$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ce6b56-21a6-3cf2-885c-f38549c832d8.roa File: 24ce6b56-21a6-3cf2-885c-f38549c832d8.roa (raw, json) Hash identifier: auXS7sjfTIXp3APuzZ/90fGnlRtLC0WRqBYSNVMnVPc= Subject key identifier: 50:31:C5:D3:B2:F1:E7:CA:72:16:6C:A9:0F:F6:01:65:2C:45:00:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584992946C33A3AE00C0E633F248 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ce6b56-21a6-3cf2-885c-f38549c832d8.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 68.50.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:6c:33:a3:ae:00:c0:e6:33:f2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=261a429c-c297-41d2-90d9-753683dcf8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:c9:44:bb:bd:58:a9:ba:5d:4e:8c:ed:e7: 84:ce:4a:e2:33:eb:fa:6b:16:13:d3:0e:05:3d:23: c2:b1:52:e8:29:e5:b2:88:76:71:12:00:73:39:02: 0a:48:3c:53:18:22:fa:93:3f:9b:20:aa:be:ec:3d: 78:1c:d8:54:f8:a7:58:94:4a:e3:cc:49:84:f5:c5: e7:a1:4c:86:6c:95:15:11:fb:98:20:f9:ce:2f:0f: bd:2d:48:f3:45:16:ba:f5:ee:e8:c1:d0:f6:54:84: cf:a8:85:0a:1f:11:43:06:da:51:fc:58:73:b9:dc: e0:bd:25:93:30:f9:08:a8:56:d5:6c:4d:19:08:06: 14:56:d2:7d:92:18:e1:76:2e:0c:e5:cb:06:6a:3a: 8d:3a:d2:2d:36:48:95:4b:61:9a:2f:61:0b:22:02: ac:23:ff:ac:49:e8:df:0c:f4:49:f0:18:bc:6e:68: a0:54:a3:ca:1f:0a:c4:20:5d:7a:69:67:2f:74:00: 67:df:95:29:d0:22:2f:01:a8:58:72:fb:84:3d:77: 1d:c9:f0:61:4b:37:d7:fd:f9:fc:4c:f8:ce:1f:2d: 57:e0:b0:71:08:04:d9:d9:1d:aa:f8:10:42:37:66: 91:c3:36:cc:f8:8c:ce:2e:fe:af:5a:12:3d:77:1b: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:31:C5:D3:B2:F1:E7:CA:72:16:6C:A9:0F:F6:01:65:2C:45:00:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ce6b56-21a6-3cf2-885c-f38549c832d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.50.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:00:b6:fc:12:3b:94:71:6e:7a:d3:48:0e:4e:f8:3b:1b:c1: a6:ae:46:63:ed:74:46:3e:a9:88:86:b4:7a:e2:e4:da:f3:a4: 08:5c:81:ce:32:23:a4:fd:32:39:7f:1f:d0:7f:d4:90:3c:e8: b8:02:48:5c:f0:f8:24:d1:51:bc:23:84:f9:3d:c0:da:d8:0c: 5a:1f:10:04:5a:15:b2:a5:db:5e:ae:e2:4c:20:20:eb:a0:83: f9:6d:54:77:91:d4:9b:ac:7f:e6:ad:ca:a7:0a:eb:bc:40:db: 31:e2:9a:72:7e:5b:54:fc:93:1f:8c:b2:a9:79:b5:fc:62:4b: 7a:08:35:76:1d:55:24:5c:1c:43:fe:95:63:eb:02:46:e2:58: ed:de:d9:63:db:2d:d1:9f:b1:3f:d5:73:30:b7:a1:28:66:21: 48:be:25:c5:2b:13:78:72:75:f2:2d:a7:fe:27:87:49:52:50: af:ac:50:db:c7:ee:bb:12:30:ab:fc:13:87:51:53:92:7b:d6: e1:c2:64:79:b2:3c:a2:45:43:03:79:f8:1e:68:ce:91:36:4e: 87:9d:32:3b:c3:63:1f:a9:25:cc:fb:0e:49:18:70:f4:26:5d: b9:25:73:c8:21:38:1a:a1:0c:2c:43:42:81:9d:3e:33:e3:a1: 21:0c:f1:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlGwzo64AwOYz8kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MjYxYTQyOWMtYzI5Ny00MWQyLTkwZDktNzUzNjgzZGNmOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2XJRLu9WKm6XU6M7eeEzkriM+v6axYT0w4F PSPCsVLoKeWyiHZxEgBzOQIKSDxTGCL6kz+bIKq+7D14HNhU+KdYlErjzEmE9cXn oUyGbJUVEfuYIPnOLw+9LUjzRRa69e7owdD2VITPqIUKHxFDBtpR/FhzudzgvSWT MPkIqFbVbE0ZCAYUVtJ9khjhdi4M5csGajqNOtItNkiVS2GaL2ELIgKsI/+sSejf DPRJ8Bi8bmigVKPKHwrEIF16aWcvdABn35Up0CIvAahYcvuEPXcdyfBhSzfX/fn8 TPjOHy1X4LBxCATZ2R2q+BBCN2aRwzbM+IzOLv6vWhI9dxuVBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAxxdOy8efKchZsqQ/2AWUsRQB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRjZTZiNTYtMjFhNi0z Y2YyLTg4NWMtZjM4NTQ5YzgzMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIAtvwSO5RxbnrTSA5O+DsbwaauRmPtdEY+qYiGtHri5NrzpAhcgc4y I6T9Mjl/H9B/1JA86LgCSFzw+CTRUbwjhPk9wNrYDFofEARaFbKl216u4kwgIOug g/ltVHeR1Jusf+atyqcK67xA2zHimnJ+W1T8kx+Msql5tfxiS3oINXYdVSRcHEP+ lWPrAkbiWO3e2WPbLdGfsT/VczC3oShmIUi+JcUrE3hydfItp/4nh0lSUK+sUNvH 7rsSMKv8E4dRU5J71uHCZHmyPKJFQwN5+B5ozpE2ToedMjvDYx+pJcz7DkkYcPQm Xbklc8ghOBqhDCxDQoGdPjPjoSEM8VU= -----END CERTIFICATE-----Generated at Sun Apr 27 10:37:25 2025 by rpki-client