$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa File: bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa (raw, json) Hash identifier: n4QVktnAlezpsoVP7vs1GkiooRpeiYMY+2t+TiqlORU= Subject key identifier: DC:5F:E9:87:26:CB:9A:69:62:EA:D8:3D:EC:B8:7C:42:89:31:A9:14 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285848B78B80ED63B3BB2C06732D00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 68.64.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:80:ed:63:b3:bb:2c:06:73:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=bedd0bdb-774a-47ae-8dfd-4d0b4349e6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:bc:de:fa:5d:b1:6a:dd:e4:91:ba:f4:22: b1:64:1b:c6:70:37:e1:6e:3a:74:da:21:3a:a6:de: ef:f3:78:98:09:c2:e6:e2:f8:60:60:24:8b:74:1a: ef:cc:94:55:65:6a:dd:7a:a2:12:55:55:06:37:55: 81:a5:44:3d:26:96:3e:56:61:6c:4a:c6:9b:cb:43: ea:55:ef:74:0c:c1:d7:04:a3:96:02:49:70:07:2c: 1f:78:1d:81:8a:2d:02:1b:be:e5:82:34:33:1c:0b: b5:83:69:41:76:6e:df:17:13:a4:dd:2c:10:1a:68: d1:cc:45:97:ad:ea:b8:78:94:2d:58:da:a7:42:42: 93:04:55:cb:b4:68:36:24:d2:c6:e4:49:0c:e9:ff: 46:47:06:1b:e1:c8:99:f3:4c:b8:09:8e:02:aa:e1: 1b:c4:47:8e:77:1b:f8:c5:1d:e2:f3:f9:8b:c3:ba: e0:4c:6f:d7:5e:82:07:7a:ca:36:58:21:3a:a3:8c: e4:12:ea:59:f8:03:a9:79:2f:e1:a3:1a:32:5d:83: 48:41:cb:e4:3e:69:4f:3f:ee:96:7f:fd:1f:9c:82: 7f:3e:fb:a2:5b:4c:f5:c1:77:3d:99:82:af:9f:af: 42:76:70:1e:d0:dd:41:4a:f1:6f:a2:1b:24:06:85: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5F:E9:87:26:CB:9A:69:62:EA:D8:3D:EC:B8:7C:42:89:31:A9:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:54:92:0a:30:9e:14:1d:24:d5:db:5b:49:cd:e8:3a:ce:2d: ad:c2:20:86:0c:6c:37:e5:32:be:c9:cf:b7:5f:eb:4b:f6:e8: b6:ca:78:39:93:fc:e5:65:0c:b0:2a:47:a7:f0:87:71:bc:21: 25:1b:38:29:ea:4f:77:bc:39:f6:83:41:42:e0:fb:fc:7f:65: 95:4a:b8:0b:52:5c:19:ca:ee:37:10:ac:34:7c:5d:ac:b4:56: bb:6f:0c:0b:50:48:31:7c:7d:55:21:1f:2c:5b:a9:b4:ba:88: 07:30:7a:87:9d:2d:c6:b9:0b:f8:47:12:44:eb:5f:f6:b2:50: 84:bc:9c:bc:39:1f:de:f1:40:9b:f6:30:a2:ec:7b:3e:aa:17: 3b:e4:aa:1c:ff:03:4b:14:99:02:62:f3:6a:e2:46:31:25:ae: 78:08:64:7b:8e:22:1e:7d:c5:1e:29:07:b3:88:e3:2a:33:d6: 2a:2c:92:19:b5:5e:64:00:6e:3b:52:ab:95:ef:2e:cc:95:ab: 8d:3c:5a:5b:eb:15:ce:05:18:9a:09:07:c6:8c:21:0a:ed:dc: 94:b9:c3:c2:6c:c8:5a:20:3d:b6:bd:83:33:42:ad:ff:b9:9a: c4:1a:14:5d:79:6d:f6:63:74:ab:8d:35:01:cd:98:ab:bf:bd: fd:22:06:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4DtY7O7LAZzLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YmVkZDBiZGItNzc0YS00N2FlLThkZmQtNGQwYjQzNDllNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaS83vpdsWrd5JG69CKxZBvGcDfhbjp02iE6 pt7v83iYCcLm4vhgYCSLdBrvzJRVZWrdeqISVVUGN1WBpUQ9JpY+VmFsSsaby0Pq Ve90DMHXBKOWAklwBywfeB2Bii0CG77lgjQzHAu1g2lBdm7fFxOk3SwQGmjRzEWX req4eJQtWNqnQkKTBFXLtGg2JNLG5EkM6f9GRwYb4ciZ80y4CY4CquEbxEeOdxv4 xR3i8/mLw7rgTG/XXoIHeso2WCE6o4zkEupZ+AOpeS/hoxoyXYNIQcvkPmlPP+6W f/0fnIJ/PvuiW0z1wXc9mYKvn69CdnAe0N1BSvFvohskBoVNFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxf6Ycmy5ppYurYPey4fEKJMakUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmY0MDNiOTUtODZmYy0z Yzg0LThlMjUtZGM2MjRhN2RkMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApUkgownhQdJNXbW0nN6DrOLa3CIIYMbDflMr7Jz7df60v26LbKeDmT /OVlDLAqR6fwh3G8ISUbOCnqT3e8OfaDQULg+/x/ZZVKuAtSXBnK7jcQrDR8Xay0 VrtvDAtQSDF8fVUhHyxbqbS6iAcweoedLca5C/hHEkTrX/ayUIS8nLw5H97xQJv2 MKLsez6qFzvkqhz/A0sUmQJi82riRjElrngIZHuOIh59xR4pB7OI4yoz1ioskhm1 XmQAbjtSq5XvLsyVq408WlvrFc4FGJoJB8aMIQrt3JS5w8JsyFogPba9gzNCrf+5 msQaFF15bfZjdKuNNQHNmKu/vf0iBiU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:43 2025 by rpki-client