$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14de989e-986c-3a90-9614-66417d91abbd.roa File: 14de989e-986c-3a90-9614-66417d91abbd.roa (raw, json) Hash identifier: rGuS1jX7SZXa2p7eI5FrF+gNBhDkxKls+1qgGQdGCcQ= Subject key identifier: 33:8D:81:8C:25:83:EA:3B:BB:C1:5B:B0:BF:7E:6F:51:5E:07:58:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5CB1117A2C8457C6ECD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14de989e-986c-3a90-9614-66417d91abbd.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 68.60.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:cb:11:17:a2:c8:45:7c:6e:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=7ad4f70d-8f09-449a-8a61-220b16d175d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:3d:bb:67:58:de:b0:d9:ab:e9:de:40:7e: 10:98:15:3e:be:07:8d:a9:4a:66:9d:a9:bc:07:09: e9:67:7f:b1:8e:52:44:fd:53:b6:23:66:5f:3e:e5: 98:8d:ce:3f:9c:d5:60:11:c6:ab:a1:58:c3:ab:17: ee:ac:ab:f5:e6:30:ee:d2:b6:58:40:01:24:c1:b9: dd:5f:55:1b:6a:fa:52:31:40:d8:b7:88:01:37:33: 60:6b:96:81:8b:bd:5c:06:a1:ec:7c:1e:24:89:8e: df:71:3d:8a:91:ce:c3:43:bc:6b:ef:0f:8e:71:06: f6:33:41:84:f6:ab:2b:d2:ff:f5:c0:17:05:aa:9d: 77:0d:2c:62:bf:79:ba:d1:b6:d6:b8:28:38:b4:f3: 54:2d:e0:75:2a:da:fb:6f:89:f7:d1:87:05:c8:a0: 89:ab:a1:0b:41:a4:21:d6:18:d8:a1:89:ea:62:85: 73:82:4d:e8:b6:9d:e6:9b:0f:4b:a3:5e:f7:6a:35: b3:a6:55:8e:c0:cd:da:09:27:25:a5:9c:7f:3c:f6: 1f:84:7a:a7:92:bb:90:db:bb:ff:e1:69:15:bd:0d: 02:87:94:ec:00:6a:95:cc:51:3e:b4:1d:f1:48:39: c8:ca:59:d6:aa:d2:52:81:38:46:cb:3b:6d:0e:0c: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:81:8C:25:83:EA:3B:BB:C1:5B:B0:BF:7E:6F:51:5E:07:58:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14de989e-986c-3a90-9614-66417d91abbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4e:f1:1c:aa:9f:5e:ae:6d:1b:b5:77:1a:cc:a5:71:cf:fb: b8:1a:30:2a:98:27:74:ed:5d:8a:70:cd:91:b1:a5:16:38:de: 2e:dd:11:b8:9a:72:c2:55:0a:37:e4:54:68:3e:f4:3c:5a:7b: 3a:72:cc:ed:fa:84:18:be:0c:2d:15:2e:f2:86:de:74:d0:f4: c2:ec:f1:6c:c2:4f:12:9f:15:82:ba:45:71:65:5c:b8:33:27: c7:0a:6f:09:77:7d:ca:a4:91:75:90:8a:0a:ba:e9:6f:7f:79: d0:d7:55:73:76:90:28:70:98:69:bd:f2:5b:cc:97:27:87:b7: 81:e4:40:54:da:ed:24:be:56:09:ea:40:a3:3a:bf:36:cc:a0: c2:f2:9d:d0:32:7e:df:38:df:50:67:fa:b5:4c:a6:f1:e7:32: 8b:98:38:9c:a8:d8:78:da:e2:54:94:5c:4d:6c:66:ba:81:4f: 23:d7:a2:fc:79:5c:aa:46:a5:32:86:e8:b5:c6:e5:75:ca:40: 0e:f9:d4:a9:87:4b:c1:3e:c9:3c:ca:e9:b9:f3:41:b6:35:8f: 7e:eb:a8:06:59:f6:dd:05:89:7c:9d:67:2f:b7:25:3a:36:cd: 36:f3:bc:82:62:f6:9f:66:14:56:1c:e5:11:66:d3:53:56:e4: 1d:b9:7f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pcsRF6LIRXxuzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2FkNGY3MGQtOGYwOS00NDlhLThhNjEtMjIwYjE2ZDE3NWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqE9u2dY3rDZq+neQH4QmBU+vgeNqUpmnam8 BwnpZ3+xjlJE/VO2I2ZfPuWYjc4/nNVgEcaroVjDqxfurKv15jDu0rZYQAEkwbnd X1UbavpSMUDYt4gBNzNga5aBi71cBqHsfB4kiY7fcT2Kkc7DQ7xr7w+OcQb2M0GE 9qsr0v/1wBcFqp13DSxiv3m60bbWuCg4tPNULeB1Ktr7b4n30YcFyKCJq6ELQaQh 1hjYoYnqYoVzgk3otp3mmw9Lo173ajWzplWOwM3aCSclpZx/PPYfhHqnkruQ27v/ 4WkVvQ0Ch5TsAGqVzFE+tB3xSDnIylnWqtJSgThGyzttDgzHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDONgYwlg+o7u8FbsL9+b1FeB1hcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRkZTk4OWUtOTg2Yy0z YTkwLTk2MTQtNjY0MTdkOTFhYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDwXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdO8Ryqn16ubRu1dxrMpXHP+7gaMCqYJ3TtXYpwzZGxpRY43i7dEbia csJVCjfkVGg+9DxaezpyzO36hBi+DC0VLvKG3nTQ9MLs8WzCTxKfFYK6RXFlXLgz J8cKbwl3fcqkkXWQigq66W9/edDXVXN2kChwmGm98lvMlyeHt4HkQFTa7SS+Vgnq QKM6vzbMoMLyndAyft8431Bn+rVMpvHnMouYOJyo2Hja4lSUXE1sZrqBTyPXovx5 XKpGpTKG6LXG5XXKQA751KmHS8E+yTzK6bnzQbY1j37rqAZZ9t0FiXydZy+3JTo2 zTbzvIJi9p9mFFYc5RFm01NW5B25f5I= -----END CERTIFICATE-----Generated at Sun Apr 27 10:37:28 2025 by rpki-client