$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa File: 30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa (raw, json) Hash identifier: ychki5M8Ri1DOiTXWN1WXqFHM2FfOEdzuIpuHLcbXmw= Subject key identifier: 88:B0:3C:E9:8B:F0:57:E1:1A:FC:82:E3:32:97:FD:2B:08:68:42:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5C14925C8662819B7AF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 68.52.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:c1:49:25:c8:66:28:19:b7:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=a797ed25-2b82-4269-a9b3-2a9f90a4e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:30:ad:90:ca:0a:2f:ec:51:35:9f:00:8a:26: 2e:b2:72:cb:5e:a1:6a:81:71:b9:09:fc:17:09:03: c9:d0:f9:4b:4c:dc:ee:e9:5b:4b:d0:06:a5:c9:c6: 61:9a:b2:e5:eb:d0:66:15:b7:cc:34:8e:cb:ac:d9: e9:76:6b:6e:38:8c:30:b2:0c:95:d0:3f:a9:28:e1: 17:be:83:66:9d:b5:a3:50:29:fc:99:8d:f3:fb:50: 04:45:f1:27:69:8e:ef:00:e7:a2:5a:7f:f2:80:70: 0c:d6:76:7d:d1:d4:6d:ff:93:e5:9d:b4:4b:82:7c: 21:bf:24:61:3b:c6:9e:7a:5a:be:34:5c:57:cc:04: 87:bf:b7:ee:73:6c:fa:ab:11:6d:3e:15:33:2f:e2: af:fe:ba:be:b2:e3:84:cd:1d:4e:51:38:68:38:9c: 36:f0:8d:a2:5b:7f:e0:91:b2:65:6b:6c:bf:bc:44: 13:15:42:60:88:44:02:42:b3:ae:f5:40:f0:a0:52: 52:1d:43:f4:cb:91:ac:d4:d9:98:24:99:d4:f5:f3: 37:0e:b8:49:1b:ba:da:21:30:0c:29:43:a4:f2:41: 8b:d2:c9:1d:00:1f:9e:1f:13:8b:a3:87:f7:6d:91: 80:68:0d:a8:f1:8a:66:98:e8:78:fe:8c:ae:df:48: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B0:3C:E9:8B:F0:57:E1:1A:FC:82:E3:32:97:FD:2B:08:68:42:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f4:43:9d:aa:e7:e9:49:7f:b3:12:d1:e9:21:3a:75:26:a5: b6:fe:0d:58:ad:f2:f0:2e:6b:84:ed:5e:12:ed:42:2a:82:04: b9:2d:05:a7:06:58:60:25:0e:95:d9:29:03:bb:6e:1d:86:82: 93:68:c3:25:bb:31:f1:8b:9a:1f:09:be:6b:17:ca:4f:50:e9: 1a:d5:20:02:0a:b6:f5:98:d8:88:fd:c9:b6:01:60:9b:41:fc: 8b:60:b0:88:9d:7b:cf:77:76:5f:54:14:4b:99:ae:a4:a1:cd: a5:f1:0f:dc:19:ac:f5:83:f0:fd:8d:2f:ae:ce:e2:16:43:1d: dc:03:e6:f2:7f:37:0a:59:b2:eb:47:54:f2:b9:23:7d:fb:c8: 73:05:f1:86:d3:50:64:a4:20:46:c4:c4:42:65:b7:26:6a:81: e2:d6:d0:a3:d0:0f:cd:68:43:99:fd:0a:a7:c4:12:c2:d1:9d: 9f:45:d1:60:66:ff:31:11:69:c1:29:c2:e0:3d:b3:a5:82:b0: 65:4b:15:bd:12:bd:17:1e:2c:62:c3:e9:8f:5e:25:19:38:3b: 02:e7:c8:34:4a:9f:b5:c3:04:74:41:69:04:1e:81:82:fa:a5: 0a:cd:0b:53:2e:aa:61:eb:df:56:2c:ca:dd:69:b7:de:3b:b8: 00:bd:f4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pcFJJchmKBm3rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTc5N2VkMjUtMmI4Mi00MjY5LWE5YjMtMmE5ZjkwYTRlNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTCtkMoKL+xRNZ8AiiYusnLLXqFqgXG5CfwX CQPJ0PlLTNzu6VtL0AalycZhmrLl69BmFbfMNI7LrNnpdmtuOIwwsgyV0D+pKOEX voNmnbWjUCn8mY3z+1AERfEnaY7vAOeiWn/ygHAM1nZ90dRt/5PlnbRLgnwhvyRh O8aeelq+NFxXzASHv7fuc2z6qxFtPhUzL+Kv/rq+suOEzR1OUThoOJw28I2iW3/g kbJla2y/vEQTFUJgiEQCQrOu9UDwoFJSHUP0y5Gs1NmYJJnU9fM3DrhJG7raITAM KUOk8kGL0skdAB+eHxOLo4f3bZGAaA2o8YpmmOh4/oyu30iqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiwPOmL8FfhGvyC4zKX/SsIaEI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzBlMDUzNjktNjRiOS0z YWUwLThhOGYtZWUyMjhjODZmNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID0Q52q5+lJf7MS0ekhOnUmpbb+DVit8vAua4TtXhLtQiqCBLktBacG WGAlDpXZKQO7bh2GgpNowyW7MfGLmh8JvmsXyk9Q6RrVIAIKtvWY2Ij9ybYBYJtB /ItgsIide893dl9UFEuZrqShzaXxD9wZrPWD8P2NL67O4hZDHdwD5vJ/NwpZsutH VPK5I337yHMF8YbTUGSkIEbExEJltyZqgeLW0KPQD81oQ5n9CqfEEsLRnZ9F0WBm /zERacEpwuA9s6WCsGVLFb0SvRceLGLD6Y9eJRk4OwLnyDRKn7XDBHRBaQQegYL6 pQrNC1MuqmHr31Ysyt1pt947uAC99Is= -----END CERTIFICATE-----Generated at Sun Apr 27 10:25:53 2025 by rpki-client