$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa File: af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa (raw, json) Hash identifier: wR6gJK9xMVQjG8t9TJed8CrXkYj5wPCWHEGQ+zTJ+4I= Subject key identifier: 32:50:EF:64:B1:C6:04:C6:88:EE:FF:CF:A9:40:83:46:6D:15:EA:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8E64E4C9033B5DB330700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.43.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:e6:4e:4c:90:33:b5:db:33:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f0dc1f52-46e3-4c5b-97a0-088fd6784902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:49:fe:7f:02:85:28:29:3e:64:48:48:79: d3:57:1a:06:22:13:e1:f6:8b:cb:13:fb:f2:cb:11: 4f:e1:ee:f7:60:86:21:8b:a2:0b:04:5f:7c:65:cc: d5:0b:50:e2:11:16:5a:82:38:81:a9:f5:19:e5:56: b7:00:be:68:83:e8:35:c3:dc:e6:bc:e2:69:09:b0: 0c:d2:e7:d0:23:65:40:0e:53:21:21:bf:77:c5:e5: 63:e6:d0:86:43:0b:bc:ec:ce:ab:b8:a8:24:f0:d1: 25:d0:34:0c:dd:3c:65:1c:d4:2c:4f:90:be:01:dd: e0:e3:d2:92:b4:7e:c2:2b:13:cf:20:e3:0b:7c:70: b4:3c:18:3c:24:af:8b:df:96:a8:e6:d0:d5:04:71: ac:ca:d1:76:82:5e:b4:e6:46:68:78:70:af:8b:02: c3:e7:c8:89:19:46:78:c8:6c:80:1d:a8:cd:95:2e: 70:63:96:1c:1d:6e:f8:78:bd:8e:51:c5:bf:de:cb: a1:75:7c:4b:b9:09:cc:64:00:b7:13:5f:65:b4:fe: 42:95:5c:e5:b8:34:dc:26:2e:9f:f4:5d:59:71:dd: 74:7b:e3:84:09:0b:f7:32:0a:dd:a7:91:2c:5d:b5: 85:6c:0e:ed:86:49:b4:86:c1:fd:b1:51:b9:89:2e: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:50:EF:64:B1:C6:04:C6:88:EE:FF:CF:A9:40:83:46:6D:15:EA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7b786d-8ad8-38d2-97c2-8e470e2fa8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:11:2b:ae:eb:44:9c:57:21:0e:fb:fe:87:1f:dc:f9:6e:66: 80:74:73:85:50:58:cb:51:42:24:01:65:a3:70:ae:89:cd:17: 13:7d:cb:c9:95:b5:83:64:f0:52:9c:76:a1:3a:e2:79:a4:26: 24:d7:cd:0b:87:0d:a5:14:66:ad:12:ca:1e:d9:0c:22:f7:3f: fd:a6:58:b7:89:f1:9d:8e:37:c8:b2:35:a0:81:2a:00:0f:51: ed:bd:9f:23:e7:8e:b8:83:b9:49:ea:4a:4e:31:49:2f:d4:26: 2c:ff:4e:1a:62:3a:ab:aa:47:6d:fc:60:5e:da:9a:4c:a9:24: 57:a8:ec:ff:c8:70:75:39:48:54:30:ec:23:24:c9:4b:c9:9d: 52:7a:1b:88:c5:d9:a4:fa:8e:c7:50:2e:bc:9c:eb:ce:b1:69: 9a:d0:09:fa:b2:65:98:95:84:e8:e5:da:b1:6b:95:23:f4:43: 8e:0a:64:8c:ba:22:5f:5d:e4:62:0d:7e:ef:d4:45:2b:fe:77: e2:54:04:43:e5:1f:4f:6a:5e:68:9f:d1:a4:1a:a7:7b:ed:c7: 6a:ec:ba:d9:dd:c5:06:4c:9e:e5:df:49:f5:6e:8b:c4:cb:84: 4b:e5:82:4f:45:27:02:fc:4b:33:57:1c:63:88:36:cd:1c:44: 64:1e:50:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+OZOTJAztdszBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjBkYzFmNTItNDZlMy00YzViLTk3YTAtMDg4ZmQ2Nzg0OTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv01J/n8ChSgpPmRISHnTVxoGIhPh9ovLE/vy yxFP4e73YIYhi6ILBF98ZczVC1DiERZagjiBqfUZ5Va3AL5og+g1w9zmvOJpCbAM 0ufQI2VADlMhIb93xeVj5tCGQwu87M6ruKgk8NEl0DQM3TxlHNQsT5C+Ad3g49KS tH7CKxPPIOMLfHC0PBg8JK+L35ao5tDVBHGsytF2gl605kZoeHCviwLD58iJGUZ4 yGyAHajNlS5wY5YcHW74eL2OUcW/3suhdXxLuQnMZAC3E19ltP5ClVzluDTcJi6f 9F1Zcd10e+OECQv3Mgrdp5EsXbWFbA7thkm0hsH9sVG5iS7ywwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJQ72SxxgTGiO7/z6lAg0ZtFerrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY3Yjc4NmQtOGFkOC0z OGQyLTk3YzItOGU0NzBlMmZhOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCv6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADURK67rRJxXIQ77/ocf3PluZoB0c4VQWMtRQiQBZaNwronNFxN9y8mV tYNk8FKcdqE64nmkJiTXzQuHDaUUZq0Syh7ZDCL3P/2mWLeJ8Z2ON8iyNaCBKgAP Ue29nyPnjriDuUnqSk4xSS/UJiz/ThpiOquqR238YF7amkypJFeo7P/IcHU5SFQw 7CMkyUvJnVJ6G4jF2aT6jsdQLryc686xaZrQCfqyZZiVhOjl2rFrlSP0Q44KZIy6 Il9d5GINfu/URSv+d+JUBEPlH09qXmif0aQap3vtx2rsutndxQZMnuXfSfVui8TL hEvlgk9FJwL8SzNXHGOINs0cRGQeUGM= -----END CERTIFICATE-----Generated at Sun Apr 27 09:45:10 2025 by rpki-client