$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa File: 7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa (raw, json) Hash identifier: xFgtAQcWJVOyO2qYbFeiQd72DwYZsfOaRATrTB1aTqA= Subject key identifier: 77:5A:1C:47:39:E0:3E:F2:D7:70:20:DE:86:C7:5C:7A:D3:7F:F5:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF4B2E5F19F95F12C6E620 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 68.45.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:4b:2e:5f:19:f9:5f:12:c6:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=559807b3-3055-4fe7-bdfd-d894f1e679f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:1c:b5:6a:b7:e2:10:60:ad:b5:6b:69:c6: ef:d1:8c:74:b8:16:76:f8:2f:49:de:41:b9:9d:88: 0b:22:de:fe:b6:ac:90:d7:9b:5c:b7:f8:aa:7f:e2: 80:0d:97:7f:56:ab:c0:ce:99:d8:5a:b0:6f:53:58: 5b:41:8a:db:af:d5:81:e2:9d:49:c2:23:09:a8:5a: 54:a5:a5:28:92:7c:7a:f4:db:39:17:c8:3a:86:cc: c2:bc:39:71:47:d9:14:15:15:9c:8f:51:23:7a:69: 95:25:e3:a4:2d:cd:02:99:9b:e0:8a:22:ab:ec:61: 29:44:fd:33:ac:fe:75:f3:b4:cc:4b:88:98:4c:00: 32:9a:56:47:60:34:9e:eb:fe:ef:f9:04:66:09:46: a7:62:1e:93:70:4a:74:a8:e4:17:60:36:6a:02:45: 81:de:a6:fd:a8:dd:9e:01:1c:53:97:82:4f:25:6e: 1a:bf:96:46:78:17:9a:a0:21:bc:db:be:c6:f5:4f: 5e:03:df:fd:19:5b:cf:fc:55:a4:b5:50:bc:e2:5b: b4:c2:ef:f1:98:60:62:9a:81:de:b4:ff:87:e9:9b: 07:fc:62:3a:1b:db:11:e6:a4:8c:4c:aa:70:62:ef: c2:b4:24:35:ae:8e:f1:18:6d:43:18:1c:98:bf:25: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5A:1C:47:39:E0:3E:F2:D7:70:20:DE:86:C7:5C:7A:D3:7F:F5:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f8:7b:42:a9:67:93:85:20:33:62:fe:e1:28:1e:d8:4c:15: 50:94:0f:0b:cd:f7:f1:5f:07:f2:bf:bb:d2:fa:59:d9:95:de: 2e:ff:c7:13:09:91:11:81:5d:24:75:83:3e:1e:5c:cc:fd:06: da:cc:af:ad:38:3b:e6:8c:34:cd:f4:2a:6a:39:d3:92:03:5d: c0:0e:63:62:82:1d:54:fe:48:2c:c4:ec:1a:d8:94:18:63:56: d1:60:c9:e9:a6:49:de:89:af:ce:1f:21:dc:b7:75:fb:51:1d: 20:c2:43:99:98:bd:a1:0d:b0:cc:07:9a:ff:ae:0c:f2:90:80: a3:a0:a2:db:26:64:32:36:00:7f:6c:23:02:9d:44:74:44:72: e1:b3:79:39:43:8d:81:c4:8c:c9:3b:fb:d3:d9:b7:36:15:8d: 94:77:4a:0b:df:57:cb:8f:8c:d9:9e:fa:b6:63:3c:de:13:41: f7:83:e2:2c:b6:44:56:47:cb:ab:f0:3a:aa:7d:94:67:7f:5f: bc:7e:96:0f:28:16:05:bd:12:3b:e7:11:ab:07:65:12:48:f8: 8c:17:be:51:51:a0:08:78:3a:b8:22:95:82:07:0e:13:15:95: 19:d5:ba:51:1b:aa:f0:17:fb:42:43:8f:c6:bd:60:5b:98:7a: 7c:fa:50:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr0suXxn5XxLG5iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTU5ODA3YjMtMzA1NS00ZmU3LWJkZmQtZDg5NGYxZTY3OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaActWq34hBgrbVracbv0Yx0uBZ2+C9J3kG5 nYgLIt7+tqyQ15tct/iqf+KADZd/VqvAzpnYWrBvU1hbQYrbr9WB4p1JwiMJqFpU paUoknx69Ns5F8g6hszCvDlxR9kUFRWcj1EjemmVJeOkLc0CmZvgiiKr7GEpRP0z rP5187TMS4iYTAAymlZHYDSe6/7v+QRmCUanYh6TcEp0qOQXYDZqAkWB3qb9qN2e ARxTl4JPJW4av5ZGeBeaoCG8277G9U9eA9/9GVvP/FWktVC84lu0wu/xmGBimoHe tP+H6ZsH/GI6G9sR5qSMTKpwYu/CtCQ1ro7xGG1DGByYvyV2AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdaHEc54D7y13Ag3obHXHrTf/UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2FjZGY1ODYtMTFlOC0z MTk3LWJiOTgtZjdiZDdkNDIwZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH4e0KpZ5OFIDNi/uEoHthMFVCUDwvN9/FfB/K/u9L6WdmV3i7/xxMJ kRGBXSR1gz4eXMz9BtrMr604O+aMNM30Kmo505IDXcAOY2KCHVT+SCzE7BrYlBhj VtFgyemmSd6Jr84fIdy3dftRHSDCQ5mYvaENsMwHmv+uDPKQgKOgotsmZDI2AH9s IwKdRHREcuGzeTlDjYHEjMk7+9PZtzYVjZR3SgvfV8uPjNme+rZjPN4TQfeD4iy2 RFZHy6vwOqp9lGd/X7x+lg8oFgW9EjvnEasHZRJI+IwXvlFRoAh4OrgilYIHDhMV lRnVulEbqvAX+0JDj8a9YFuYenz6UPA= -----END CERTIFICATE-----Generated at Mon Apr 28 07:12:50 2025 by rpki-client