$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a29faf61-2606-37a4-8944-3b4057b51f57.roa File: a29faf61-2606-37a4-8944-3b4057b51f57.roa (raw, json) Hash identifier: AKrWxwiHYaJVYuR9YEBmNlxZAA6ZT1WkbNsMy1v+9xI= Subject key identifier: 8C:1D:BC:1F:C8:9D:87:7A:D1:6B:CD:34:B2:B0:88:F1:02:EC:17:77 Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F432858496CE451DC52762BC79E5F23A0 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a29faf61-2606-37a4-8944-3b4057b51f57.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 36103 IP address blocks: 68.70.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:51:dc:52:76:2b:c7:9e:5f:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=4ba12d44-38d0-4d49-9242-81beaeef4f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:c8:9f:b6:b0:3e:01:36:4f:90:cf:6d:b5: bc:a0:4b:41:76:f6:7d:8f:ce:0a:3d:53:16:78:b4: 8e:bf:16:7c:09:0e:54:fe:7c:0c:61:5b:24:45:72: 64:b6:54:e8:f2:f6:4c:5e:cf:95:af:6e:fe:80:98: 93:ab:a2:a4:9f:6e:2d:c4:c7:66:50:93:a5:03:4e: 94:f3:e6:3a:6e:37:df:f3:e5:08:81:28:af:96:e7: 2a:05:14:b8:b9:82:1d:72:a5:65:66:2d:7a:b2:b6: 8f:b0:05:6e:a1:df:fb:39:51:fc:13:0c:2c:bf:cd: cb:3f:fe:fc:98:55:d9:0b:d4:33:60:74:91:43:4a: 8e:1b:3f:38:35:72:f2:83:41:3d:83:e1:a1:23:01: 6d:5c:c7:d3:54:af:0a:68:e6:fd:72:10:09:e8:50: e1:6d:28:42:e4:3a:e2:26:cd:32:10:dd:ca:9d:7f: 80:e3:b1:1b:95:9c:28:9b:03:d7:0b:f4:79:f9:76: ef:13:30:d2:20:9e:1c:ed:6d:10:cf:38:8b:d9:7e: 6b:33:19:51:59:5f:da:40:2b:dd:7d:15:76:d4:55: 4a:da:2b:3d:8c:9a:bb:68:a0:b2:47:9e:33:10:40: d4:d3:b7:f8:33:56:12:27:55:6f:ec:d7:cd:30:1f: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:BC:1F:C8:9D:87:7A:D1:6B:CD:34:B2:B0:88:F1:02:EC:17:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a29faf61-2606-37a4-8944-3b4057b51f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 68.70.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c3:0f:8a:d6:56:38:9a:82:8b:f0:59:bc:1e:0f:36:20:80: 20:ac:c8:e0:a2:bb:07:35:34:2e:82:1e:48:44:4d:15:11:24: ed:6f:6a:6c:b5:03:52:9a:b1:ea:a0:0a:3f:fa:61:b0:ab:7a: 22:4d:bb:10:a4:02:15:17:61:e8:18:54:a5:d5:4e:d6:a7:1a: 39:95:e5:c1:f4:59:c8:8c:6a:dd:a1:b6:dc:5b:25:e9:68:7c: ea:93:2e:8e:2c:53:bc:d3:61:9c:8c:cb:63:05:68:28:4b:3d: 8b:da:84:18:33:c7:b7:f2:dc:47:27:f0:4d:69:58:df:64:61: 41:84:bc:52:a3:8d:3c:52:b0:c5:ae:ec:af:3b:1c:9d:e2:79: 27:ec:c5:4e:de:ca:34:1a:a4:fc:59:2e:84:cc:9d:61:6c:7c: 96:4d:be:10:77:c0:a6:66:9e:fe:17:83:c5:59:6a:42:a6:f7: 44:4b:b3:b9:56:0c:e4:e7:11:19:de:2f:c3:e5:05:b8:fb:d5: ab:20:63:90:7f:6e:56:77:3e:4f:df:44:f3:ba:74:4b:9b:78: a1:c8:a0:6e:b1:bf:ba:d8:ed:1c:b2:c3:8f:eb:de:ae:be:7c: 63:12:c3:dd:fd:ca:75:a1:36:ff:58:2b:29:b2:99:b0:2c:0f: 0b:70:2a:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FHcUnYrx55fI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NGJhMTJkNDQtMzhkMC00ZDQ5LTkyNDItODFiZWFlZWY0ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WDIn7awPgE2T5DPbbW8oEtBdvZ9j84KPVMW eLSOvxZ8CQ5U/nwMYVskRXJktlTo8vZMXs+Vr27+gJiTq6Kkn24txMdmUJOlA06U 8+Y6bjff8+UIgSivlucqBRS4uYIdcqVlZi16sraPsAVuod/7OVH8Ewwsv83LP/78 mFXZC9QzYHSRQ0qOGz84NXLyg0E9g+GhIwFtXMfTVK8KaOb9chAJ6FDhbShC5Dri Js0yEN3KnX+A47EblZwomwPXC/R5+XbvEzDSIJ4c7W0QzziL2X5rMxlRWV/aQCvd fRV21FVK2is9jJq7aKCyR54zEEDU07f4M1YSJ1Vv7NfNMB+1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwdvB/InYd60WvNNLKwiPEC7Bd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvYTI5ZmFmNjEtMjYwNi0z N2E0LTg5NDQtM2I0MDU3YjUxZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALDD4rWVjiagovwWbweDzYggCCsyOCiuwc1NC6CHkhETRURJO1vamy1 A1KaseqgCj/6YbCreiJNuxCkAhUXYegYVKXVTtanGjmV5cH0WciMat2httxbJelo fOqTLo4sU7zTYZyMy2MFaChLPYvahBgzx7fy3Ecn8E1pWN9kYUGEvFKjjTxSsMWu 7K87HJ3ieSfsxU7eyjQapPxZLoTMnWFsfJZNvhB3wKZmnv4Xg8VZakKm90RLs7lW DOTnERneL8PlBbj71asgY5B/blZ3Pk/fRPO6dEubeKHIoG6xv7rY7Ryyw4/r3q6+ fGMSw939ynWhNv9YKymymbAsDwtwKgE= -----END CERTIFICATE-----Generated at Wed Apr 9 09:22:02 2025 by rpki-client