$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa File: f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa (raw, json) Hash identifier: lsT4pbqxZqF2sG7oTU9m6NKW0+n4P+XzNUhVKujbw6E= Subject key identifier: 1B:D2:A0:21:E1:FD:DD:ED:8E:6B:65:34:24:E3:CF:94:86:D3:B3:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6C461E8C22B5D1DE3B380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33659 IP address blocks: 68.86.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:c4:61:e8:c2:2b:5d:1d:e3:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=21090b0c-3444-47a3-8d64-13366a0455ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e0:ae:22:a2:56:96:17:dd:20:74:dd:41:99: f5:05:67:82:5e:2b:da:59:f3:cf:3e:40:c9:75:7a: d6:1c:40:a5:6d:d9:93:bd:fb:71:b3:7e:55:e0:7b: e1:cf:d2:42:0e:59:a9:19:c1:05:85:a0:f9:c3:c7: 72:09:46:6d:01:61:be:71:6a:24:d1:d0:e9:11:4e: 75:8e:d4:0a:74:f1:31:3c:8b:99:9e:3b:f1:cb:a4: db:ee:c6:53:bc:20:c9:3c:5d:a9:92:4a:ff:59:45: 51:2c:5b:d5:63:a9:fc:6c:12:93:6c:28:ad:0a:47: e7:99:83:17:84:eb:8f:54:6e:ba:47:fc:a0:2d:7b: 25:14:e7:c5:96:82:f7:41:cc:54:9e:e0:20:d3:30: 31:46:36:5e:88:d5:65:4b:b0:6c:0b:bd:1e:85:6d: 68:90:21:02:4f:33:a0:af:2e:08:2f:49:fc:68:d3: 4a:2f:94:c7:f5:ac:ba:ff:66:60:b2:8c:dc:dc:3e: ab:9d:c3:8f:77:51:f8:39:e8:f3:f1:ed:c2:3b:8a: 99:45:cb:1b:03:8a:bd:88:fa:df:0c:95:f4:9d:e2: 75:70:66:1c:b9:48:6a:7c:2c:b5:05:d0:10:c8:a4: ef:fb:b7:a7:04:9c:f2:76:ef:7d:33:ce:5e:b7:65: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:A0:21:E1:FD:DD:ED:8E:6B:65:34:24:E3:CF:94:86:D3:B3:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7b:1b:6c:b8:cc:3e:73:45:e5:e9:c4:b1:3e:c4:f1:aa:68: fc:20:f0:19:b8:85:c6:45:b9:c7:d7:a7:16:ea:f5:97:c5:85: ed:30:80:fd:c3:2b:8d:a9:33:ff:03:3a:8f:4b:a3:2f:30:18: ac:1b:39:db:ac:29:27:00:65:b2:97:5f:22:69:27:a7:bb:d1: 06:5c:c0:c0:0f:d4:36:a6:83:a4:08:59:e4:93:48:2a:e5:48: ae:1f:b6:78:01:40:d2:38:6c:32:4c:ca:31:5e:57:26:f1:c7: e6:75:09:d0:80:e2:1e:42:b4:b8:13:25:30:b4:47:8a:58:5a: 66:86:33:b9:d2:b2:7d:29:d6:9c:3d:57:05:cb:13:3a:32:f9: 11:ae:10:ba:73:80:11:a2:3d:e5:06:33:a3:d1:ea:08:a4:43: ad:3c:d1:ac:d8:35:51:12:c8:7f:07:93:84:79:f4:e2:4b:a9: ba:53:2e:65:e7:7f:d1:82:dc:b5:ae:72:76:2c:f7:0d:6e:bc: 98:56:00:95:2e:19:ba:55:f4:63:9b:d3:5e:a7:68:bd:6c:25: 54:96:f6:43:fc:40:01:af:a2:ba:89:60:28:14:f3:ac:c0:51: cc:bd:14:4a:7a:78:95:20:77:2f:cb:1d:25:d5:32:90:29:bf: f4:ce:51:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9psRh6MIrXR3js4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjEwOTBiMGMtMzQ0NC00N2EzLThkNjQtMTMzNjZhMDQ1NWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOCuIqJWlhfdIHTdQZn1BWeCXivaWfPPPkDJ dXrWHEClbdmTvftxs35V4Hvhz9JCDlmpGcEFhaD5w8dyCUZtAWG+cWok0dDpEU51 jtQKdPExPIuZnjvxy6Tb7sZTvCDJPF2pkkr/WUVRLFvVY6n8bBKTbCitCkfnmYMX hOuPVG66R/ygLXslFOfFloL3QcxUnuAg0zAxRjZeiNVlS7BsC70ehW1okCECTzOg ry4IL0n8aNNKL5TH9ay6/2Zgsozc3D6rncOPd1H4Oejz8e3CO4qZRcsbA4q9iPrf DJX0neJ1cGYcuUhqfCy1BdAQyKTv+7enBJzydu99M85et2U27QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvSoCHh/d3tjmtlNCTjz5SG07MMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdkMmFlNDYtM2Q0Yy0z MmM2LWExNzctOGUxMzI4ZTg0ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx7G2y4zD5zReXpxLE+xPGqaPwg8Bm4hcZFucfXpxbq9ZfFhe0wgP3D K42pM/8DOo9Loy8wGKwbOdusKScAZbKXXyJpJ6e70QZcwMAP1Damg6QIWeSTSCrl SK4ftngBQNI4bDJMyjFeVybxx+Z1CdCA4h5CtLgTJTC0R4pYWmaGM7nSsn0p1pw9 VwXLEzoy+RGuELpzgBGiPeUGM6PR6gikQ6080azYNVESyH8Hk4R59OJLqbpTLmXn f9GC3LWucnYs9w1uvJhWAJUuGbpV9GOb016naL1sJVSW9kP8QAGvorqJYCgU86zA Ucy9FEp6eJUgdy/LHSXVMpApv/TOUVk= -----END CERTIFICATE-----Generated at Mon Apr 28 02:17:11 2025 by rpki-client