$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa File: cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa (raw, json) Hash identifier: mMgbd3iDJLuzobpV+ZcdqIqM/0P/LyiNSWkY681Nl34= Subject key identifier: 9D:04:D7:F6:DA:73:71:E3:FB:9E:BB:11:58:76:40:FD:7A:D7:07:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA61ECF961C80B1CDF05E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33489 IP address blocks: 68.85.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:1e:cf:96:1c:80:b1:cd:f0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5b42effd-2df3-4598-b471-91b54408a163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:97:d0:5c:af:27:68:45:bc:e7:10:f5:d2: 79:79:05:21:ba:8f:e2:31:77:c0:c9:4d:87:b0:fe: 40:f6:a5:17:6e:62:98:c0:73:9a:f3:b7:38:91:9f: d6:48:86:cb:66:00:bb:b0:74:7e:4b:bc:51:cf:56: c3:47:d3:72:79:ee:b0:9e:d0:b3:30:65:47:f8:6a: 4a:d6:c2:7d:c2:5c:d1:3b:69:28:54:23:b2:56:d3: d4:bc:45:c6:67:bf:fd:ff:c1:1a:92:da:00:22:1e: 6f:71:04:b0:d2:d2:77:fa:70:46:16:56:9d:00:a9: 1e:ac:15:05:42:db:19:23:24:48:a0:d1:e5:5c:e7: 11:16:ce:9d:6a:d5:89:a2:ba:47:41:eb:8e:85:6d: cc:b1:fc:fa:fa:e8:6e:da:e3:b7:72:17:6b:dc:ed: 8d:07:c7:00:b2:2d:cc:72:92:23:f1:e7:5e:e0:e4: eb:cc:89:43:79:0a:b7:d8:b5:67:08:32:f1:ea:98: 13:0f:96:45:d2:06:33:4d:39:02:c4:72:4a:4a:e4: 95:2e:d3:73:3b:55:b0:8e:8b:68:1d:0f:32:1d:53: 0b:f0:ed:0f:02:e5:ef:be:f6:95:fd:ab:53:38:44: 97:08:01:1a:cb:7e:41:be:a2:df:e3:4e:0b:9e:ed: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:04:D7:F6:DA:73:71:E3:FB:9E:BB:11:58:76:40:FD:7A:D7:07:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:85:e4:a5:6e:0a:7e:73:d5:0c:3c:55:c5:f0:20:d7:ae:b3: ed:d2:61:51:74:57:42:16:29:f5:c0:ff:ef:b9:89:19:43:cf: c5:0f:45:f4:1a:a5:56:b2:57:1e:10:1e:4a:e3:8d:6d:8a:9b: 1a:64:07:67:db:12:68:7f:65:91:0b:ae:b1:33:87:cb:15:25: 1c:b0:7d:f2:1f:0c:b5:31:80:30:6d:a6:44:82:57:46:0b:c5: 7a:7c:5c:e4:d7:df:07:99:95:de:ba:c6:80:f0:cc:4e:65:0d: 83:fe:57:e6:a0:ee:d6:26:1a:0f:cc:ad:d5:b9:3b:fd:be:51: 85:db:dc:a1:05:f8:16:35:7c:17:a4:f9:f3:44:32:ad:0f:96: 3d:ed:af:9c:27:4f:bd:63:f2:63:f6:60:9f:31:65:6e:86:0e: be:87:41:47:3d:50:ee:fe:99:71:24:7c:8f:40:58:10:d3:5d: 35:31:80:8f:60:6f:c1:bf:d6:be:b7:aa:e7:49:91:ea:a7:62: 0d:37:0e:8e:67:7e:08:8d:61:51:f3:6a:68:b1:ee:c7:fe:12: 27:fe:f5:b5:09:01:c1:9b:8a:fb:bb:6a:48:3f:8f:08:a9:24: e2:8c:7a:87:74:27:7e:92:93:84:ef:bc:4c:a8:11:3f:66:35: 85:4b:84:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9ph7PlhyAsc3wXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWI0MmVmZmQtMmRmMy00NTk4LWI0NzEtOTFiNTQ0MDhhMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPSX0FyvJ2hFvOcQ9dJ5eQUhuo/iMXfAyU2H sP5A9qUXbmKYwHOa87c4kZ/WSIbLZgC7sHR+S7xRz1bDR9Nyee6wntCzMGVH+GpK 1sJ9wlzRO2koVCOyVtPUvEXGZ7/9/8EaktoAIh5vcQSw0tJ3+nBGFladAKkerBUF QtsZIyRIoNHlXOcRFs6datWJorpHQeuOhW3Msfz6+uhu2uO3chdr3O2NB8cAsi3M cpIj8ede4OTrzIlDeQq32LVnCDLx6pgTD5ZF0gYzTTkCxHJKSuSVLtNzO1Wwjoto HQ8yHVML8O0PAuXvvvaV/atTOESXCAEay35BvqLf404Lnu2EmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0E1/bac3Hj+567EVh2QP161wciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q4YTU5YjYtZDYxOS0z YzRjLWEzZDAtMGEyN2RiYjFmODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaF5KVuCn5z1Qw8VcXwINeus+3SYVF0V0IWKfXA/++5iRlDz8UPRfQa pVayVx4QHkrjjW2KmxpkB2fbEmh/ZZELrrEzh8sVJRywffIfDLUxgDBtpkSCV0YL xXp8XOTX3weZld66xoDwzE5lDYP+V+ag7tYmGg/MrdW5O/2+UYXb3KEF+BY1fBek +fNEMq0Plj3tr5wnT71j8mP2YJ8xZW6GDr6HQUc9UO7+mXEkfI9AWBDTXTUxgI9g b8G/1r63qudJkeqnYg03Do5nfgiNYVHzamix7sf+Eif+9bUJAcGbivu7akg/jwip JOKMeod0J36Sk4TvvEyoET9mNYVLhGk= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:55 2025 by rpki-client