$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa File: c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa (raw, json) Hash identifier: fxVQ5s3cwl67jpIjNfgTKRcv8+qEGD0M9F5jBHcz7LE= Subject key identifier: C2:4D:E4:89:E6:CA:CA:B3:6B:1A:3D:6F:A7:83:32:E7:BF:1B:48:CE Certificate issuer: /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7 Certificate serial: 010D0C9F432858497AD9C05361DF058910ECB140 Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 6079 IP address blocks: 68.69.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:c0:53:61:df:05:89:10:ec:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=5a45ff8f-f052-4b86-a6cb-b6e7ef03731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:c4:b9:58:c2:4f:21:16:37:4d:af:33:98: b9:82:12:3b:ba:31:cf:c9:dd:b7:a2:cc:59:e2:6a: cd:a7:10:d5:7f:bd:4c:81:f8:39:41:cb:2b:83:4b: 90:f0:fa:d3:6f:e4:8a:33:5e:0c:06:9d:a1:50:85: 80:aa:32:77:55:d9:77:5e:94:b1:5a:5d:27:24:83: 4b:c2:23:1e:c6:aa:e4:7e:b5:47:25:7b:1c:7d:ec: 49:44:a8:6f:8c:ed:5a:78:b4:22:00:db:2c:c3:34: 4b:98:c6:72:0f:11:91:c5:e5:8a:31:09:94:30:a6: df:53:f9:d0:08:43:ad:6e:06:c0:83:02:3e:78:06: 08:72:ee:6b:3f:01:da:44:f0:ab:6d:d2:26:3a:21: e3:8c:b7:62:30:bd:d4:30:51:b1:08:10:74:b0:1e: 26:df:62:77:9b:2e:45:85:7c:a4:cd:3a:07:93:42: 08:85:7f:bf:33:dc:6a:39:44:a2:e3:69:ce:77:14: c0:d9:cd:59:79:96:37:ce:99:dc:d0:63:bd:f8:48: 31:42:5b:4c:de:04:74:00:1d:0c:ba:74:22:bf:e1: 88:cf:a2:94:79:31:4e:fa:a1:c3:53:ae:2b:7f:3a: 66:e5:3e:4a:ee:ba:8e:38:7c:48:4d:fb:76:a0:65: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:E4:89:E6:CA:CA:B3:6B:1A:3D:6F:A7:83:32:E7:BF:1B:48:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/c0cfa22f-38bd-3df0-ac6e-f4c5baa2a5bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl X509v3 Authority Key Identifier: keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer sbgp-ipAddrBlock: critical IPv4: 68.69.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:d7:3f:c0:1d:4f:60:53:b9:fe:74:64:b4:55:48:80:22:fd: 03:35:c0:67:67:c8:cf:50:c5:26:fe:b3:d3:5e:2f:18:cb:37: e2:1f:ba:5d:18:54:15:62:bd:2c:d6:d2:71:a7:cc:59:34:28: f9:f7:d7:f1:1a:c3:6d:07:f0:8f:96:d1:18:1d:52:4e:c3:62: 31:f0:5a:7b:7e:6b:7f:01:fa:b2:5f:6f:8a:1a:3c:dc:2f:63: 57:9d:da:45:cc:6a:94:1a:a2:f5:3d:54:b1:c4:12:e0:d8:35: 57:cc:ba:57:6d:96:9c:d7:00:6b:89:48:e9:4b:47:ac:8c:30: 24:12:4d:0c:4c:8b:59:f4:13:96:56:dc:44:e9:c8:f9:84:87: 99:a5:b3:0e:97:ae:33:5f:27:74:9e:5c:2e:f0:75:2f:71:90: f3:0e:49:43:e1:44:8b:14:d2:3c:46:e3:d9:a7:92:ca:43:42: b6:00:0e:90:e2:29:f7:09:b2:91:c0:89:10:eb:04:df:7c:a4: 78:7c:ad:6b:3f:e3:8d:45:e4:19:49:34:af:4b:d5:45:fe:26: 40:4e:29:9a:45:63:28:1b:46:81:de:c6:ae:b2:9c:24:82:fd: 30:d3:2c:6d:b4:13:f6:85:21:7d:4a:99:7d:dc:97:38:77:84: 6e:ab:e5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62cBTYd8FiRDssUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk1YTZhYzItNzgxYS00NTk5LWJlNmMtMjhiNmJjMjg1 N2M3MB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk NWE0NWZmOGYtZjA1Mi00Yjg2LWE2Y2ItYjZlN2VmMDM3MzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6fEuVjCTyEWN02vM5i5ghI7ujHPyd23osxZ 4mrNpxDVf71Mgfg5Qcsrg0uQ8PrTb+SKM14MBp2hUIWAqjJ3Vdl3XpSxWl0nJINL wiMexqrkfrVHJXscfexJRKhvjO1aeLQiANsswzRLmMZyDxGRxeWKMQmUMKbfU/nQ CEOtbgbAgwI+eAYIcu5rPwHaRPCrbdImOiHjjLdiML3UMFGxCBB0sB4m32J3my5F hXykzToHk0IIhX+/M9xqOUSi42nOdxTA2c1ZeZY3zpnc0GO9+EgxQltM3gR0AB0M unQiv+GIz6KUeTFO+qHDU64rfzpm5T5K7rqOOHxITft2oGWYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJN5Inmysqzaxo9b6eDMue/G0jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wOTVh NmFjMi03ODFhLTQ1OTktYmU2Yy0yOGI2YmMyODU3YzcvYzBjZmEyMmYtMzhiZC0z ZGYwLWFjNmUtZjRjNWJhYTJhNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDk1YTZhYzItNzgxYS00NTk5LWJl NmMtMjhiNmJjMjg1N2M3LzA5NWE2YWMyLTc4MWEtNDU5OS1iZTZjLTI4YjZiYzI4 NTdjNy5jcmwwHwYDVR0jBBgwFoAUc/bEO6SXRroAJs2YBsfQINFl8UUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wOTVhNmFjMi03ODFhLTQ1OTktYmU2Yy0yOGI2 YmMyODU3YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMzXP8AdT2BTuf50ZLRVSIAi/QM1wGdnyM9QxSb+s9NeLxjLN+Iful0Y VBVivSzW0nGnzFk0KPn31/Eaw20H8I+W0RgdUk7DYjHwWnt+a38B+rJfb4oaPNwv Y1ed2kXMapQaovU9VLHEEuDYNVfMuldtlpzXAGuJSOlLR6yMMCQSTQxMi1n0E5ZW 3ETpyPmEh5mlsw6XrjNfJ3SeXC7wdS9xkPMOSUPhRIsU0jxG49mnkspDQrYADpDi KfcJspHAiRDrBN98pHh8rWs/441F5BlJNK9L1UX+JkBOKZpFYygbRoHexq6ynCSC /TDTLG20E/aFIX1KmX3clzh3hG6r5RE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:44:44 2025 by rpki-client