$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa File: aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa (raw, json) Hash identifier: jwk963TSuoPzGxSMl1lU4vxrTLXpSwLLd1mNx2ADL0A= Subject key identifier: F2:3D:F7:37:C6:33:9B:AD:80:E0:A0:CA:EC:CF:E9:D7:39:B8:E2:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5BF202BB82F9C90AE2928 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 68.52.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:bf:20:2b:b8:2f:9c:90:ae:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=f77b7bb6-b853-4052-9e7a-572eb58444a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:6b:94:89:a6:a6:2a:06:cd:4f:9e:5a:39: 8d:ec:c3:0f:ea:4d:92:38:20:07:72:1a:11:64:85: 85:50:b0:4a:1e:99:68:27:e2:4f:b7:52:9e:a6:8b: ca:24:10:fe:f6:48:1d:00:9c:04:7e:00:b9:e3:d8: 01:50:ed:e3:7c:50:e5:78:67:fd:1b:cd:91:7d:a7: 74:f8:f7:d6:6e:45:33:dc:b8:1c:fb:a9:3c:1e:f8: cc:f7:1f:99:75:48:9f:51:87:fc:c3:29:bd:e2:db: 70:4a:69:a2:19:64:59:56:f5:16:7f:41:2b:44:d5: 6a:7c:28:d8:df:f4:ee:e0:ae:31:45:45:94:f4:9a: 7b:3e:19:0a:65:62:d1:b4:41:75:da:16:ac:bf:2f: b9:12:e1:b1:fd:ae:82:47:f4:a8:9f:ab:27:f1:39: ad:60:24:96:ff:aa:40:fc:2d:05:3c:5a:4b:00:21: 4d:85:d8:bc:3d:eb:17:de:f4:9d:24:66:06:e5:cf: 42:0d:6d:75:d3:51:b9:c2:9c:a5:ed:c0:12:db:89: 24:26:11:05:38:1e:77:68:28:c5:f3:22:b9:07:8f: 91:10:d1:eb:3b:83:f8:17:17:c0:7b:9a:5a:60:ed: a0:3c:fc:25:14:b0:b8:f5:39:c4:de:e8:2b:2c:dc: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:F7:37:C6:33:9B:AD:80:E0:A0:CA:EC:CF:E9:D7:39:B8:E2:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa09c9d0-9a46-3ba8-9ede-f66148b0f071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:70:a4:cb:33:99:ff:07:39:77:ec:96:a6:1b:60:37:72:9f: 3c:28:ed:ef:bf:26:80:20:f6:65:39:41:0a:8a:fa:32:37:4c: 7c:64:c0:b7:e0:22:64:aa:15:6c:ba:16:65:a1:ca:3c:d4:e2: 0b:06:59:0c:d0:04:79:0d:bb:b5:d8:28:c6:55:f1:d4:cf:ff: 87:dc:f9:18:11:f6:5a:f0:50:8b:66:ca:57:6f:cc:b9:c0:67: 7e:ab:58:70:65:fc:1f:98:11:df:30:b7:73:b4:fe:13:bf:2a: 4a:89:52:40:9d:a1:ee:18:3a:c7:f0:e9:6c:ba:0c:d8:47:24: 28:1c:64:40:be:54:65:18:bf:01:7d:1a:10:af:c1:be:92:73: 4d:4c:75:d3:3a:9e:f7:2c:93:74:41:50:e0:ea:e0:4d:86:3f: 33:65:d1:57:50:f6:f1:29:81:cf:d1:89:e5:43:95:5b:03:bb: 2a:5a:fb:fc:88:8c:3e:e4:f7:30:15:9c:8f:97:fa:c6:34:f0: 78:92:98:65:7f:83:8a:73:27:31:9b:d6:0d:6f:c9:86:ac:37: 2c:01:b8:57:dd:a4:45:58:47:68:82:43:f4:4a:2b:58:bc:f4: b5:84:bd:16:ff:67:70:f5:80:7a:fe:32:3f:7d:bd:be:2e:6e: 7c:5c:b7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pb8gK7gvnJCuKSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk Zjc3YjdiYjYtYjg1My00MDUyLTllN2EtNTcyZWI1ODQ0NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtutrlImmpioGzU+eWjmN7MMP6k2SOCAHchoR ZIWFULBKHploJ+JPt1KepovKJBD+9kgdAJwEfgC549gBUO3jfFDleGf9G82Rfad0 +PfWbkUz3Lgc+6k8HvjM9x+ZdUifUYf8wym94ttwSmmiGWRZVvUWf0ErRNVqfCjY 3/Tu4K4xRUWU9Jp7PhkKZWLRtEF12hasvy+5EuGx/a6CR/Son6sn8TmtYCSW/6pA /C0FPFpLACFNhdi8PesX3vSdJGYG5c9CDW1101G5wpyl7cAS24kkJhEFOB53aCjF 8yK5B4+RENHrO4P4FxfAe5paYO2gPPwlFLC49TnE3ugrLNyBqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI99zfGM5utgOCgyuzP6dc5uOKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEwOWM5ZDAtOWE0Ni0z YmE4LTllZGUtZjY2MTQ4YjBmMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5wpMszmf8HOXfslqYbYDdynzwo7e+/JoAg9mU5QQqK+jI3THxkwLfg ImSqFWy6FmWhyjzU4gsGWQzQBHkNu7XYKMZV8dTP/4fc+RgR9lrwUItmyldvzLnA Z36rWHBl/B+YEd8wt3O0/hO/KkqJUkCdoe4YOsfw6Wy6DNhHJCgcZEC+VGUYvwF9 GhCvwb6Sc01MddM6nvcsk3RBUODq4E2GPzNl0VdQ9vEpgc/RieVDlVsDuypa+/yI jD7k9zAVnI+X+sY08HiSmGV/g4pzJzGb1g1vyYasNywBuFfdpEVYR2iCQ/RKK1i8 9LWEvRb/Z3D1gHr+Mj99vb4ubnxctxI= -----END CERTIFICATE-----Generated at Sun Apr 27 18:30:31 2025 by rpki-client