$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa File: 2422d923-49e5-33e4-9aed-5bf5006dde0a.roa (raw, json) Hash identifier: lGF3yz94I4QaeBx0THK2N+zmNl7twnS8W507GzOh8YE= Subject key identifier: C6:FE:1D:78:A6:7D:67:C3:70:24:4D:30:B6:09:DE:6E:C9:07:04:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F1FB6E0EBFFFF1FCD740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.60.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f1:fb:6e:0e:bf:ff:f1:fc:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=0493ee9f-925f-4cf9-8c44-de0e719d9505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:03:f2:37:b6:c2:b6:37:44:21:42:dc:a9: 47:76:61:23:a8:38:b8:ff:e6:be:95:27:ec:5d:6d: 72:99:2e:dc:cc:29:6b:ec:ec:45:06:6a:ce:d4:6c: 25:de:d7:cb:0b:75:0e:8b:c4:0b:7e:b0:d1:55:42: ac:af:ee:6b:0b:f2:f9:4e:5c:05:4d:f4:5a:e0:b6: f8:e4:ee:c8:9b:5f:f4:e8:2a:7d:0e:09:60:ff:2b: 61:44:cc:97:29:b4:8d:a3:de:2f:29:5e:18:89:24: 6e:6d:9b:3b:af:23:04:82:82:ed:93:76:b5:7d:5a: 48:10:49:a5:0e:a8:01:ef:3f:7c:12:05:22:79:d8: 6f:cb:4e:fc:ad:b0:5c:1c:16:77:33:ce:e9:98:1f: 78:59:1d:ae:02:25:42:a9:41:41:00:96:d8:4f:44: 64:57:da:b8:d8:06:f2:6f:d2:be:78:ff:15:08:3e: 7f:91:f9:6f:77:5d:8e:a6:55:28:0b:3a:33:40:d5: 05:c0:47:e4:5e:74:aa:fb:da:fb:1f:eb:aa:f8:a5: 0a:75:4a:b7:88:62:8e:8e:cd:43:5d:ed:c3:be:af: 1f:8d:05:71:9c:8c:39:e6:17:c9:64:f2:52:fa:fb: 94:bf:fd:cf:5c:b0:73:69:de:8a:34:0d:cb:ae:f6: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:1D:78:A6:7D:67:C3:70:24:4D:30:B6:09:DE:6E:C9:07:04:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c1:d2:0b:d0:24:b6:0c:e7:59:3d:07:12:0f:2f:41:4b:43: 3d:e9:83:06:ba:e4:80:c3:cf:c1:89:67:9a:31:6a:61:7a:e7: fa:72:7f:d5:33:a8:4d:bb:30:7a:0c:f2:40:fe:c0:71:7f:ec: 37:0c:3b:df:76:6d:d2:a7:d8:81:ed:63:37:de:2d:25:fb:13: 35:b1:95:9d:87:6e:b2:27:90:42:e2:8d:8a:bd:06:1d:ac:26: de:88:37:26:6f:bc:08:83:73:6e:1d:57:27:05:eb:ed:21:e4: 83:88:0d:4e:11:e7:57:ef:c1:0f:fb:e6:2b:4b:2b:da:93:75: 4a:32:79:92:84:ca:ce:1c:f5:24:f5:39:3b:31:41:3e:e6:d3: 12:bc:2d:2c:d0:1e:16:e7:6a:bd:7b:60:59:78:44:a7:3d:63: b2:a0:f2:dd:aa:c1:91:6e:a5:5e:86:b3:f8:1a:0e:bb:c8:43: 62:e7:2c:b0:6e:a0:a7:e4:70:39:66:75:8e:87:b2:86:67:e6: 12:ae:e9:81:a1:bb:18:c0:47:b7:f0:37:6b:a2:b2:af:de:90: 37:66:76:b1:58:4e:3d:31:99:06:41:af:b6:90:ea:66:7b:3b: bf:61:64:0b:b2:83:51:0f:9c:8c:63:e2:b5:02:f9:cb:5e:0f: de:be:24:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+PH7bg6///H810AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDQ5M2VlOWYtOTI1Zi00Y2Y5LThjNDQtZGUwZTcxOWQ5NTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXID8je2wrY3RCFC3KlHdmEjqDi4/+a+lSfs XW1ymS7czClr7OxFBmrO1Gwl3tfLC3UOi8QLfrDRVUKsr+5rC/L5TlwFTfRa4Lb4 5O7Im1/06Cp9Dglg/ythRMyXKbSNo94vKV4YiSRubZs7ryMEgoLtk3a1fVpIEEml DqgB7z98EgUiedhvy078rbBcHBZ3M87pmB94WR2uAiVCqUFBAJbYT0RkV9q42Aby b9K+eP8VCD5/kflvd12OplUoCzozQNUFwEfkXnSq+9r7H+uq+KUKdUq3iGKOjs1D Xe3Dvq8fjQVxnIw55hfJZPJS+vuUv/3PXLBzad6KNA3LrvagVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb+HXimfWfDcCRNMLYJ3m7JBwSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQyMmQ5MjMtNDllNS0z M2U0LTlhZWQtNWJmNTAwNmRkZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPB0gvQJLYM51k9BxIPL0FLQz3pgwa65IDDz8GJZ5oxamF65/pyf9Uz qE27MHoM8kD+wHF/7DcMO992bdKn2IHtYzfeLSX7EzWxlZ2HbrInkELijYq9Bh2s Jt6INyZvvAiDc24dVycF6+0h5IOIDU4R51fvwQ/75itLK9qTdUoyeZKEys4c9ST1 OTsxQT7m0xK8LSzQHhbnar17YFl4RKc9Y7Kg8t2qwZFupV6Gs/gaDrvIQ2LnLLBu oKfkcDlmdY6HsoZn5hKu6YGhuxjAR7fwN2uisq/ekDdmdrFYTj0xmQZBr7aQ6mZ7 O79hZAuyg1EPnIxj4rUC+cteD96+JKY= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:16 2025 by rpki-client