$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35ba631f-ac34-3cac-a3de-c20de25d5399.roa File: 35ba631f-ac34-3cac-a3de-c20de25d5399.roa (raw, json) Hash identifier: utLiIqANyPmHzoXsoslEnsnteXpfw/ZcFUEqgHnQKhg= Subject key identifier: DD:E7:76:33:26:4C:F8:85:BC:21:7A:A4:74:42:8E:86:17:D2:A5:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5303BC02CC63212A70D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35ba631f-ac34-3cac-a3de-c20de25d5399.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 68.47.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:30:3b:c0:2c:c6:32:12:a7:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=7e4bcbd1-1f5a-4f54-9e20-e3d4d3bfb0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:7a:7f:3c:c6:87:80:6d:75:b8:c7:09:97: ab:1e:e3:76:24:0c:78:24:58:fb:9a:4e:f0:1b:f4: 84:18:74:9c:9a:d2:1f:e4:f6:72:81:56:af:92:a7: f9:f7:1d:8e:13:e6:47:b5:26:37:af:86:e5:1b:e0: ea:73:f8:60:e1:1c:3b:ee:f6:57:d5:f3:71:21:fc: 7e:89:f4:10:2f:c8:27:44:9e:11:d3:25:0b:9c:49: 00:fe:7d:cb:3f:11:c3:99:fd:99:df:bf:29:6b:f9: 5c:da:e2:0f:3b:4a:8d:4c:4b:53:ac:ef:8e:31:c9: 23:7b:9e:c6:94:03:2d:3c:5b:1e:9e:df:0d:c7:c4: 1c:ea:85:f3:22:0a:65:03:d7:ba:c5:b8:58:7d:6f: b3:56:10:fa:59:b7:b3:6e:a8:2a:ed:af:39:05:27: 95:09:83:da:a8:39:a6:c5:bb:18:71:f7:f4:cd:55: 86:e5:02:75:a3:ae:df:9b:e3:0f:3f:3a:e1:95:a8: a4:76:a8:4a:97:bd:06:dc:6a:be:53:05:c5:6e:2b: 6c:16:af:87:50:b4:cf:54:c9:85:23:f1:49:12:2e: 77:d9:9a:4a:42:b8:df:37:e9:12:95:9c:42:ef:81: de:41:82:6f:24:6d:d6:84:16:b5:74:ca:a6:b3:b9: f1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E7:76:33:26:4C:F8:85:BC:21:7A:A4:74:42:8E:86:17:D2:A5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35ba631f-ac34-3cac-a3de-c20de25d5399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d0:d8:c8:05:35:16:61:07:95:97:77:bf:30:18:4c:a9:12: 0a:0b:6c:ca:33:63:d0:2d:c3:c8:f1:8d:be:6e:85:07:f3:9e: 2b:57:5f:06:e7:10:96:78:ad:a3:20:1b:6c:c8:e2:1f:2d:d6: 73:a9:3c:47:2e:ba:f1:6c:c8:5d:72:b0:54:8f:4c:0b:ef:ef: 5c:09:d9:a4:18:b4:36:6f:e8:48:40:90:b2:83:e8:8b:45:40: 5e:34:cd:ef:92:2f:0e:23:3c:67:9f:e5:ce:55:05:5c:38:58: b9:1d:d5:f7:c1:3b:3a:fc:13:29:3d:9d:48:f7:08:87:c3:4a: fd:aa:da:68:5a:10:ff:45:f7:c8:eb:18:b0:d3:aa:f9:8e:12: 4b:2b:73:ac:c1:08:1b:32:32:40:0d:1f:86:b0:1e:c1:7b:b3: 2f:70:8b:a3:2c:5a:be:29:bc:ea:43:95:06:0e:9b:c9:fd:61: ef:2b:4f:2e:13:4a:5b:67:fa:f6:2b:12:8e:1f:6c:79:06:41: 21:30:b1:42:0a:2d:7d:58:4b:77:66:f6:47:a8:d8:fd:0f:2a: ae:0d:67:dd:f8:e6:65:1b:74:07:32:53:78:30:b6:b1:78:ce: 5d:0f:96:58:02:49:46:5d:06:42:a9:6c:ac:e0:ba:b8:04:c7: 1f:c6:df:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pTA7wCzGMhKnDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2U0YmNiZDEtMWY1YS00ZjU0LTllMjAtZTNkNGQzYmZiMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbd6fzzGh4BtdbjHCZerHuN2JAx4JFj7mk7w G/SEGHScmtIf5PZygVavkqf59x2OE+ZHtSY3r4blG+Dqc/hg4Rw77vZX1fNxIfx+ ifQQL8gnRJ4R0yULnEkA/n3LPxHDmf2Z378pa/lc2uIPO0qNTEtTrO+OMckje57G lAMtPFsent8Nx8Qc6oXzIgplA9e6xbhYfW+zVhD6Wbezbqgq7a85BSeVCYPaqDmm xbsYcff0zVWG5QJ1o67fm+MPPzrhlaikdqhKl70G3Gq+UwXFbitsFq+HULTPVMmF I/FJEi532ZpKQrjfN+kSlZxC74HeQYJvJG3WhBa1dMqms7nxewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3ndjMmTPiFvCF6pHRCjoYX0qUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzViYTYzMWYtYWMzNC0z Y2FjLWEzZGUtYzIwZGUyNWQ1Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3Q2MgFNRZhB5WXd78wGEypEgoLbMozY9Atw8jxjb5uhQfznitXXwbn EJZ4raMgG2zI4h8t1nOpPEcuuvFsyF1ysFSPTAvv71wJ2aQYtDZv6EhAkLKD6ItF QF40ze+SLw4jPGef5c5VBVw4WLkd1ffBOzr8Eyk9nUj3CIfDSv2q2mhaEP9F98jr GLDTqvmOEksrc6zBCBsyMkANH4awHsF7sy9wi6MsWr4pvOpDlQYOm8n9Ye8rTy4T Sltn+vYrEo4fbHkGQSEwsUIKLX1YS3dm9keo2P0PKq4NZ9345mUbdAcyU3gwtrF4 zl0PllgCSUZdBkKpbKzgurgExx/G33A= -----END CERTIFICATE-----Generated at Sun Apr 27 12:51:50 2025 by rpki-client