$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3c9ffbb-765a-3e38-b076-a19841813f99.roa File: b3c9ffbb-765a-3e38-b076-a19841813f99.roa (raw, json) Hash identifier: 2bD1nsCivR/xfM1Npba1lR1DKxXYQcFRQbkViCa+61g= Subject key identifier: CF:55:2B:83:49:C1:2A:7B:4B:90:C0:9A:82:E8:12:3E:73:3D:4C:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5C185DD7EB39482363080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3c9ffbb-765a-3e38-b076-a19841813f99.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 68.52.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:c1:85:dd:7e:b3:94:82:36:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=3b88c2d0-e6ec-41de-ada5-2973f5c3ccb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:9c:c9:ed:e6:de:eb:0d:4a:ae:f6:99:10: e9:2a:73:ae:06:a3:06:5f:9e:d2:3e:ff:72:3d:2b: 75:31:b8:e5:df:ee:59:3d:7b:90:75:b2:85:89:d0: ff:70:28:76:98:6a:67:0a:cf:ac:b6:23:bb:02:3a: 9f:26:bb:fe:4a:65:d7:13:2c:d8:22:de:ba:e9:d6: 66:f7:8c:1d:dd:91:16:d7:ca:1a:a6:c3:67:68:32: f6:6c:d8:14:86:ed:d2:9d:d5:43:00:83:dd:0c:79: a2:ec:92:30:44:87:38:71:cd:13:53:ce:7d:84:75: 91:dc:20:b9:4d:11:9f:6e:17:aa:af:de:61:91:24: f4:b8:94:61:9d:ad:91:79:a6:fe:00:48:15:8c:59: 6d:82:e5:db:49:eb:22:89:22:34:e0:f4:43:7d:b3: 51:b1:50:a4:3c:33:0c:df:53:c8:3e:bf:ea:e3:1b: e7:67:75:4b:df:bd:d7:c1:80:07:45:c4:0a:c3:07: 14:a6:d9:d9:cf:dd:bf:eb:8c:dc:86:50:bc:c3:e8: c5:28:c2:2f:23:62:ec:3b:cb:53:93:cb:56:8b:00: 96:38:42:01:af:27:bf:cc:cd:cf:6f:e7:c2:1a:2e: e8:b1:be:cd:bb:ac:0d:d8:cb:73:63:43:59:6a:e2: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:55:2B:83:49:C1:2A:7B:4B:90:C0:9A:82:E8:12:3E:73:3D:4C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3c9ffbb-765a-3e38-b076-a19841813f99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:41:02:5f:3e:df:bd:00:b4:3f:94:e9:07:4c:63:7c:20:5c: 8c:3f:74:9a:e3:97:09:9f:11:5d:cb:08:c2:9c:f0:89:6d:74: d1:bf:af:3a:23:b3:b0:3a:51:d8:c3:3e:01:73:7b:58:6a:77: d7:cd:8e:6b:82:da:39:46:b1:b3:13:b4:ff:1d:d8:92:26:da: ac:05:2e:2a:14:ae:8a:90:fd:f9:d3:49:60:e4:d6:b0:0b:99: ef:ca:76:a1:fa:7a:d9:e0:e1:29:47:28:dc:97:a6:96:f5:6e: 00:3d:6a:16:59:1a:78:61:09:d8:6c:02:03:8e:2d:3a:38:cc: 5c:9c:fc:3e:8d:7d:c3:be:d5:69:d6:5d:b8:22:11:08:ec:79: 89:a2:b3:d5:94:89:9c:92:f2:00:0b:83:00:c8:e3:34:1b:fb: 4a:e7:3e:b5:39:14:17:3c:4f:94:3c:af:8d:a3:73:a0:66:a6: eb:c7:da:d6:14:aa:8e:ea:a9:d1:05:68:5c:02:41:c2:ec:b9: ec:e3:47:6b:81:0b:ca:50:9b:f2:24:69:5f:0f:30:89:11:98: 13:a9:1f:d5:b1:be:8a:42:07:0d:ed:cd:e2:a2:99:b6:ca:8b: 7b:81:ab:d0:34:2c:aa:0b:93:6a:50:cd:dc:44:3e:c1:ca:d7: bc:55:57:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pcGF3X6zlII2MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk M2I4OGMyZDAtZTZlYy00MWRlLWFkYTUtMjk3M2Y1YzNjY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEycye3m3usNSq72mRDpKnOuBqMGX57SPv9y PSt1Mbjl3+5ZPXuQdbKFidD/cCh2mGpnCs+stiO7AjqfJrv+SmXXEyzYIt666dZm 94wd3ZEW18oapsNnaDL2bNgUhu3SndVDAIPdDHmi7JIwRIc4cc0TU859hHWR3CC5 TRGfbheqr95hkST0uJRhna2Reab+AEgVjFltguXbSesiiSI04PRDfbNRsVCkPDMM 31PIPr/q4xvnZ3VL373XwYAHRcQKwwcUptnZz92/64zchlC8w+jFKMIvI2LsO8tT k8tWiwCWOEIBrye/zM3Pb+fCGi7osb7Nu6wN2MtzY0NZauLPSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9VK4NJwSp7S5DAmoLoEj5zPUyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNjOWZmYmItNzY1YS0z ZTM4LWIwNzYtYTE5ODQxODEzZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDSUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFBAl8+370AtD+U6QdMY3wgXIw/dJrjlwmfEV3LCMKc8IltdNG/rzoj s7A6UdjDPgFze1hqd9fNjmuC2jlGsbMTtP8d2JIm2qwFLioUroqQ/fnTSWDk1rAL me/KdqH6etng4SlHKNyXppb1bgA9ahZZGnhhCdhsAgOOLTo4zFyc/D6NfcO+1WnW XbgiEQjseYmis9WUiZyS8gALgwDI4zQb+0rnPrU5FBc8T5Q8r42jc6BmpuvH2tYU qo7qqdEFaFwCQcLsuezjR2uBC8pQm/IkaV8PMIkRmBOpH9WxvopCBw3tzeKimbbK i3uBq9A0LKoLk2pQzdxEPsHK17xVV3o= -----END CERTIFICATE-----Generated at Tue Apr 29 07:04:48 2025 by rpki-client