$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17145ad8-3156-3ec1-81f6-9a8131968765.roa File: 17145ad8-3156-3ec1-81f6-9a8131968765.roa (raw, json) Hash identifier: sL4tq0aGwEdbN1QUAvIAIrbHz+/Sg7/AYw088dR2UGk= Subject key identifier: 10:AF:08:25:C2:2A:83:09:77:1E:5D:85:21:26:D0:DB:5B:F2:F4:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5C916C355CF08E74CD440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17145ad8-3156-3ec1-81f6-9a8131968765.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 68.59.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:c9:16:c3:55:cf:08:e7:4c:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=f22c07f7-4af2-4325-895c-a3cd5f10d8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:8d:fc:c8:52:fb:cb:45:40:20:c4:4e:37: 78:4c:12:ef:30:3a:b0:4c:0f:dc:23:60:ba:bd:8b: 64:a0:53:24:68:18:16:4e:74:b7:14:d2:61:43:a7: 5d:16:b7:6e:8c:9a:1e:3b:36:1b:6d:60:67:ba:91: 76:49:e2:a5:f2:5b:0e:f4:10:ad:83:99:10:30:a8: 41:98:5a:98:61:f3:e0:19:89:53:e1:0d:d0:79:51: 89:4b:bd:52:87:fe:ac:e1:67:07:51:fb:72:e7:2e: b8:0a:5a:9f:dd:82:dc:69:2b:f0:ad:41:82:96:04: c0:13:22:ad:35:83:45:b3:2d:91:74:a0:29:7b:56: 03:bf:e3:17:a6:54:63:e8:42:6c:ec:77:9d:22:9c: d2:e2:b6:fc:2f:4b:22:73:01:3a:25:e5:0e:aa:6c: e6:33:4d:28:a1:77:df:ce:12:ca:0f:5c:ed:09:7e: 2c:3a:a5:fa:f8:3b:35:18:10:4d:e6:c4:21:66:1e: b3:bf:0f:8c:47:6d:ae:58:17:20:6a:41:f6:1c:06: 8f:c3:5f:70:d9:cd:16:87:99:38:f7:1d:5f:a7:89: 86:d2:eb:11:e3:e7:5a:0b:6c:95:4d:36:c0:b6:be: 9f:12:df:55:61:ee:91:f1:81:0e:32:cf:28:c4:16: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:08:25:C2:2A:83:09:77:1E:5D:85:21:26:D0:DB:5B:F2:F4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17145ad8-3156-3ec1-81f6-9a8131968765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:b0:78:79:5b:27:d3:59:7e:fb:14:30:6f:44:0b:9e:b5:a2: a3:d0:35:48:78:98:8e:13:a3:44:e5:69:be:ef:50:a0:94:64: 16:b8:ae:d5:68:9b:eb:e1:db:a0:8c:13:47:f7:96:e3:09:eb: 93:db:8b:69:74:ea:46:e1:0e:15:e9:28:53:19:e4:bc:e4:88: 3b:42:5e:9a:b3:bd:19:e8:76:b0:7c:c1:32:28:0d:66:1c:6d: d0:13:2c:b5:f2:05:31:88:22:30:ab:f7:e7:7d:4d:b5:af:9f: e7:fc:63:c2:03:69:be:ea:c1:04:26:ef:9c:6f:61:b6:16:9f: fb:aa:18:c3:74:07:be:fb:62:89:bd:4d:78:4b:3a:2e:dd:75: 98:9f:23:51:cc:f8:ec:cd:56:3c:3b:7c:84:78:f4:ff:53:f1: fa:68:78:15:e2:70:c9:5f:ef:61:fe:e6:5e:21:a1:f3:0c:50: 8b:72:e9:c1:10:7c:d2:45:19:7c:21:7a:e6:04:26:80:9c:09: 92:35:34:1b:4b:2a:78:4e:33:c6:e9:39:0f:fd:d8:ca:56:7d: 7d:de:b1:98:ad:3a:57:47:81:56:0f:7e:bf:ee:85:04:af:29: a1:cb:fe:42:d9:6f:b4:d6:d9:0c:4e:8c:74:c7:9b:b8:3e:48: 44:77:28:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pckWw1XPCOdM1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjIyYzA3ZjctNGFmMi00MzI1LTg5NWMtYTNjZDVmMTBkOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp2N/MhS+8tFQCDETjd4TBLvMDqwTA/cI2C6 vYtkoFMkaBgWTnS3FNJhQ6ddFrdujJoeOzYbbWBnupF2SeKl8lsO9BCtg5kQMKhB mFqYYfPgGYlT4Q3QeVGJS71Sh/6s4WcHUfty5y64Clqf3YLcaSvwrUGClgTAEyKt NYNFsy2RdKApe1YDv+MXplRj6EJs7HedIpzS4rb8L0sicwE6JeUOqmzmM00ooXff zhLKD1ztCX4sOqX6+Ds1GBBN5sQhZh6zvw+MR22uWBcgakH2HAaPw19w2c0Wh5k4 9x1fp4mG0usR4+daC2yVTTbAtr6fEt9VYe6R8YEOMs8oxBaJ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCvCCXCKoMJdx5dhSEm0Ntb8vSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTcxNDVhZDgtMzE1Ni0z ZWMxLTgxZjYtOWE4MTMxOTY4NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2weHlbJ9NZfvsUMG9EC561oqPQNUh4mI4To0Tlab7vUKCUZBa4rtVo m+vh26CME0f3luMJ65Pbi2l06kbhDhXpKFMZ5LzkiDtCXpqzvRnodrB8wTIoDWYc bdATLLXyBTGIIjCr9+d9TbWvn+f8Y8IDab7qwQQm75xvYbYWn/uqGMN0B777Yom9 TXhLOi7ddZifI1HM+OzNVjw7fIR49P9T8fpoeBXicMlf72H+5l4hofMMUIty6cEQ fNJFGXwheuYEJoCcCZI1NBtLKnhOM8bpOQ/92MpWfX3esZitOldHgVYPfr/uhQSv KaHL/kLZb7TW2QxOjHTHm7g+SER3KDI= -----END CERTIFICATE-----Generated at Mon Apr 28 13:07:29 2025 by rpki-client