$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa File: 48fd603b-32a7-3914-8971-7bbb10a51a4e.roa (raw, json) Hash identifier: RVzm/s72GLAe+wkfC/+qtRe3Frgc1ULHsZtYBg/GIpM= Subject key identifier: 13:B6:FD:C9:FD:02:A1:AC:9C:CA:76:27:97:D2:44:C6:38:13:65:6B Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F432858496CE451B5524D10176519D100 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 36103 IP address blocks: 68.70.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:51:b5:52:4d:10:17:65:19:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=2866f980-3dd6-43e4-8444-ec0b1d4e8ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:c9:2a:04:49:38:b3:b1:56:0b:64:68:ba: d5:a2:46:f7:47:6d:5d:10:80:0e:1b:a0:ac:96:2f: a5:51:7d:95:55:b3:d0:28:3c:07:14:cb:12:48:aa: ec:e5:a4:bb:f9:e0:e0:42:55:b7:10:74:79:59:2c: 2d:fa:a1:75:1c:68:48:52:b3:26:9c:1e:e9:58:8e: c0:e4:c3:88:86:02:ad:a3:93:42:c7:db:24:72:6c: 2d:67:b9:27:33:93:20:e2:a2:86:44:58:b4:b7:bc: b6:97:43:e0:39:bf:df:e6:30:5e:c5:dc:21:01:7c: 91:58:d8:c7:e6:d2:95:9f:6f:5c:26:15:f1:f4:74: a9:d8:54:a1:ea:1b:60:91:ff:4b:2a:a8:3e:5b:8b: 0e:79:a9:d9:b5:22:7e:da:f0:3b:9d:54:e8:ae:5d: 73:dc:97:51:2a:dd:c9:44:a6:08:18:d3:94:5b:2e: b3:3a:e5:65:03:47:9d:0d:03:f8:49:8b:0d:54:4b: e2:51:5f:ae:ba:aa:82:fc:55:64:95:0b:68:bf:36: 0d:bd:1c:96:fc:94:41:49:09:85:35:c4:ef:eb:06: db:0a:f7:55:43:d1:f9:7e:be:b5:d8:9d:5f:e6:d7: 26:62:f0:e5:56:14:8f:27:8a:f3:2c:e1:ca:26:0d: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B6:FD:C9:FD:02:A1:AC:9C:CA:76:27:97:D2:44:C6:38:13:65:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 68.70.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1c:49:4a:50:ee:d1:13:30:54:5f:ab:3e:14:43:c9:17:27: ba:ee:e8:09:4e:85:25:11:82:49:4a:ee:f6:86:07:6b:c0:cd: 4f:ae:ec:c0:11:78:68:a2:42:4d:36:16:93:92:99:fe:c3:d0: 04:a6:2f:1a:68:54:e4:d2:cc:c7:ce:fb:82:70:c1:04:aa:ed: f5:b7:be:bc:57:fd:64:a7:4f:76:69:d6:af:8e:4f:95:a5:95: 24:52:b7:50:92:0e:be:40:44:5e:c5:b2:ca:27:06:af:39:24: 79:e2:37:e6:15:44:ae:88:5d:98:b8:45:7e:c1:5a:69:a7:f3: c9:2a:60:78:fe:bf:6a:fa:f2:4a:1b:ac:d5:54:7d:d0:99:0f: a8:98:03:fb:45:32:61:f3:ce:c8:b3:5e:eb:9a:15:cd:b7:1a: 4b:1d:9d:2e:8d:bb:c4:63:54:63:33:76:b9:fe:b4:7b:eb:dc: b0:62:9e:07:7f:fe:50:f0:da:e8:fe:f1:49:47:fa:9c:91:d8: 7c:4d:15:38:b8:0a:82:60:63:67:78:cb:45:b2:ea:38:13:f5: 9d:a4:2f:1f:58:61:9f:9a:b4:75:64:74:a5:a5:79:2b:35:e8: 9f:04:d2:f3:0c:fd:8f:4c:94:6c:ce:3d:30:92:b3:55:df:9c: 1b:6d:a5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FG1Uk0QF2UZ0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk Mjg2NmY5ODAtM2RkNi00M2U0LTg0NDQtZWMwYjFkNGU4YmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqTJKgRJOLOxVgtkaLrVokb3R21dEIAOG6Cs li+lUX2VVbPQKDwHFMsSSKrs5aS7+eDgQlW3EHR5WSwt+qF1HGhIUrMmnB7pWI7A 5MOIhgKto5NCx9skcmwtZ7knM5Mg4qKGRFi0t7y2l0PgOb/f5jBexdwhAXyRWNjH 5tKVn29cJhXx9HSp2FSh6htgkf9LKqg+W4sOeanZtSJ+2vA7nVTorl1z3JdRKt3J RKYIGNOUWy6zOuVlA0edDQP4SYsNVEviUV+uuqqC/FVklQtovzYNvRyW/JRBSQmF NcTv6wbbCvdVQ9H5fr612J1f5tcmYvDlVhSPJ4rzLOHKJg1VXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO2/cn9AqGsnMp2J5fSRMY4E2VrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvNDhmZDYwM2ItMzJhNy0z OTE0LTg5NzEtN2JiYjEwYTUxYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0cSUpQ7tETMFRfqz4UQ8kXJ7ru6AlOhSURgklK7vaGB2vAzU+u7MAR eGiiQk02FpOSmf7D0ASmLxpoVOTSzMfO+4JwwQSq7fW3vrxX/WSnT3Zp1q+OT5Wl lSRSt1CSDr5ARF7FssonBq85JHniN+YVRK6IXZi4RX7BWmmn88kqYHj+v2r68kob rNVUfdCZD6iYA/tFMmHzzsizXuuaFc23GksdnS6Nu8RjVGMzdrn+tHvr3LBingd/ /lDw2uj+8UlH+pyR2HxNFTi4CoJgY2d4y0Wy6jgT9Z2kLx9YYZ+atHVkdKWleSs1 6J8E0vMM/Y9MlGzOPTCSs1XfnBttpek= -----END CERTIFICATE-----Generated at Sun Apr 6 05:04:32 2025 by rpki-client