$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa File: e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa (raw, json) Hash identifier: MYjNzFSziNtE3elJPaHgkDvYB8UG/A1mh94pyDZtluM= Subject key identifier: 20:F3:E4:2E:D8:8B:62:4D:1D:C4:EC:0A:2F:0F:0B:C2:A8:58:E1:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584992946D30CF6F7AE8AB057FE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 68.58.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:6d:30:cf:6f:7a:e8:ab:05:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=5b68f150-bfb4-4f40-a352-57524daf6c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:e6:63:e9:5d:f7:18:53:0a:30:fc:24:01: 95:bd:8e:5f:8c:ec:bb:a4:c8:d0:8a:63:1e:54:d3: db:24:b5:62:8f:be:6b:08:fb:be:ce:5b:13:e0:1e: e6:a1:e7:a9:b8:ee:f8:97:16:72:25:67:9a:17:cf: b7:ce:0e:b2:26:66:d4:40:81:cb:90:96:56:f4:3f: a6:7f:aa:a0:19:19:06:01:8d:73:a8:e1:1d:87:70: 82:8a:cc:be:5f:ba:69:86:35:b9:82:5f:3e:58:31: 84:58:16:0c:40:6f:68:1e:bf:8d:94:fc:2a:9a:76: f7:4d:f6:c5:94:09:d6:79:c3:a4:b4:f5:13:71:98: 67:60:ed:7e:c6:b4:87:ad:26:a7:df:de:39:2d:55: 95:66:c5:ca:d5:44:e6:97:f6:1e:3f:cc:44:48:7f: a4:b8:17:8b:39:53:b3:f0:ca:98:2a:28:b2:ac:4a: 34:75:8f:57:2b:00:db:84:5d:1a:dc:f4:72:dd:ee: 93:11:59:a2:d2:06:40:67:98:6e:05:b1:ed:74:d9: ed:57:7d:f2:61:a8:94:c8:35:d3:f8:28:a0:2c:a9: e7:b6:10:34:03:35:51:a8:be:b2:97:92:05:c1:42: b2:8d:cf:fc:f1:a4:96:93:c6:8c:a7:da:da:80:a4: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F3:E4:2E:D8:8B:62:4D:1D:C4:EC:0A:2F:0F:0B:C2:A8:58:E1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:af:a7:60:5b:37:39:05:70:39:33:c3:08:aa:cc:92:2b:18: 08:c8:d5:b5:b0:7b:54:32:db:1b:69:2a:e3:64:43:76:f9:af: 49:a3:60:03:dc:12:17:ca:4d:75:1f:d3:c2:0f:53:14:4b:0f: 8d:43:97:60:c8:3b:77:44:c7:ad:2e:11:0b:69:95:b1:46:3e: 4f:26:39:f9:05:2f:ce:85:8a:57:08:4c:ed:72:44:ea:58:75: 92:07:89:e8:8e:39:b1:90:10:78:0f:54:19:d6:ec:e8:35:29: fe:53:e1:f8:bc:e4:70:fc:e5:7c:15:84:40:8f:01:c7:b1:f6: 45:a0:9d:9d:50:0f:79:1f:63:f3:88:b1:fd:12:c2:11:19:e5: 74:72:7f:f7:5c:bd:8c:50:7f:79:fb:58:7a:f7:96:d6:27:26: 21:8d:f6:67:dd:db:2d:5d:a4:d9:c1:6b:10:49:57:9d:b6:8e: 9e:1e:ae:3c:15:5b:b4:b6:c5:90:b9:0b:b0:21:81:f2:a1:91: 39:99:fb:c3:af:7a:e9:d4:a9:77:c5:2d:ec:90:3e:eb:70:6a: d5:1b:d2:04:45:8b:99:ea:96:77:ab:29:9d:d1:73:98:a8:2d: 4a:1e:eb:20:ec:f9:00:70:3a:9f:fc:d6:5c:79:45:96:42:d7: 48:13:27:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlG0wz2966KsFf+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NWI2OGYxNTAtYmZiNC00ZjQwLWEzNTItNTc1MjRkYWY2YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh/mY+ld9xhTCjD8JAGVvY5fjOy7pMjQimMe VNPbJLVij75rCPu+zlsT4B7moeepuO74lxZyJWeaF8+3zg6yJmbUQIHLkJZW9D+m f6qgGRkGAY1zqOEdh3CCisy+X7pphjW5gl8+WDGEWBYMQG9oHr+NlPwqmnb3TfbF lAnWecOktPUTcZhnYO1+xrSHrSan3945LVWVZsXK1UTml/YeP8xESH+kuBeLOVOz 8MqYKiiyrEo0dY9XKwDbhF0a3PRy3e6TEVmi0gZAZ5huBbHtdNntV33yYaiUyDXT +CigLKnnthA0AzVRqL6yl5IFwUKyjc/88aSWk8aMp9ragKRJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDz5C7Yi2JNHcTsCi8PC8KoWOEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTY4MDQwOGUtYTViYy0z ZDVmLTgxMzAtN2RiNWY0ZDBkMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2vp2BbNzkFcDkzwwiqzJIrGAjI1bWwe1Qy2xtpKuNkQ3b5r0mjYAPc EhfKTXUf08IPUxRLD41Dl2DIO3dEx60uEQtplbFGPk8mOfkFL86FilcITO1yROpY dZIHieiOObGQEHgPVBnW7Og1Kf5T4fi85HD85XwVhECPAcex9kWgnZ1QD3kfY/OI sf0SwhEZ5XRyf/dcvYxQf3n7WHr3ltYnJiGN9mfd2y1dpNnBaxBJV522jp4erjwV W7S2xZC5C7AhgfKhkTmZ+8OveunUqXfFLeyQPutwatUb0gRFi5nqlnerKZ3Rc5io LUoe6yDs+QBwOp/81lx5RZZC10gTJ5I= -----END CERTIFICATE-----Generated at Mon Apr 28 23:46:31 2025 by rpki-client