$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14e4a433-91e9-3240-a1df-137638aac8b1.roa File: 14e4a433-91e9-3240-a1df-137638aac8b1.roa (raw, json) Hash identifier: zDKXXg/rSNle+5X5nWfbkxyQmdmr7L9V5MssHsW1ZbU= Subject key identifier: DA:04:47:04:4A:4E:A9:41:27:00:61:2B:59:3B:58:30:82:23:5F:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F78BF5E09682D87F64D980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14e4a433-91e9-3240-a1df-137638aac8b1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.41.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8b:f5:e0:96:82:d8:7f:64:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=c0b3a009-0bcd-4156-ab76-a9c836e22404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:32:a1:52:82:04:05:b0:fd:17:38:1a:9c:16: 0d:52:01:3e:91:ba:67:48:b5:19:9a:7e:d3:c7:01: c7:39:59:2c:51:d1:c8:d8:d8:ec:9b:02:1f:2d:50: 76:e5:ba:b2:ad:f0:a4:b4:17:60:da:b2:83:d6:12: 00:ea:d3:b6:e1:3b:16:76:25:df:9b:12:be:09:05: 3c:54:cb:51:dd:76:8c:fa:7e:fb:15:cb:18:78:f3: 94:8e:73:d4:ce:2e:0c:9a:5a:7c:25:25:4c:a4:3d: 1d:51:bb:d7:2c:43:16:c1:8a:15:eb:df:0d:de:dc: 60:fb:1f:eb:f5:16:93:a3:a8:0e:91:0a:e3:86:8a: 68:a7:f9:f7:67:c2:eb:a8:4d:6f:e3:52:bb:ce:d3: 3e:06:7d:1f:51:99:ed:d6:97:5e:1d:01:85:ed:14: a1:29:ac:aa:05:0f:ae:88:db:dc:45:f0:29:24:86: c7:67:32:4d:4c:3e:59:45:c1:e9:0f:82:c5:4f:61: 25:eb:6e:59:76:1a:f5:c4:74:42:ff:c3:b9:2d:75: 4f:c4:55:da:a4:b4:46:0a:62:70:e8:e6:9d:09:da: 51:e9:56:23:56:de:39:73:5e:31:7d:55:9e:7a:ef: 54:9f:ac:5d:7f:54:9a:95:89:ef:d8:35:93:92:46: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:47:04:4A:4E:A9:41:27:00:61:2B:59:3B:58:30:82:23:5F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14e4a433-91e9-3240-a1df-137638aac8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:d1:74:15:0a:65:66:31:49:f2:75:a9:23:b1:2c:d3:95: c4:0d:9f:22:5e:b0:f8:90:d9:69:c9:ca:b6:e2:58:1c:a8:e0: 19:ef:bb:2e:44:21:66:05:d3:59:6f:1f:13:9f:55:6c:f7:37: e4:8e:be:37:32:51:93:05:21:cc:09:8b:d7:c2:2d:df:cd:ab: d8:0a:52:e0:0c:61:53:38:7d:16:2d:eb:90:17:ef:2f:cc:84: b5:e5:98:54:15:ec:db:d5:3b:9a:3f:c9:5d:65:3f:59:8d:4f: 6f:9c:0e:29:67:58:96:b6:6f:41:6b:aa:85:6d:61:02:63:49: 5a:d5:d4:0d:58:46:81:73:1d:06:56:ed:48:53:1a:e3:01:b2: 8c:2f:4c:c1:29:d9:18:3c:f1:58:a5:94:a2:92:20:4e:b1:20: bd:14:db:ec:69:dc:21:f4:6a:24:77:c0:1d:ad:e9:57:bb:d3: af:7e:33:3d:4b:d7:be:ba:38:b5:3c:76:ec:30:87:76:cc:2c: bb:d2:ab:19:0e:0b:0c:cc:8b:db:d4:89:ce:05:cb:7e:74:08: b5:4e:f3:35:32:24:1f:dd:3d:00:20:c7:6a:94:18:fd:a7:cb: d1:e1:b1:3f:6b:da:a7:32:b0:e9:84:e9:72:36:b7:92:be:b7: ce:19:b0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094v14JaC2H9k2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YzBiM2EwMDktMGJjZC00MTU2LWFiNzYtYTljODM2ZTIyNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDKhUoIEBbD9FzganBYNUgE+kbpnSLUZmn7T xwHHOVksUdHI2NjsmwIfLVB25bqyrfCktBdg2rKD1hIA6tO24TsWdiXfmxK+CQU8 VMtR3XaM+n77FcsYePOUjnPUzi4Mmlp8JSVMpD0dUbvXLEMWwYoV698N3txg+x/r 9RaTo6gOkQrjhopop/n3Z8LrqE1v41K7ztM+Bn0fUZnt1pdeHQGF7RShKayqBQ+u iNvcRfApJIbHZzJNTD5ZRcHpD4LFT2El625Zdhr1xHRC/8O5LXVPxFXapLRGCmJw 6OadCdpR6VYjVt45c14xfVWeeu9Un6xdf1SalYnv2DWTkkb3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoERwRKTqlBJwBhK1k7WDCCI197MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRlNGE0MzMtOTFlOS0z MjQwLWExZGYtMTM3NjM4YWFjOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRClIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRC0XQVCmVmMUnydakjsSzTlcQNnyJesPiQ2WnJyrbiWByo4Bnvuy5E IWYF01lvHxOfVWz3N+SOvjcyUZMFIcwJi9fCLd/Nq9gKUuAMYVM4fRYt65AX7y/M hLXlmFQV7NvVO5o/yV1lP1mNT2+cDilnWJa2b0FrqoVtYQJjSVrV1A1YRoFzHQZW 7UhTGuMBsowvTMEp2Rg88VillKKSIE6xIL0U2+xp3CH0aiR3wB2t6Ve7069+Mz1L 1766OLU8duwwh3bMLLvSqxkOCwzMi9vUic4Fy350CLVO8zUyJB/dPQAgx2qUGP2n y9HhsT9r2qcysOmE6XI2t5K+t84ZsMQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:08 2025 by rpki-client