$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa File: 436a2f02-617b-309a-a15b-7d9578f4f892.roa (raw, json) Hash identifier: QNQXpao6iFUau1E6lRbqIbMrSXo84tn9iHoOYS5mcbU= Subject key identifier: 67:2A:6C:FA:4E:8E:1F:A8:8A:EE:B7:F1:92:AC:9A:7B:87:78:44:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEFCC1B13E5D209549CA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 68.81.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:fc:c1:b1:3e:5d:20:95:49:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=16fb65b7-6c3c-4386-9b2a-91a56c2b91c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:55:cc:41:6c:bf:21:13:de:37:b7:40:5b:9f: 71:d3:9b:18:ba:25:ef:53:51:a4:5a:92:d1:d5:c4: 4b:b7:77:e1:f5:5f:02:c2:c3:2b:b3:b0:c9:75:a4: a4:ef:57:16:d1:82:6f:d2:c3:af:df:e5:b3:ee:b6: f0:96:90:96:90:88:13:27:af:83:eb:ee:e8:11:9b: f4:8f:9e:40:d7:4b:d2:97:f3:de:b6:e5:87:c1:2d: e5:e4:4e:03:1c:bc:1d:42:17:f9:65:b4:f0:35:be: 62:16:24:bd:42:a4:5e:c3:e3:68:56:59:60:39:9d: f1:1e:59:37:ea:eb:c7:0b:74:7a:7d:2e:73:5e:f6: cd:bf:62:3e:67:c1:1f:82:49:41:54:3c:30:d1:f4: bf:5d:bb:dd:6f:d5:7a:13:06:f7:3f:3f:73:8c:4a: 01:87:66:90:0f:c6:c3:65:ce:fd:6b:fe:67:4e:c5: 2c:d0:ed:4b:25:37:a6:4e:7b:14:f6:aa:71:d7:e3: 6f:b4:5b:bd:dc:24:aa:4f:1b:15:6e:fe:88:d2:48: fa:ad:1b:0c:09:85:9d:4d:31:5f:f2:43:98:a9:07: 0a:8c:b8:43:6a:2f:b2:ad:fb:71:31:f2:16:26:db: aa:d3:71:ee:03:24:6c:17:b2:15:b5:13:b4:13:43: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:6C:FA:4E:8E:1F:A8:8A:EE:B7:F1:92:AC:9A:7B:87:78:44:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:3d:b8:12:68:1f:37:05:8f:02:99:97:f7:11:a4:ee:63:92: 99:3a:0f:6c:4d:cd:81:3c:da:3b:d5:59:fe:7e:e4:db:23:97: 81:90:4f:1e:42:68:6c:29:0b:4f:d2:84:46:3d:61:23:b2:bd: 44:bc:b0:5f:f9:8a:61:1a:fe:dd:52:e0:06:50:70:1b:ee:d4: ba:4b:29:7a:1d:c6:09:f6:04:16:9e:a6:a2:71:ac:ec:de:ae: 2e:19:b4:5b:ea:38:ce:3f:94:77:35:8b:0b:4c:eb:36:49:eb: 7e:97:95:66:87:a2:33:48:7e:6b:bc:3a:2b:2e:5f:5a:4a:a2: dc:f6:48:5b:95:02:dc:1e:99:1c:82:cf:bd:32:ee:cf:da:44: 1d:fe:61:98:48:65:03:3e:b5:e0:90:56:9b:d2:25:b7:d5:10: e6:04:ac:8c:19:63:3d:e2:7f:f1:8c:2f:28:31:22:d4:13:98: b0:a7:1d:74:ac:4b:53:4e:4d:09:b6:3f:a6:32:74:a3:84:43: 0a:98:48:c7:62:13:89:85:f4:61:4f:19:3d:28:95:71:54:4b: 4d:e0:cc:d4:42:c7:a0:14:6f:31:4f:46:fb:d4:be:f4:d4:46: c5:77:0e:f7:2a:26:be:51:f2:fc:15:fa:64:95:57:33:ff:f2: 28:cb:09:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrvzBsT5dIJVJyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTZmYjY1YjctNmMzYy00Mzg2LTliMmEtOTFhNTZjMmI5MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVXMQWy/IRPeN7dAW59x05sYuiXvU1GkWpLR 1cRLt3fh9V8CwsMrs7DJdaSk71cW0YJv0sOv3+Wz7rbwlpCWkIgTJ6+D6+7oEZv0 j55A10vSl/PetuWHwS3l5E4DHLwdQhf5ZbTwNb5iFiS9QqRew+NoVllgOZ3xHlk3 6uvHC3R6fS5zXvbNv2I+Z8EfgklBVDww0fS/Xbvdb9V6Ewb3Pz9zjEoBh2aQD8bD Zc79a/5nTsUs0O1LJTemTnsU9qpx1+NvtFu93CSqTxsVbv6I0kj6rRsMCYWdTTFf 8kOYqQcKjLhDai+yrftxMfIWJtuq03HuAyRsF7IVtRO0E0PLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcqbPpOjh+oiu638ZKsmnuHeEQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM2YTJmMDItNjE3Yi0z MDlhLWExNWItN2Q5NTc4ZjRmODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANA9uBJoHzcFjwKZl/cRpO5jkpk6D2xNzYE82jvVWf5+5Nsjl4GQTx5C aGwpC0/ShEY9YSOyvUS8sF/5imEa/t1S4AZQcBvu1LpLKXodxgn2BBaepqJxrOze ri4ZtFvqOM4/lHc1iwtM6zZJ636XlWaHojNIfmu8OisuX1pKotz2SFuVAtwemRyC z70y7s/aRB3+YZhIZQM+teCQVpvSJbfVEOYErIwZYz3if/GMLygxItQTmLCnHXSs S1NOTQm2P6YydKOEQwqYSMdiE4mF9GFPGT0olXFUS03gzNRCx6AUbzFPRvvUvvTU RsV3DvcqJr5R8vwV+mSVVzP/8ijLCfw= -----END CERTIFICATE-----Generated at Mon Apr 28 03:25:38 2025 by rpki-client