$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db96400-d6b6-3d8a-b98c-e8bbb60720b3.roa File: 8db96400-d6b6-3d8a-b98c-e8bbb60720b3.roa (raw, json) Hash identifier: 9N18/W1N/EF3TFi7aE0sw8H3khR4+lbOlt+y6fAlHws= Subject key identifier: EE:6E:07:F2:E1:08:69:7B:AB:F5:A6:A3:5B:50:DB:95:2C:6D:04:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB087CCCF83491AEC8DB400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db96400-d6b6-3d8a-b98c-e8bbb60720b3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 68.82.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:87:cc:cf:83:49:1a:ec:8d:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=0ae7d264-c3fb-427b-bc7f-93ce5cd1e91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:17:6b:7f:80:2a:0b:ff:d8:96:46:48:ea: ec:6c:91:53:b4:ce:e4:47:a6:17:68:05:33:8b:1e: ec:e1:fb:7c:50:cc:54:f5:27:18:dd:8c:25:7a:90: 2c:b0:5e:5a:6f:a9:2d:f8:fd:07:ec:d5:8e:44:6d: ab:09:a8:46:06:31:55:6a:49:dd:16:92:39:f1:bc: e6:d5:85:ea:ba:88:d5:4e:ad:0d:42:8f:77:04:10: 09:68:e8:39:23:06:b7:4b:98:19:08:9a:77:d0:0e: bb:39:dd:af:a8:86:2a:5e:70:60:c8:a3:8a:ef:e9: 5b:55:22:0b:6e:94:78:17:8e:0c:b7:26:fb:1b:b1: 36:65:14:66:49:64:c7:ab:9b:d6:ef:08:a8:b7:de: c9:ca:39:7f:e1:ec:14:23:26:20:32:ee:c3:b5:dd: 8d:e3:a7:48:13:d7:1c:a5:18:c8:cf:ed:32:60:14: 21:ac:7f:69:5a:7e:bb:a5:52:d6:f1:de:1b:07:48: 75:fe:40:a2:f8:a6:7b:34:eb:6e:b6:95:c5:f2:0f: 03:dd:44:60:65:9e:19:0d:d6:cc:8f:f8:19:fe:58: af:10:fa:cb:6f:5f:45:1e:8a:0d:a6:41:8a:e8:9b: d7:da:5e:a8:b1:8f:71:a7:7e:d3:ff:7f:50:78:4b: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6E:07:F2:E1:08:69:7B:AB:F5:A6:A3:5B:50:DB:95:2C:6D:04:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db96400-d6b6-3d8a-b98c-e8bbb60720b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.82.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2a:85:d3:db:6c:3e:ec:4f:8a:61:fa:4b:cb:4d:94:1f:90: 34:69:2b:d5:70:45:49:a3:fd:00:77:4b:61:20:79:33:a9:f4: 3f:4d:43:bb:b7:4e:08:09:be:f6:99:65:5d:d0:7a:21:61:25: fc:e8:2b:a8:1e:d9:38:87:3d:a2:c2:44:74:0e:f4:c3:53:f5: 97:1b:61:84:19:bd:9a:c6:02:c3:75:3f:67:9a:17:46:17:73: 84:90:24:df:22:f5:2b:71:d6:ca:d8:6d:a2:09:b8:57:91:d1: 82:cc:7d:51:b7:b1:6e:20:50:2b:68:06:5e:a9:9b:f2:a2:3a: 11:62:e7:5e:f5:bb:2c:9e:69:40:0d:2e:38:ed:84:e2:0b:af: 78:bd:f8:d0:c5:11:8b:2a:61:35:e3:77:1a:1c:1f:a2:c5:64: 34:39:5a:22:76:4e:81:aa:25:f4:5e:62:73:a5:f6:38:57:6e: 90:0e:3f:ea:7b:cd:cb:dc:33:2f:c0:44:80:f5:23:f7:67:6d: f9:21:db:e1:ab:7c:19:bd:dc:ad:67:b2:3e:03:49:74:be:36: ed:73:94:39:20:b9:ec:52:50:ca:84:41:be:58:13:75:35:04: a7:c5:4c:4a:07:cf:35:08:d4:69:58:d4:dc:d2:cc:75:3c:11: 5c:5d:2a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssIfMz4NJGuyNtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MGFlN2QyNjQtYzNmYi00MjdiLWJjN2YtOTNjZTVjZDFlOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysAXa3+AKgv/2JZGSOrsbJFTtM7kR6YXaAUz ix7s4ft8UMxU9ScY3YwlepAssF5ab6kt+P0H7NWORG2rCahGBjFVakndFpI58bzm 1YXquojVTq0NQo93BBAJaOg5Iwa3S5gZCJp30A67Od2vqIYqXnBgyKOK7+lbVSIL bpR4F44Mtyb7G7E2ZRRmSWTHq5vW7wiot97Jyjl/4ewUIyYgMu7Dtd2N46dIE9cc pRjIz+0yYBQhrH9pWn67pVLW8d4bB0h1/kCi+KZ7NOtutpXF8g8D3URgZZ4ZDdbM j/gZ/livEPrLb19FHooNpkGK6JvX2l6osY9xp37T/39QeEvyVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5uB/LhCGl7q/Wmo1tQ25UsbQS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRiOTY0MDAtZDZiNi0z ZDhhLWI5OGMtZThiYmI2MDcyMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAqhdPbbD7sT4ph+kvLTZQfkDRpK9VwRUmj/QB3S2EgeTOp9D9NQ7u3 TggJvvaZZV3QeiFhJfzoK6ge2TiHPaLCRHQO9MNT9ZcbYYQZvZrGAsN1P2eaF0YX c4SQJN8i9Stx1srYbaIJuFeR0YLMfVG3sW4gUCtoBl6pm/KiOhFi5171uyyeaUAN LjjthOILr3i9+NDFEYsqYTXjdxocH6LFZDQ5WiJ2ToGqJfReYnOl9jhXbpAOP+p7 zcvcMy/ARID1I/dnbfkh2+GrfBm93K1nsj4DSXS+Nu1zlDkguexSUMqEQb5YE3U1 BKfFTEoHzzUI1GlY1NzSzHU8EVxdKjU= -----END CERTIFICATE-----Generated at Fri May 9 18:49:35 2025 by rpki-client