$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa File: bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa (raw, json) Hash identifier: 6EkSd5nNF4fV3gQI9FbyOGnM1vNWa3wxI2DM4Mu1gT0= Subject key identifier: 1D:9D:A8:16:66:F3:5F:FE:E9:F0:C4:BD:EF:97:B8:1C:BA:38:A7:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB085EFBBE4A38EC8BE8F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 68.82.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:85:ef:bb:e4:a3:8e:c8:be:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2daf4c22-ba6c-47de-a918-02f5551ac46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:d8:02:bd:c0:7f:52:c2:78:3f:32:ff:ce: 20:46:87:78:19:54:0c:e7:18:c3:5a:43:c8:21:93: cc:69:e5:93:4d:0c:91:a7:cf:48:c3:ac:e8:52:d7: dc:57:75:49:b5:0e:86:8b:e9:43:18:08:31:1a:92: eb:9b:07:66:b1:c7:5c:72:91:9d:d5:c2:83:04:98: c0:45:e6:05:70:a6:72:93:17:6b:46:2c:99:45:d7: f3:11:c3:0f:8d:53:94:1b:91:e2:b9:52:2e:b0:f1: a8:a0:39:79:92:a8:52:d8:40:bd:06:45:ad:6b:80: be:da:01:57:58:5e:41:41:05:95:58:1a:b9:b0:e1: 8d:f6:36:9d:27:f7:01:0b:81:4d:ee:51:95:29:5f: c5:91:64:0a:8d:bd:08:99:99:a9:c6:a6:46:07:a3: 68:ad:2b:4e:b4:f4:12:21:4d:35:47:44:8a:3f:41: 99:04:ae:62:80:8b:d9:e9:22:e7:81:53:61:c2:fa: ef:34:8c:b1:eb:89:13:b4:bd:3b:98:d6:6b:99:8f: 78:a1:79:d9:f7:73:ac:2f:54:24:23:6a:01:67:69: f4:c6:bc:de:a6:b1:38:ea:af:c1:c6:f5:0d:31:98: 97:b1:69:f5:e6:95:af:9a:3f:fe:d0:24:71:a7:5e: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:A8:16:66:F3:5F:FE:E9:F0:C4:BD:EF:97:B8:1C:BA:38:A7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.82.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:79:86:ed:b4:72:a6:48:01:24:8d:69:b1:a7:69:ad:73:9f: b2:1c:65:f6:b8:86:e4:6e:26:27:b8:dc:f4:cd:98:f2:71:d4: cf:bf:ef:8c:6c:9b:5f:ec:ce:b0:7f:d6:22:31:13:61:fc:ab: 00:39:ab:42:a6:53:45:46:b6:b8:be:d9:a4:eb:b3:86:aa:8e: 1b:68:63:a4:52:b4:4f:a8:75:9c:2d:d1:cc:ac:15:ad:eb:61: 53:b2:29:47:d1:3d:a4:c2:73:15:90:77:27:0c:a9:53:82:56: d3:ed:95:3e:93:de:13:d7:b3:94:a9:b4:3b:ed:74:66:ce:70: bb:53:32:8f:ae:e3:af:33:11:ed:dd:e0:31:0d:6f:fb:aa:18: ff:4a:31:78:b6:1f:3a:37:b1:59:57:6f:97:cd:b1:a3:50:f2: 17:a2:7c:43:19:c3:4e:db:d8:b4:71:a1:04:d2:36:44:a9:74: ad:f8:6a:45:c5:d2:7c:2b:9a:e3:aa:6a:48:6d:88:9f:c0:90: f2:29:6f:8b:bf:84:17:0f:d5:d0:40:5f:50:5d:b4:e8:c0:32: 25:52:09:0b:ea:ad:9c:44:2e:3b:c7:01:08:33:1e:61:43:a2: 69:c2:ac:11:53:1a:9c:fc:61:ca:71:41:84:b9:46:51:9c:34: 77:9b:9b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssIXvu+Sjjsi+jyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmRhZjRjMjItYmE2Yy00N2RlLWE5MTgtMDJmNTU1MWFjNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3vYAr3Af1LCeD8y/84gRod4GVQM5xjDWkPI IZPMaeWTTQyRp89Iw6zoUtfcV3VJtQ6Gi+lDGAgxGpLrmwdmscdccpGd1cKDBJjA ReYFcKZykxdrRiyZRdfzEcMPjVOUG5HiuVIusPGooDl5kqhS2EC9BkWta4C+2gFX WF5BQQWVWBq5sOGN9jadJ/cBC4FN7lGVKV/FkWQKjb0ImZmpxqZGB6NorStOtPQS IU01R0SKP0GZBK5igIvZ6SLngVNhwvrvNIyx64kTtL07mNZrmY94oXnZ93OsL1Qk I2oBZ2n0xrzeprE46q/BxvUNMZiXsWn15pWvmj/+0CRxp170cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2dqBZm81/+6fDEve+XuBy6OKeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY1OWZjMjAtMWI3ZS0z YTM5LTgxY2UtODRmMGQwMWJmYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB55hu20cqZIASSNabGnaa1zn7IcZfa4huRuJie43PTNmPJx1M+/74xs m1/szrB/1iIxE2H8qwA5q0KmU0VGtri+2aTrs4aqjhtoY6RStE+odZwt0cysFa3r YVOyKUfRPaTCcxWQdycMqVOCVtPtlT6T3hPXs5SptDvtdGbOcLtTMo+u468zEe3d 4DENb/uqGP9KMXi2Hzo3sVlXb5fNsaNQ8heifEMZw07b2LRxoQTSNkSpdK34akXF 0nwrmuOqakhtiJ/AkPIpb4u/hBcP1dBAX1BdtOjAMiVSCQvqrZxELjvHAQgzHmFD omnCrBFTGpz8YcpxQYS5RlGcNHebm2g= -----END CERTIFICATE-----Generated at Sun Apr 27 09:59:00 2025 by rpki-client