$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa File: 2026f06e-1431-31e6-8460-5ff177b4b260.roa (raw, json) Hash identifier: rDNlfumD03lJN6qEtXAPuDeJeSfCvN/XPCFeVljKvHk= Subject key identifier: 89:EB:B1:07:20:1F:D2:B2:DF:3C:BF:34:50:F0:0E:5F:0F:FC:DA:1B Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Certificate serial: 010D0C9F43285848F22C673DDE9F468CFE1C2380 Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 68.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:67:3d:de:9f:46:8c:fe:1c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d66947c4-13f6-4b63-b51a-25a7614bf0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6e:c9:8a:c9:f2:67:79:50:71:66:3b:a3:66: 5e:ad:a2:11:39:0f:c0:a5:6f:ae:ae:e3:7c:30:8a: 71:f6:8f:67:dd:28:31:da:fc:1f:af:1b:81:be:0c: 6a:fc:2c:db:27:3a:4c:98:ed:49:54:1a:55:53:54: ea:41:3f:9e:97:93:8c:e8:10:d6:e2:60:51:15:f8: ed:1d:f2:4f:b3:34:28:96:5e:66:9c:1d:08:00:65: c4:54:d1:00:3e:f8:54:c6:3d:0e:2b:bb:3e:25:3d: 72:15:16:0b:d9:54:13:16:8a:37:63:fd:7d:0b:3c: 31:ce:71:1f:96:ab:9c:8c:c7:d4:ea:63:61:be:f4: 20:a1:d0:0b:d5:5f:6f:0a:0a:91:b9:4b:aa:90:57: 12:fa:78:c0:a7:26:7e:d0:ca:9d:d0:c6:60:b4:e0: cf:c1:06:76:73:14:fb:bf:c0:80:5b:4f:21:bd:fa: ba:b6:38:cd:1e:8a:59:07:ca:53:d3:3c:bb:07:08: 9d:f3:31:5c:58:94:b4:51:7b:b2:2d:91:3d:0b:4e: 32:61:7b:ec:18:21:dd:98:b3:77:77:45:c6:56:91: 8e:52:cb:9d:15:2f:57:58:57:b1:bb:c5:cd:9f:93: 52:32:23:aa:1e:82:2e:a7:10:90:32:a0:14:f4:75: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EB:B1:07:20:1F:D2:B2:DF:3C:BF:34:50:F0:0E:5F:0F:FC:DA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl X509v3 Authority Key Identifier: keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer sbgp-ipAddrBlock: critical IPv4: 68.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:63:ff:4a:9c:30:99:55:3c:6d:62:fd:d2:d5:6f:29:4d:08: fd:a5:14:4f:96:22:4b:6d:16:e1:db:1d:48:fa:97:c9:c3:3c: c3:f2:82:cf:8a:d0:6a:e6:45:dd:a0:45:62:4e:ae:44:e3:33: ab:d1:12:a8:ab:14:c2:9d:90:48:8f:35:e0:fb:f5:ba:af:94: 3a:13:17:21:ec:f0:0e:f3:f4:2a:c4:5b:1d:52:37:21:9f:f0: 24:4c:a3:5a:a3:4b:18:5e:0e:70:1c:b3:d3:c8:bb:4c:49:b7: d8:93:a1:b6:18:0c:d7:f9:8c:04:7c:65:c0:9b:6e:f8:fd:89: ee:e0:44:32:98:f5:88:29:38:96:1e:0b:e8:ff:c1:10:38:5d: 5a:fa:35:16:3f:bf:a4:2a:fc:ab:93:c3:94:d6:97:12:f7:cc: a9:16:00:32:e8:e3:e8:69:82:0a:9c:fd:9e:d0:c8:cc:aa:c7: fc:82:da:95:cb:46:4b:c4:f7:b5:a5:3e:91:fb:93:30:57:a5: 3d:cd:6e:82:17:63:28:34:39:d7:2d:84:ff:14:50:d0:63:3f: e6:40:05:47:45:53:ce:e5:98:0c:89:ee:ee:25:d7:de:15:09: 05:85:a4:b4:bf:ad:eb:15:ab:25:f0:96:b5:dd:49:ef:38:70: 0e:4a:b9:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGc93p9GjP4cI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3 OTI4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDY2OTQ3YzQtMTNmNi00YjYzLWI1MWEtMjVhNzYxNGJmMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG7JisnyZ3lQcWY7o2ZeraIROQ/ApW+uruN8 MIpx9o9n3Sgx2vwfrxuBvgxq/CzbJzpMmO1JVBpVU1TqQT+el5OM6BDW4mBRFfjt HfJPszQoll5mnB0IAGXEVNEAPvhUxj0OK7s+JT1yFRYL2VQTFoo3Y/19CzwxznEf lqucjMfU6mNhvvQgodAL1V9vCgqRuUuqkFcS+njApyZ+0Mqd0MZgtODPwQZ2cxT7 v8CAW08hvfq6tjjNHopZB8pT0zy7Bwid8zFcWJS0UXuyLZE9C04yYXvsGCHdmLN3 d0XGVpGOUsudFS9XWFexu8XNn5NSMiOqHoIupxCQMqAU9HUMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInrsQcgH9Ky3zy/NFDwDl8P/NobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvMjAyNmYwNmUtMTQzMS0z MWU2LTg0NjAtNWZmMTc3YjRiMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey ODc2ZTc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9j/0qcMJlVPG1i/dLVbylNCP2lFE+WIkttFuHbHUj6l8nDPMPygs+K 0GrmRd2gRWJOrkTjM6vREqirFMKdkEiPNeD79bqvlDoTFyHs8A7z9CrEWx1SNyGf 8CRMo1qjSxheDnAcs9PIu0xJt9iTobYYDNf5jAR8ZcCbbvj9ie7gRDKY9YgpOJYe C+j/wRA4XVr6NRY/v6Qq/KuTw5TWlxL3zKkWADLo4+hpggqc/Z7QyMyqx/yC2pXL RkvE97WlPpH7kzBXpT3NboIXYyg0OdcthP8UUNBjP+ZABUdFU87lmAyJ7u4l194V CQWFpLS/resVqyXwlrXdSe84cA5KuaM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:02 2025 by rpki-client