$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa File: cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa (raw, json) Hash identifier: VQ9feqkKBu8Grz/1gK4WeXHnLFp1q8gtyCAjaN1AsKw= Subject key identifier: CC:5D:E6:20:0D:C6:D9:85:8D:F0:18:D9:A2:8A:3D:22:6B:EF:EE:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F78B0525D29F26A9CB3060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 68.41.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8b:05:25:d2:9f:26:a9:cb:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4edab5c5-204d-42ba-ab54-a56ab8d17992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:72:6b:05:71:5b:ed:5c:7e:09:ed:ee:01: f5:62:c2:c5:67:6c:ab:31:a9:42:d5:89:c6:da:1e: e3:65:93:69:d2:ba:2e:9a:ba:da:cf:2d:da:c0:97: 8a:4f:33:2f:5f:2c:7e:a5:16:52:7a:b8:5a:81:21: ae:e5:d6:e9:90:e1:b6:e8:16:9d:1b:e8:ba:36:b3: bd:8f:8b:66:5f:53:d5:71:02:2e:f5:fd:4f:d5:d6: cc:6d:bb:ed:32:e5:5d:8b:44:fa:9d:21:04:91:f6: 9c:b6:eb:9a:1f:a2:b6:b9:5d:a9:ec:91:27:f7:0c: ee:bb:7f:e3:94:1c:54:e1:e5:26:dd:b0:ae:d8:0d: 22:f5:3c:68:0a:83:0a:9d:1f:2f:5e:4d:be:3d:1e: e1:12:12:9f:66:84:c6:0b:ce:5f:a3:22:e4:cd:12: a0:61:36:40:b7:1f:89:ee:a5:0f:63:de:2f:42:08: b5:37:f9:80:ca:6c:2a:9c:64:9d:ba:50:b7:68:b0: d5:40:47:2e:8b:5e:c1:ec:5f:66:15:da:f5:49:41: de:29:ac:71:78:1e:92:7d:31:be:34:38:08:c2:44: f2:27:3b:86:74:ba:33:58:f0:68:46:f0:69:45:0a: c0:0e:07:8b:be:76:03:c9:27:3a:14:bd:47:9b:6b: f1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:E6:20:0D:C6:D9:85:8D:F0:18:D9:A2:8A:3D:22:6B:EF:EE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:57:26:a2:70:26:91:eb:d4:8a:2b:de:54:ff:eb:a8:46:a9: 88:60:54:97:40:18:74:89:94:a4:42:7f:17:57:2a:50:f5:f9: 7a:e3:d7:63:62:4b:a2:2c:5c:22:4e:3e:22:e1:f7:f4:ba:12: a9:59:d4:02:74:ff:53:c8:f6:cf:f0:a6:9e:1a:fd:7f:76:ba: 18:a1:ed:7a:a9:10:f5:8f:ae:63:b1:d6:cc:90:0b:74:b0:d4: 28:b2:e5:49:55:76:22:87:f8:c7:23:bd:81:0c:9b:8a:07:a9: e3:c0:bc:54:d8:6d:9b:0a:b4:4f:14:86:91:1c:6f:48:47:9a: 3d:24:59:bb:c2:9f:53:c4:0f:a2:7c:6a:e3:c8:04:e5:d2:4f: 9f:df:18:ea:1b:b2:e6:f2:77:5a:95:3f:aa:f2:ff:ea:44:8a: 76:04:8b:5b:0a:ee:09:dc:d5:d9:d2:c9:8d:73:5e:37:ff:76: 64:4a:9b:c2:88:04:f4:3d:4d:d4:7b:ad:89:bd:f1:4e:06:a5: 83:d0:0a:be:64:bb:89:53:fc:e1:b0:6d:b9:52:3a:ab:c7:29: fd:9c:1d:e1:e7:bf:3d:a8:fd:af:1a:42:a8:a1:7c:4b:20:05: 8e:44:4a:e6:8c:39:45:47:1f:b6:57:21:cd:56:db:57:f4:12: da:69:56:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094sFJdKfJqnLMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NGVkYWI1YzUtMjA0ZC00MmJhLWFiNTQtYTU2YWI4ZDE3OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwlyawVxW+1cfgnt7gH1YsLFZ2yrMalC1YnG 2h7jZZNp0roumrrazy3awJeKTzMvXyx+pRZSerhagSGu5dbpkOG26BadG+i6NrO9 j4tmX1PVcQIu9f1P1dbMbbvtMuVdi0T6nSEEkfactuuaH6K2uV2p7JEn9wzuu3/j lBxU4eUm3bCu2A0i9TxoCoMKnR8vXk2+PR7hEhKfZoTGC85foyLkzRKgYTZAtx+J 7qUPY94vQgi1N/mAymwqnGSdulC3aLDVQEcui17B7F9mFdr1SUHeKaxxeB6SfTG+ NDgIwkTyJzuGdLozWPBoRvBpRQrADgeLvnYDySc6FL1Hm2vxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxd5iANxtmFjfAY2aKKPSJr7+74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZiNWM5MmUtYjkzNC0z NTY0LWIyZGEtYjMyYmQ4ZDUwNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZXJqJwJpHr1Ior3lT/66hGqYhgVJdAGHSJlKRCfxdXKlD1+Xrj12Ni S6IsXCJOPiLh9/S6EqlZ1AJ0/1PI9s/wpp4a/X92uhih7XqpEPWPrmOx1syQC3Sw 1Ciy5UlVdiKH+McjvYEMm4oHqePAvFTYbZsKtE8UhpEcb0hHmj0kWbvCn1PED6J8 auPIBOXST5/fGOobsubyd1qVP6ry/+pEinYEi1sK7gnc1dnSyY1zXjf/dmRKm8KI BPQ9TdR7rYm98U4GpYPQCr5ku4lT/OGwbblSOqvHKf2cHeHnvz2o/a8aQqihfEsg BY5ESuaMOUVHH7ZXIc1W21f0EtppVpE= -----END CERTIFICATE-----Generated at Mon Apr 28 11:53:42 2025 by rpki-client