$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa File: 39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa (raw, json) Hash identifier: AewTMi/DQWFz7QbwPv5UAUjCQaWf6bjJ4c30dGHJr0M= Subject key identifier: DA:7E:39:16:40:BB:AD:A3:87:8B:28:A6:38:E2:7E:9C:B1:25:DC:34 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F43285848EF616931C0090FAE8DD89980 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 397423 IP address blocks: 68.233.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:69:31:c0:09:0f:ae:8d:d8:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=fce2968f-ce00-4d3f-9802-2326a2152019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:dd:7a:b8:83:f5:2f:db:54:81:10:e0:72: 24:0f:ef:aa:cd:dd:48:af:59:be:71:58:81:5b:56: eb:60:45:7b:1f:b0:ff:0e:f4:9c:90:40:c0:07:7c: 3a:79:79:d1:cd:73:19:ea:5f:35:0b:30:a3:11:8b: 3c:75:95:0c:bb:60:a0:a8:64:fb:3a:50:b5:96:31: e6:a2:d7:bd:7a:ef:e4:a0:bc:a5:22:a5:07:0b:7c: e0:f4:e8:c5:86:08:8e:0e:1c:a8:dc:bf:62:55:42: fe:48:74:ec:00:6a:c1:71:bf:94:4f:1a:e8:e9:02: 22:bd:45:2e:a2:c3:03:70:51:64:d0:ec:01:33:0a: 1a:69:b2:d0:0c:e4:dc:6f:30:4c:99:41:c6:34:97: 9d:80:13:1d:70:da:d0:65:db:02:75:2e:a9:5a:30: c8:ae:c0:aa:0c:e4:be:b2:6d:29:2f:2b:15:bb:fa: ee:01:3a:e1:f3:9d:9a:4f:cb:0f:91:76:e3:90:27: aa:71:3c:5f:30:3b:3c:c8:db:c1:20:3c:13:fb:e9: df:b3:20:a8:23:c8:4a:5e:e2:8a:f9:29:d9:8e:7f: 08:7c:ac:57:10:d8:c7:04:d8:e3:e4:b7:a9:35:63: 44:a4:2a:27:68:d4:56:29:4a:1e:12:8a:48:a4:40: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7E:39:16:40:BB:AD:A3:87:8B:28:A6:38:E2:7E:9C:B1:25:DC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:37:e6:0a:dd:80:d7:dc:65:aa:13:da:ee:b7:f0:48:a6:6d: 19:8d:7c:65:0e:42:87:79:a4:66:76:11:c4:b3:68:80:c3:64: b4:c2:aa:ee:a8:c0:75:fe:c2:70:2f:fc:e3:cc:d0:ea:e9:95: 51:48:e6:c0:a5:17:a3:0e:c9:43:a8:4f:81:bd:b7:11:de:9f: 6a:66:70:26:cc:bc:ea:1f:0b:5b:9b:68:b1:97:cd:29:6f:09: 66:18:cf:67:f2:f1:b3:39:82:5f:dc:7f:eb:f1:4b:11:ec:07: 0b:65:a4:49:6c:4b:41:93:c3:5c:f2:36:c5:0c:e2:16:e4:e1: c4:98:ff:a8:47:42:29:5f:a8:ad:92:56:ee:e7:27:7f:79:4c: 92:d4:8e:8c:60:42:6c:ec:48:9c:0c:40:ce:89:fa:03:9a:b6: 16:50:b1:ba:2f:ac:9c:3e:66:f2:ff:a6:33:af:c6:f0:6e:ea: 0a:c0:45:b0:3a:4e:b4:27:b1:f7:d3:ad:03:52:d7:5b:b1:c6: b1:43:5e:2d:7f:00:e4:84:82:ca:b4:b8:ec:b6:f8:a2:09:fe: 8f:4b:c7:2d:99:fb:15:cd:41:94:05:80:92:83:df:2e:86:69: d5:ed:c7:09:02:6b:1a:9f:98:e1:f7:9c:fc:a1:89:4c:6b:d8: 90:91:30:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWkxwAkPro3YmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZmNlMjk2OGYtY2UwMC00ZDNmLTk4MDItMjMyNmEyMTUyMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEHderiD9S/bVIEQ4HIkD++qzd1Ir1m+cViB W1brYEV7H7D/DvSckEDAB3w6eXnRzXMZ6l81CzCjEYs8dZUMu2CgqGT7OlC1ljHm ote9eu/koLylIqUHC3zg9OjFhgiODhyo3L9iVUL+SHTsAGrBcb+UTxro6QIivUUu osMDcFFk0OwBMwoaabLQDOTcbzBMmUHGNJedgBMdcNrQZdsCdS6pWjDIrsCqDOS+ sm0pLysVu/ruATrh852aT8sPkXbjkCeqcTxfMDs8yNvBIDwT++nfsyCoI8hKXuKK +SnZjn8IfKxXENjHBNjj5LepNWNEpConaNRWKUoeEopIpECQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp+ORZAu62jh4sopjjifpyxJdw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMzlkNmEyYjMtYzk3OS0z NjMyLWE0YTctMzRhZDk3YmFhMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ35grdgNfcZaoT2u638EimbRmNfGUOQod5pGZ2EcSzaIDDZLTCqu6o wHX+wnAv/OPM0OrplVFI5sClF6MOyUOoT4G9txHen2pmcCbMvOofC1ubaLGXzSlv CWYYz2fy8bM5gl/cf+vxSxHsBwtlpElsS0GTw1zyNsUM4hbk4cSY/6hHQilfqK2S Vu7nJ395TJLUjoxgQmzsSJwMQM6J+gOathZQsbovrJw+ZvL/pjOvxvBu6grARbA6 TrQnsffTrQNS11uxxrFDXi1/AOSEgsq0uOy2+KIJ/o9Lxy2Z+xXNQZQFgJKD3y6G adXtxwkCaxqfmOH3nPyhiUxr2JCRMA0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:11:35 2025 by rpki-client