$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aee5430-4f8c-36d6-8f65-597c06c1e405.roa File: 4aee5430-4f8c-36d6-8f65-597c06c1e405.roa (raw, json) Hash identifier: 6hayBxV3bdSTKc14ThSB/qO27SZp2z44Vh1qERnjIuA= Subject key identifier: 20:6F:AF:A3:7C:10:5B:D9:21:34:DD:DD:60:04:3B:DB:9C:8D:33:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858498E64AEF29D1BFE431CD6F6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aee5430-4f8c-36d6-8f65-597c06c1e405.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 33661 IP address blocks: 68.84.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:ae:f2:9d:1b:fe:43:1c:d6:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=957e6fa0-49be-40ea-8dda-9fb04211b298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:6b:d5:68:f6:6c:a5:17:1e:51:c8:de:bd: e5:8a:98:c5:ac:b7:0d:87:19:3e:13:6a:f8:b3:35: 10:dc:31:ca:75:d3:1d:ad:a0:39:8e:8a:1e:cc:e7: af:35:0a:6d:76:31:cd:33:b8:86:23:8f:3d:4f:df: 53:69:ba:65:c8:05:ae:89:00:55:e8:99:87:6b:d1: ae:aa:04:db:1c:12:fb:22:99:de:bf:cf:89:cb:d4: 18:6b:2f:a2:13:64:85:14:5c:ac:5e:c6:91:82:95: 64:eb:e3:c9:8b:4b:98:7e:14:74:dd:7b:bc:6b:21: 2b:c1:98:f5:c2:c5:81:10:e7:67:e8:23:52:2c:8f: bb:3b:4b:13:8a:0f:dd:fb:f1:64:0a:20:6a:60:3d: 41:2d:3c:e6:83:f4:1b:19:a9:46:1e:f9:b1:d0:c6: 09:34:d5:c9:e3:59:12:ed:d3:84:65:c7:1d:86:2b: 18:f8:d1:67:dd:34:9f:d6:41:bb:07:f6:4d:01:36: 9e:11:d8:dd:77:05:9c:6a:55:8a:16:5b:22:1a:2d: e3:24:76:13:6d:65:0f:7c:29:e7:37:85:99:d7:36: e4:37:dd:4c:3f:41:1b:e9:ef:63:ae:23:c6:02:5d: 87:52:8b:c4:7d:70:3f:4a:c9:50:54:07:dc:ea:71: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6F:AF:A3:7C:10:5B:D9:21:34:DD:DD:60:04:3B:DB:9C:8D:33:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aee5430-4f8c-36d6-8f65-597c06c1e405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:9d:ac:b9:27:a4:fd:79:22:b5:88:87:0f:a1:ed:c2:aa:5a: 76:2c:e0:1e:9f:87:68:1a:dc:c5:90:cb:06:fe:f4:dd:de:7e: 4f:6c:cc:63:ca:cd:9a:1d:9d:76:64:64:ad:68:6a:49:f1:fb: 7b:11:5c:50:a1:04:47:54:dd:1a:0c:0f:0d:f6:42:23:c8:4d: c4:42:fc:c2:55:89:d2:f6:43:bb:ae:eb:34:4e:c0:98:55:32: 68:20:d4:26:8d:86:5e:f6:68:57:f3:52:a3:a3:98:98:57:db: de:49:c6:be:ab:f0:90:3a:4e:c0:93:f1:dc:e1:86:a9:97:31: 61:00:28:c1:75:39:61:67:81:4b:21:2d:b0:43:68:31:59:c8: 02:eb:f2:76:97:91:03:74:ed:0c:7a:fa:55:d9:b4:f9:d0:e5: 7c:bb:17:93:30:ae:d3:98:19:bb:be:3a:54:05:1e:7c:8a:42: 96:9c:57:ea:1a:8a:2b:1c:db:f9:39:30:49:76:b2:e1:39:12: 9e:f7:9e:b5:5f:65:91:08:f3:91:dd:8a:a3:25:44:6e:c2:21: 27:39:17:44:8c:2f:8c:67:bd:2c:72:88:82:5e:10:85:39:29: 82:3f:1d:30:a9:11:86:dd:d0:f5:aa:16:8c:c7:df:70:1c:9c: ec:cb:44:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZK7ynRv+QxzW9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTU3ZTZmYTAtNDliZS00MGVhLThkZGEtOWZiMDQyMTFiMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMxr1Wj2bKUXHlHI3r3lipjFrLcNhxk+E2r4 szUQ3DHKddMdraA5jooezOevNQptdjHNM7iGI489T99TabplyAWuiQBV6JmHa9Gu qgTbHBL7Ipnev8+Jy9QYay+iE2SFFFysXsaRgpVk6+PJi0uYfhR03Xu8ayErwZj1 wsWBEOdn6CNSLI+7O0sTig/d+/FkCiBqYD1BLTzmg/QbGalGHvmx0MYJNNXJ41kS 7dOEZccdhisY+NFn3TSf1kG7B/ZNATaeEdjddwWcalWKFlsiGi3jJHYTbWUPfCnn N4WZ1zbkN91MP0Eb6e9jriPGAl2HUovEfXA/SslQVAfc6nHLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBvr6N8EFvZITTd3WAEO9ucjTPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFlZTU0MzAtNGY4Yy0z NmQ2LThmNjUtNTk3YzA2YzFlNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANmdrLknpP15IrWIhw+h7cKqWnYs4B6fh2ga3MWQywb+9N3efk9szGPK zZodnXZkZK1oaknx+3sRXFChBEdU3RoMDw32QiPITcRC/MJVidL2Q7uu6zROwJhV Mmgg1CaNhl72aFfzUqOjmJhX295Jxr6r8JA6TsCT8dzhhqmXMWEAKMF1OWFngUsh LbBDaDFZyALr8naXkQN07Qx6+lXZtPnQ5Xy7F5MwrtOYGbu+OlQFHnyKQpacV+oa iisc2/k5MEl2suE5Ep73nrVfZZEI85HdiqMlRG7CISc5F0SML4xnvSxyiIJeEIU5 KYI/HTCpEYbd0PWqFozH33AcnOzLRA8= -----END CERTIFICATE-----Generated at Mon Apr 28 01:14:46 2025 by rpki-client