$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e1adde-6965-3620-aff5-8ad154700cd8.roa File: b7e1adde-6965-3620-aff5-8ad154700cd8.roa (raw, json) Hash identifier: jcbvtFC2Bk12fYolZ94GPYQzQnbxdWykkirCdWOqbvw= Subject key identifier: 48:4F:96:98:14:8D:F9:27:F2:3C:E8:D1:A9:C1:BA:46:27:1B:1D:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7AA49D7188D6F96C40680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e1adde-6965-3620-aff5-8ad154700cd8.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.83.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:aa:49:d7:18:8d:6f:96:c4:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f5a6b568-3bd0-423c-8108-3c191b8a6477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:98:2d:3b:d5:f9:21:c1:a7:cd:b6:3c:f3: 7f:ad:b5:c8:ca:9f:89:97:e7:1e:fd:ac:b8:8f:b7: 6b:8d:9e:c4:59:6b:2a:e3:40:3d:66:22:11:0b:a5: a4:50:54:59:04:79:e1:0b:91:5e:76:11:2f:38:5e: b2:27:72:0a:f9:02:de:92:cf:c1:f5:0d:0c:28:59: 6a:5e:a5:28:66:d6:a8:2a:0d:eb:27:98:19:5c:1a: 21:df:44:cc:b2:d4:34:8b:63:f3:3f:e1:47:c7:26: 8e:33:07:43:14:e2:2b:1c:2c:66:0f:be:b8:70:65: 43:f4:bd:17:f3:1e:ed:7b:5f:7b:48:99:b5:5c:1d: 71:6d:2c:09:07:6b:43:17:43:98:59:04:62:a4:b6: 53:6b:77:40:17:ea:d7:cf:e1:77:05:cd:60:60:24: e0:49:6b:f9:b4:05:b2:0b:e5:c0:3b:f3:83:09:4f: 96:85:bf:d7:cc:f5:30:44:05:ca:ed:c8:cf:82:59: 76:24:f2:18:2b:ee:24:28:5b:ee:e0:54:0c:33:93: d5:f1:95:3f:1e:6a:27:02:ef:51:3e:94:66:fa:36: 24:ba:79:18:21:d8:96:2a:d7:de:e9:f7:cc:b7:bb: d7:04:ef:7e:16:78:c7:28:f1:5b:d9:8f:d1:46:aa: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:96:98:14:8D:F9:27:F2:3C:E8:D1:A9:C1:BA:46:27:1B:1D:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e1adde-6965-3620-aff5-8ad154700cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:64:cc:18:09:80:33:7b:a4:9d:9e:19:1c:b9:a4:c3:e7:4c: cc:d5:c4:50:80:3d:0c:73:0a:09:9f:f8:c1:c9:0e:80:a9:12: fb:d2:b6:93:43:df:b2:96:c8:b0:4c:79:7a:a1:cc:33:cd:e7: 23:9a:c2:4d:e1:c0:0a:fb:e0:9b:34:46:02:04:90:be:1d:7d: a6:98:d6:bc:3e:a5:62:a9:c1:d3:d9:48:e5:90:8d:84:88:df: 39:ed:4b:6f:d1:7e:cb:88:15:3c:a4:20:6c:30:f2:38:8d:e8: 1c:74:36:cf:e6:87:5e:ef:0c:14:18:34:99:9a:d2:32:19:3e: e2:f0:2c:4c:d8:27:4f:bb:71:48:31:fe:92:73:7b:ac:fa:9a: ba:f0:95:e8:3b:15:a5:44:98:7f:c4:75:e2:b1:da:9b:0b:51: cb:85:ab:ee:8c:43:e1:dd:75:b3:87:a4:fa:d9:74:f7:12:fb: 8e:ab:9f:36:cf:6b:c3:be:34:bc:f3:18:4e:d6:b3:c0:7f:16: 29:06:9d:fa:c8:34:0a:fc:cb:4c:60:f9:70:c3:a0:91:57:81: f9:7c:91:46:6b:ac:5f:66:48:2e:c3:b5:6c:fb:ab:6a:ea:ea: 03:e5:62:96:cb:9e:d4:f4:fa:c0:48:84:84:94:a6:4a:9e:a2: 9d:67:d2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj096pJ1xiNb5bEBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjVhNmI1NjgtM2JkMC00MjNjLTgxMDgtM2MxOTFiOGE2NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylCYLTvV+SHBp822PPN/rbXIyp+Jl+ce/ay4 j7drjZ7EWWsq40A9ZiIRC6WkUFRZBHnhC5FedhEvOF6yJ3IK+QLeks/B9Q0MKFlq XqUoZtaoKg3rJ5gZXBoh30TMstQ0i2PzP+FHxyaOMwdDFOIrHCxmD764cGVD9L0X 8x7te197SJm1XB1xbSwJB2tDF0OYWQRipLZTa3dAF+rXz+F3Bc1gYCTgSWv5tAWy C+XAO/ODCU+Whb/XzPUwRAXK7cjPgll2JPIYK+4kKFvu4FQMM5PV8ZU/HmonAu9R PpRm+jYkunkYIdiWKtfe6ffMt7vXBO9+FnjHKPFb2Y/RRqry6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhPlpgUjfkn8jzo0anBukYnGx1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdlMWFkZGUtNjk2NS0z NjIwLWFmZjUtOGFkMTU0NzAwY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdkzBgJgDN7pJ2eGRy5pMPnTMzVxFCAPQxzCgmf+MHJDoCpEvvStpND 37KWyLBMeXqhzDPN5yOawk3hwAr74Js0RgIEkL4dfaaY1rw+pWKpwdPZSOWQjYSI 3zntS2/RfsuIFTykIGww8jiN6Bx0Ns/mh17vDBQYNJma0jIZPuLwLEzYJ0+7cUgx /pJze6z6mrrwleg7FaVEmH/EdeKx2psLUcuFq+6MQ+HddbOHpPrZdPcS+46rnzbP a8O+NLzzGE7Ws8B/FikGnfrINAr8y0xg+XDDoJFXgfl8kUZrrF9mSC7DtWz7q2rq 6gPlYpbLntT0+sBIhISUpkqeop1n0tQ= -----END CERTIFICATE-----Generated at Tue Apr 29 05:19:30 2025 by rpki-client