$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0588f3df-df4f-3339-95bb-75af60a20e4b.roa File: 0588f3df-df4f-3339-95bb-75af60a20e4b.roa (raw, json) Hash identifier: SIVxXokyWi8nB+87Kncd30/QrLBa1SXUBNNO7VgojOc= Subject key identifier: 8E:6F:AB:C2:4E:9B:29:5E:8F:7C:60:4D:08:1D:F4:6B:38:95:0E:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8E07476E669134C023E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0588f3df-df4f-3339-95bb-75af60a20e4b.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.40.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:e0:74:76:e6:69:13:4c:02:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=498d9c32-51b9-485f-966d-ab71d4323fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a8:e1:06:18:45:4b:ee:09:c8:14:41:ce:e1: c3:b6:bf:94:06:ab:40:30:35:b8:ef:ba:20:cf:72: cc:e5:58:38:a4:bf:71:5b:64:80:a3:8e:3a:49:ff: bb:3a:01:db:ac:0e:cc:83:f2:f9:d6:11:e7:a0:b0: b2:2c:c9:13:c6:d0:5a:4c:4e:65:fd:fe:c6:18:eb: 43:25:ba:e8:17:b6:06:61:b9:7e:c5:38:cb:76:08: 6d:97:ba:4a:7e:8b:14:29:e1:e4:15:36:1e:25:98: c3:a2:51:ae:0c:37:3b:1b:77:89:b1:f5:1b:4d:ba: f4:57:41:17:1c:5a:d3:e3:49:1c:29:9b:ca:1f:3b: 9e:72:c7:42:72:ca:b0:b1:10:fe:0b:8b:aa:cc:d5: 67:ae:20:ff:c3:8d:4b:25:c4:fc:f7:48:35:44:67: 24:94:50:aa:25:85:9b:3e:58:42:2f:28:6f:6b:9e: 82:83:5d:5e:af:b2:9b:1d:d4:c8:00:d8:bd:75:99: 30:d3:52:90:20:08:8c:59:36:c4:5d:83:41:10:f9: 9a:82:6c:be:33:b2:f8:3d:2e:c5:e8:cb:80:30:34: 01:83:5d:43:85:54:10:1e:d2:38:9c:96:b7:19:1d: 11:19:bd:5f:96:18:04:d7:89:ad:bb:0f:2c:87:c7: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6F:AB:C2:4E:9B:29:5E:8F:7C:60:4D:08:1D:F4:6B:38:95:0E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0588f3df-df4f-3339-95bb-75af60a20e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:6a:f8:62:a8:c3:06:4e:b6:97:b8:c6:28:53:35:a8:2e:a9: dc:85:4b:c3:4c:70:78:be:fb:f6:ea:b2:07:ce:ba:79:a0:66: 61:85:b3:e8:28:c6:97:b4:9e:b2:ad:aa:12:1e:bd:f6:86:5a: 59:b7:4b:bd:e8:90:8c:24:4b:8d:a1:e7:83:cf:58:c6:13:d1: 92:05:95:1b:f6:6f:e2:15:13:1b:d5:00:89:6f:57:f0:a1:cd: e5:c8:dc:66:ee:04:f4:0a:68:42:3e:71:d0:f9:63:1f:61:8d: 52:61:c7:8e:a0:f7:57:c6:22:7f:4a:ce:1b:9f:ba:e2:fb:f5: d3:57:32:4d:5b:2e:8b:7a:a4:a3:d3:5c:ef:4b:d4:29:01:85: 26:5b:2e:91:ed:46:b0:00:2e:68:4f:de:19:76:20:06:9d:14: 92:46:30:8b:4d:7e:20:83:da:e8:83:70:ee:9a:8e:79:d1:72: 67:84:ed:69:bc:f1:82:d3:28:1b:17:88:5d:bd:eb:08:52:66: 58:8c:2c:6a:e8:f9:be:38:c2:fe:da:02:f3:60:09:da:7b:a2: 6c:d5:6b:70:04:3a:21:bc:a2:df:07:74:76:9c:f2:60:e8:e9: e1:85:b8:40:fb:36:c0:3a:47:62:be:63:17:a7:d5:7d:d1:f2: eb:fc:3f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+OB0duZpE0wCPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NDk4ZDljMzItNTFiOS00ODVmLTk2NmQtYWI3MWQ0MzIzZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqjhBhhFS+4JyBRBzuHDtr+UBqtAMDW477og z3LM5Vg4pL9xW2SAo446Sf+7OgHbrA7Mg/L51hHnoLCyLMkTxtBaTE5l/f7GGOtD JbroF7YGYbl+xTjLdghtl7pKfosUKeHkFTYeJZjDolGuDDc7G3eJsfUbTbr0V0EX HFrT40kcKZvKHzuecsdCcsqwsRD+C4uqzNVnriD/w41LJcT890g1RGcklFCqJYWb PlhCLyhva56Cg11er7KbHdTIANi9dZkw01KQIAiMWTbEXYNBEPmagmy+M7L4PS7F 6MuAMDQBg11DhVQQHtI4nJa3GR0RGb1flhgE14mtuw8sh8fO0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5vq8JOmylej3xgTQgd9Gs4lQ4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU4OGYzZGYtZGY0Zi0z MzM5LTk1YmItNzVhZjYwYTIwZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJq+GKowwZOtpe4xihTNaguqdyFS8NMcHi++/bqsgfOunmgZmGFs+go xpe0nrKtqhIevfaGWlm3S73okIwkS42h54PPWMYT0ZIFlRv2b+IVExvVAIlvV/Ch zeXI3GbuBPQKaEI+cdD5Yx9hjVJhx46g91fGIn9KzhufuuL79dNXMk1bLot6pKPT XO9L1CkBhSZbLpHtRrAALmhP3hl2IAadFJJGMItNfiCD2uiDcO6ajnnRcmeE7Wm8 8YLTKBsXiF296whSZliMLGro+b44wv7aAvNgCdp7omzVa3AEOiG8ot8HdHac8mDo 6eGFuED7NsA6R2K+Yxen1X3R8uv8P90= -----END CERTIFICATE-----Generated at Tue Apr 29 00:15:05 2025 by rpki-client