:b5:90:ad:a2:f2:42:f9:20:f8:c5:22:6f:3b: ae:2b:ab:9f:47:e9:f7:57:21:af:26:2e:05:49:94: ad:c6:90:63:89:c6:1f:6f:05:f0:01:31:0c:70:e0: 4a:6a:38:47:74:15:1a:a8:69:4f:e0:d7:9d:38:fe: 0c:25:b8:d0:51:8a:20:30:46:e7:2d:50:da:9d:2b: 96:7b:76:c1:fb:40:31:a0:98:74:14:7e:e6:ae:53: d0:c8:fc:46:a2:f8:14:bc:a9:d8:4b:7d:86:60:d1: 1c:c5:13:47:b9:f3:0a:46:b2:c2:bc:7d:7a:f4:87: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:18:BE:CF:04:3D:94:FD:5E:10:2F:9F:38:03:35:86:78:DE:61:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl X509v3 Authority Key Identifier: keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer sbgp-ipAddrBlock: critical IPv4: 68.69.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8f:21:a8:45:d3:87:e2:1a:a1:0d:75:78:3a:8f:f0:e3:f8: 15:ba:30:56:04:b4:3f:79:21:6c:33:a9:6a:6c:7e:f9:2f:1d: 15:2f:58:8a:d6:cb:2d:92:d8:46:2a:b6:02:f9:b9:9b:cc:4d: f1:2b:59:46:15:bd:6f:78:92:b0:43:21:cb:fb:c5:ce:1e:e0: aa:a9:17:cf:29:d6:8f:a3:aa:dc:dc:3f:c4:bd:ef:9d:7d:6f: 01:94:07:ad:5a:6c:ff:13:02:1b:5c:06:23:d3:4c:27:df:71: 08:32:0f:1a:df:2c:72:e7:22:b9:6d:99:97:82:de:66:da:84: 5a:8f:e3:d0:f4:86:9d:b0:64:30:cd:73:f9:e3:90:23:9a:97: 4f:b5:f2:86:29:f7:93:93:d4:bc:29:35:d9:b3:6e:39:89:0d: d9:9a:2e:a0:41:74:a7:24:d8:a4:59:f6:ba:14:b9:9e:2c:2a: 13:54:e4:2b:57:9b:7c:c6:b8:00:08:68:68:be:d4:eb:95:f2: 9c:f8:23:6f:a4:22:a8:9c:97:dd:93:d5:76:f5:1a:ce:f4:87: 92:da:fa:a6:75:ea:7c:f8:76:7e:d3:13:78:36:8d:15:81:49: 42:42:00:bc:ae:a8:fb:fc:5f:b8:5b:cb:6d:f8:bf:69:38:b4: 87:61:84:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeaw0vDoudYAavQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw OGU3MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk ZDU2MzU5YzEtZWQ4Yi00NGJmLWI4OTctMTg5OGU5YzZjNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbNH+UKWIE2v6ungWTejoxTk2yd4LYf/VCPC U8V3rf24l8oj6+WLmGAFEixbr6RV1p0Q0mS2M9y2nt8eH7bwdB5JZFCcMmps5EMV fdjtSDtaaNGZymYgcY8Dmhi+4aqivih/abuQqRGX5Zv0LmM/QOSEVkmoGEQg2bMv v6U2KuS5AZnwlrH/w7WQraLyQvkg+MUibzuuK6ufR+n3VyGvJi4FSZStxpBjicYf bwXwATEMcOBKajhHdBUaqGlP4NedOP4MJbjQUYogMEbnLVDanSuWe3bB+0AxoJh0 FH7mrlPQyPxGovgUvKnYS32GYNEcxRNHufMKRrLCvH169Ic7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIYvs8EPZT9XhAvnzgDNYZ43mEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1 MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvZWJjZTI4MDAtNzFlNi0z MDJmLWE5YTctNzdiYTM1MDcyNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3 ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj NmViYTA4ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFREXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWPIahF04fiGqENdXg6j/Dj+BW6MFYEtD95IWwzqWpsfvkvHRUvWIrW yy2S2EYqtgL5uZvMTfErWUYVvW94krBDIcv7xc4e4KqpF88p1o+jqtzcP8S97519 bwGUB61abP8TAhtcBiPTTCffcQgyDxrfLHLnIrltmZeC3mbahFqP49D0hp2wZDDN c/njkCOal0+18oYp95OT1LwpNdmzbjmJDdmaLqBBdKck2KRZ9roUuZ4sKhNU5CtX m3zGuAAIaGi+1OuV8pz4I2+kIqicl92T1Xb1Gs70h5La+qZ16nz4dn7TE3g2jRWB SUJCALyuqPv8X7hby234v2k4tIdhhP8= -----END CERTIFICATE-----Generated at Wed Apr 30 17:51:33 2025 by rpki-client