$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa File: 24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa (raw, json) Hash identifier: wU+B2lOi6oRPLXxRXeUAumZOWBv6nTQySuhK7S4rTKA= Subject key identifier: 7D:72:0C:70:74:94:B0:B5:FD:71:BC:ED:F8:E7:85:DA:C7:59:A4:30 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F43285849512401B5F0D63774B414F980 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa Signing time: Wed 26 Mar 2025 14:26:51 +0000 ROA not before: Wed 26 Mar 2025 14:26:51 +0000 ROA not after: Tue 24 Jun 2025 14:26:51 +0000 asID: 397423 IP address blocks: 68.233.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:24:01:b5:f0:d6:37:74:b4:14:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Mar 26 14:26:51 2025 GMT Not After : Jun 24 14:26:51 2025 GMT Subject: CN=8ded5561-e8fa-4666-b93e-a91bfcca3b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:74:02:10:d0:b3:90:11:a8:8b:0d:69:80: 81:9e:5f:95:b0:c1:78:b7:12:37:a3:d8:ee:aa:d3: 38:be:f1:1d:c6:db:55:19:1a:3a:e8:44:c8:59:2d: 56:e3:e3:7b:37:b5:a8:23:5d:e2:0d:a2:29:0b:af: db:47:68:65:2e:9e:82:5d:fb:b7:ea:67:b1:e3:a7: 7d:e5:8f:ab:5c:5f:23:0f:28:ef:30:21:3f:64:1d: c9:63:e3:55:69:31:62:d3:80:b7:5a:d5:aa:41:5e: 0d:47:b7:b9:2c:22:26:d5:84:34:b9:4f:39:d0:5f: 89:34:5a:bf:0b:42:90:f5:fa:68:6f:d8:c1:67:70: f3:08:3e:29:8d:1a:54:cf:ec:5a:7c:7e:08:70:ae: ac:f8:9c:f5:a0:6c:ad:4e:11:d6:3e:df:0c:83:5a: c9:3e:e9:37:82:b5:1c:73:75:00:b1:42:71:32:f3: 8b:ac:2f:26:3d:c3:3b:2b:e7:4f:49:96:ac:75:5e: 15:d1:c3:03:eb:92:b1:9c:c3:37:51:0c:7c:27:1a: 2d:7e:ff:a8:8e:a5:da:61:41:f3:e8:2e:79:ca:30: bd:1e:7d:b7:22:93:d3:6b:f0:f0:b2:21:c6:fa:98: 4c:43:84:6b:60:8c:90:2b:48:96:3e:79:33:18:9a: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:72:0C:70:74:94:B0:B5:FD:71:BC:ED:F8:E7:85:DA:C7:59:A4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/24b6be5f-fd40-3f9c-8e6b-22433d4d72d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:60:5e:de:0d:dc:9d:29:a0:6f:fd:4a:1f:4e:c4:41:15:5e: d0:82:8f:34:f1:16:77:6d:47:77:d4:11:21:2b:2b:cf:40:59: 66:25:8e:0d:40:8d:f0:bb:3b:9a:c1:51:3b:d0:8a:a1:63:35: 2f:8e:b8:9a:a9:5c:eb:cb:41:d3:d8:8c:1b:58:ae:7e:13:1a: 7f:8e:44:68:14:28:65:9b:cf:6b:d3:f2:93:cd:a9:e3:f3:79: 33:d9:02:a4:1b:a7:6a:54:e3:0d:44:46:d8:37:b8:97:2f:77: 58:eb:70:38:be:11:c6:28:7a:15:5d:dd:08:43:0f:e1:06:ba: ee:4f:f9:01:b1:c6:3d:e8:44:a5:68:ef:48:a5:ca:4e:3f:6c: 72:36:8f:51:f4:5e:f1:d8:13:50:c2:cb:76:eb:b6:cc:cd:47: 70:6b:6a:aa:14:ef:d7:90:72:58:22:d7:88:e7:1f:0a:a1:55: 0f:d5:54:2a:6b:27:ce:ff:29:9c:02:71:0d:4b:85:d5:f6:32: 2c:82:30:14:83:82:b5:b9:33:00:62:ff:b7:38:32:92:c5:81: 87:1f:5a:83:c5:a5:cb:05:9a:91:6f:f7:34:25:1b:df:62:dc: 0e:43:33:b1:35:6f:55:26:03:d6:86:fd:7c:ad:9c:7f:b1:df: 89:43:97:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRJAG18NY3dLQU+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDMyNjE0MjY1MVoXDTI1MDYyNDE0MjY1MVowLzEtMCsGA1UEAxMk OGRlZDU1NjEtZThmYS00NjY2LWI5M2UtYTkxYmZjY2EzYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3J0AhDQs5ARqIsNaYCBnl+VsMF4txI3o9ju qtM4vvEdxttVGRo66ETIWS1W4+N7N7WoI13iDaIpC6/bR2hlLp6CXfu36mex46d9 5Y+rXF8jDyjvMCE/ZB3JY+NVaTFi04C3WtWqQV4NR7e5LCIm1YQ0uU850F+JNFq/ C0KQ9fpob9jBZ3DzCD4pjRpUz+xafH4IcK6s+Jz1oGytThHWPt8Mg1rJPuk3grUc c3UAsUJxMvOLrC8mPcM7K+dPSZasdV4V0cMD65KxnMM3UQx8Jxotfv+ojqXaYUHz 6C55yjC9Hn23IpPTa/DwsiHG+phMQ4RrYIyQK0iWPnkzGJoPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1yDHB0lLC1/XG87fjnhdrHWaQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMjRiNmJlNWYtZmQ0MC0z ZjljLThlNmItMjI0MzNkNGQ3MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtgXt4N3J0poG/9Sh9OxEEVXtCCjzTxFndtR3fUESErK89AWWYljg1A jfC7O5rBUTvQiqFjNS+OuJqpXOvLQdPYjBtYrn4TGn+ORGgUKGWbz2vT8pPNqePz eTPZAqQbp2pU4w1ERtg3uJcvd1jrcDi+EcYoehVd3QhDD+EGuu5P+QGxxj3oRKVo 70ilyk4/bHI2j1H0XvHYE1DCy3brtszNR3BraqoU79eQclgi14jnHwqhVQ/VVCpr J87/KZwCcQ1LhdX2MiyCMBSDgrW5MwBi/7c4MpLFgYcfWoPFpcsFmpFv9zQlG99i 3A5DM7E1b1UmA9aG/XytnH+x34lDl4g= -----END CERTIFICATE-----Generated at Mon Apr 7 05:47:38 2025 by rpki-client