$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa File: 68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa (raw, json) Hash identifier: 2S4o7aANSa0JCR5WeDEI/Svmea/ThiexMa248lz67EQ= Subject key identifier: 6B:AB:1F:3E:44:ED:09:36:CE:C4:4C:CD:9F:21:54:ED:38:D9:91:D0 Certificate issuer: /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1 Certificate serial: 010D0C9F432858491D717E599951FA2F689D65D0 Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20304 IP address blocks: 69.71.137.0/24 maxlen: 24 69.71.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7e:59:99:51:fa:2f:68:9d:65:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=8bf7311e-0068-4b7f-84a6-48729e93b3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:02:d0:07:45:ed:a2:5d:e9:5d:a8:c1:fa:bf: 4c:d9:16:08:3c:12:db:58:47:63:07:1a:83:22:b7: b5:99:9d:80:6a:67:a3:5b:0b:57:8d:34:aa:f9:5e: 9a:33:20:04:f1:a0:87:8e:de:e4:e7:31:41:32:5e: 57:7e:c6:79:0e:01:49:0a:9f:1b:19:ba:13:56:11: 4a:1e:76:b4:2d:8c:ac:00:00:40:a3:cf:c0:27:37: 35:d2:0d:93:31:b7:46:a9:f7:d1:6c:9d:54:a5:5b: 8b:0e:8c:ae:cd:49:cc:b1:cd:a7:8e:f4:3f:5c:50: 8e:21:8f:1f:96:4e:00:e9:d8:23:ea:73:1b:20:bc: 10:be:fc:20:af:10:ef:cc:3e:da:dc:28:a5:34:fe: 01:dc:65:a4:f3:fe:1e:42:f0:29:d6:e2:d2:69:f7: 0c:78:4d:da:a6:fd:67:e0:20:bb:bb:30:4a:1f:79: dd:80:f3:93:3b:53:ea:9b:e6:5e:63:8b:ab:0a:48: 14:44:b0:b4:ec:e8:03:f9:e7:17:25:be:bd:42:ac: 61:1d:a9:2d:12:40:a7:85:b4:ef:e6:23:da:bf:f5: 7b:02:12:d3:83:79:f9:ea:71:7a:e4:66:e5:11:0c: d6:7d:16:b7:6d:59:e1:a1:7c:d0:04:71:c0:9d:b9: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AB:1F:3E:44:ED:09:36:CE:C4:4C:CD:9F:21:54:ED:38:D9:91:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl X509v3 Authority Key Identifier: keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer sbgp-ipAddrBlock: critical IPv4: 69.71.137.0-69.71.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:c2:a0:3d:34:64:e2:ee:64:e8:aa:c6:fa:b8:be:df:a3:1e: 44:7e:ea:18:a4:bd:e9:f0:3f:76:e7:e0:83:5e:83:cc:3e:99: f0:d5:d2:70:d5:fe:6d:74:5b:71:cb:19:d0:ce:2c:c2:c4:26: 1b:97:99:20:ae:b5:d5:fc:63:d8:b3:7c:96:5e:02:cc:f3:09: ad:03:7f:bf:14:1e:42:ad:d4:5d:aa:36:e0:0a:e9:1f:86:95: 4a:4a:50:35:d1:ca:a9:51:25:2b:e6:a9:ee:34:e7:a5:4a:53: 67:b0:aa:85:c2:d3:b1:97:9b:bd:c6:cd:29:4f:18:41:6d:52: 25:75:5e:ad:44:e2:d9:18:55:f1:40:87:f6:ba:d6:12:4c:86: be:13:78:31:8d:66:78:88:2f:43:75:4f:b5:87:ef:70:ed:af: e7:e6:2c:21:37:fe:af:8d:eb:9a:76:d3:b0:0d:a3:53:69:af: b6:6a:01:c8:73:4f:11:1b:54:16:2d:36:e6:8f:b5:34:a5:01: b0:74:da:7a:4f:c5:ed:39:79:98:d9:7f:f7:45:85:b5:0d:9a: e5:b5:95:86:09:48:ad:89:bb:6b:9c:69:c3:f4:d9:85:e5:93: e9:f9:86:80:f1:d5:3d:6b:62:98:a8:db:cd:ee:54:6d:2c:97: 87:c3:dc:24 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkdcX5ZmVH6L2idZdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5YmMyNzQtZjc4OC00ZGE4LWEwYWEtNzQ0NjlhYzA2 ZWYxMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OGJmNzMxMWUtMDA2OC00YjdmLTg0YTYtNDg3MjllOTNiM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkALQB0Xtol3pXajB+r9M2RYIPBLbWEdjBxqD Ire1mZ2AamejWwtXjTSq+V6aMyAE8aCHjt7k5zFBMl5XfsZ5DgFJCp8bGboTVhFK Hna0LYysAABAo8/AJzc10g2TMbdGqffRbJ1UpVuLDoyuzUnMsc2njvQ/XFCOIY8f lk4A6dgj6nMbILwQvvwgrxDvzD7a3CilNP4B3GWk8/4eQvAp1uLSafcMeE3apv1n 4CC7uzBKH3ndgPOTO1Pqm+ZeY4urCkgURLC07OgD+ecXJb69QqxhHaktEkCnhbTv 5iPav/V7AhLTg3n56nF65GblEQzWfRa3bVnhoXzQBHHAnbnOMQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGurHz5E7Qk2zsRMzZ8hVO042ZHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZTli YzI3NC1mNzg4LTRkYTgtYTBhYS03NDQ2OWFjMDZlZjEvNjhhMjBjZTUtOGU5OC0z OWM2LTllNzUtM2UxNWNmMWQ5ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWU5YmMyNzQtZjc4OC00ZGE4LWEw YWEtNzQ0NjlhYzA2ZWYxLzVlOWJjMjc0LWY3ODgtNGRhOC1hMGFhLTc0NDY5YWMw NmVmMS5jcmwwHwYDVR0jBBgwFoAUfftfckjG7BbujH4auySbmYv7Io4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZTliYzI3NC1mNzg4LTRkYTgtYTBhYS03NDQ2 OWFjMDZlZjEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABFR4kD BABFR4owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAvcKgPTRk4u5k6KrG+ri+36MeRH7qGKS96fA/dufgg16D zD6Z8NXScNX+bXRbccsZ0M4swsQmG5eZIK611fxj2LN8ll4CzPMJrQN/vxQeQq3U Xao24ArpH4aVSkpQNdHKqVElK+ap7jTnpUpTZ7CqhcLTsZebvcbNKU8YQW1SJXVe rUTi2RhV8UCH9rrWEkyGvhN4MY1meIgvQ3VPtYfvcO2v5+YsITf+r43rmnbTsA2j U2mvtmoByHNPERtUFi025o+1NKUBsHTaek/F7Tl5mNl/90WFtQ2a5bWVhglIrYm7 a5xpw/TZheWT6fmGgPHVPWtimKjbze5UbSyXh8PcJA== -----END CERTIFICATE-----Generated at Sun Apr 6 19:15:40 2025 by rpki-client