$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa File: bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa (raw, json) Hash identifier: wgWI6axlhrmG5X2MxYXTeRRv2F9VL6qxS1a86kqGdV0= Subject key identifier: AE:C9:E9:36:EB:ED:C6:D3:F6:DB:C8:21:35:38:2C:D5:8B:33:C5:E2 Certificate issuer: /CN=ca4cb307-c1ce-4780-8903-6931cc40426b Certificate serial: 010D0C9F4328584957F3F56D4699D4B97FDA4800 Authority key identifier: C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 54804 IP address blocks: 68.179.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f5:6d:46:99:d4:b9:7f:da:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca4cb307-c1ce-4780-8903-6931cc40426b Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=56dc45ea-373d-4380-b245-01909612634d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:ed:f6:4b:b5:e6:c4:94:8e:35:a6:12:50: 6d:5f:c9:86:c1:2a:7c:89:0e:c5:f1:74:b6:68:b4: 24:fa:37:cc:41:d3:f7:ad:da:1d:75:28:e5:0e:25: 9e:31:15:d1:b2:de:f5:85:77:1f:be:1b:ab:a0:d4: 7e:9a:e0:c4:01:a4:24:bd:2a:0a:7b:08:75:a6:a4: 23:39:5c:eb:69:50:20:d6:84:3b:37:03:46:ba:85: fb:43:98:11:97:29:28:55:ee:37:c1:0e:46:05:a3: 27:a6:2d:59:d4:bc:27:42:b9:2d:ab:87:76:c2:8c: a5:60:4c:a7:93:ca:b7:56:6c:a5:30:eb:6d:a0:ac: b5:b0:4a:21:e8:9c:32:7a:33:aa:f7:a8:1d:43:46: 5b:d4:22:0b:ce:28:40:f1:f3:00:33:b9:44:5f:48: 62:0f:68:d8:c6:1d:4c:a4:e9:8d:fc:70:04:86:88: d0:59:b7:b5:8c:c0:fe:fd:47:85:6f:68:15:ee:47: cd:1d:a7:9e:0a:66:c4:81:a2:b0:35:51:21:42:e3: 0a:0f:37:e0:fa:2a:9f:38:9d:3d:48:e0:2a:11:ae: 2d:f0:e5:e7:1b:0d:f9:c5:ce:b4:58:6b:3b:be:55: 75:4e:a7:84:d3:e3:6d:b3:a0:af:ff:1b:2c:eb:bf: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C9:E9:36:EB:ED:C6:D3:F6:DB:C8:21:35:38:2C:D5:8B:33:C5:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/bbdb5bcc-9fb8-3945-9df7-d85330b93017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl X509v3 Authority Key Identifier: keyid:C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer sbgp-ipAddrBlock: critical IPv4: 68.179.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:92:cd:53:9b:bf:45:97:ae:2f:a9:35:e0:5b:18:80:68: cb:7d:0f:db:70:f7:e3:34:23:fb:d0:55:00:c2:87:38:ba:04: 96:cf:7f:c3:d6:f4:e7:ab:d7:ab:2a:61:40:f5:78:3b:20:1c: 17:e6:e3:27:1a:64:8c:69:a7:62:94:54:42:92:5f:fb:01:c7: df:11:45:90:8a:68:ef:4b:23:42:09:d0:af:37:b2:4a:78:37: e8:3a:b4:db:eb:f6:39:a3:f7:a9:7d:3f:05:7b:52:4e:c2:09: bf:4a:84:3e:c0:ca:e4:9d:45:a8:20:95:8c:29:76:93:88:05: dc:d0:68:76:e7:03:14:39:39:1e:68:00:fd:ba:0a:cb:1a:ce: de:29:79:8c:09:99:fe:41:0f:6a:5b:a7:d4:a9:6e:ba:03:49: 42:39:67:4a:8a:62:d5:92:4b:03:de:08:ea:e3:b6:a2:32:4e: 4f:a9:7e:48:bc:fb:ba:72:41:6e:ea:d0:00:69:98:ee:4c:bd: 59:d6:6c:e4:2e:74:ae:c5:2e:25:e7:50:96:b0:f1:89:32:0e: c1:7e:b7:07:fd:ec:ae:46:ba:e2:fe:f4:0e:44:8e:c2:6f:d4: b7:51:20:8f:2f:de:14:06:39:67:9e:aa:94:bc:15:9a:c4:03: a2:c6:be:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/VtRpnUuX/aSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E0Y2IzMDctYzFjZS00NzgwLTg5MDMtNjkzMWNjNDA0 MjZiMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NTZkYzQ1ZWEtMzczZC00MzgwLWIyNDUtMDE5MDk2MTI2MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow7t9ku15sSUjjWmElBtX8mGwSp8iQ7F8XS2 aLQk+jfMQdP3rdoddSjlDiWeMRXRst71hXcfvhuroNR+muDEAaQkvSoKewh1pqQj OVzraVAg1oQ7NwNGuoX7Q5gRlykoVe43wQ5GBaMnpi1Z1LwnQrktq4d2woylYEyn k8q3VmylMOttoKy1sEoh6JwyejOq96gdQ0Zb1CILzihA8fMAM7lEX0hiD2jYxh1M pOmN/HAEhojQWbe1jMD+/UeFb2gV7kfNHaeeCmbEgaKwNVEhQuMKDzfg+iqfOJ09 SOAqEa4t8OXnGw35xc60WGs7vlV1TqeE0+Nts6Cv/xss679mFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7J6Tbr7cbT9tvIITU4LNWLM8XiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRj YjMwNy1jMWNlLTQ3ODAtODkwMy02OTMxY2M0MDQyNmIvYmJkYjViY2MtOWZiOC0z OTQ1LTlkZjctZDg1MzMwYjkzMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2E0Y2IzMDctYzFjZS00NzgwLTg5 MDMtNjkzMWNjNDA0MjZiL2NhNGNiMzA3LWMxY2UtNDc4MC04OTAzLTY5MzFjYzQw NDI2Yi5jcmwwHwYDVR0jBBgwFoAUxu2XOQiELdkPbJH7bIKD7dQ/p/cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTRjYjMwNy1jMWNlLTQ3ODAtODkwMy02OTMx Y2M0MDQyNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCAks1Tm79Fl64vqTXgWxiAaMt9D9tw9+M0I/vQVQDChzi6BJbPf8PW 9Oer16sqYUD1eDsgHBfm4ycaZIxpp2KUVEKSX/sBx98RRZCKaO9LI0IJ0K83skp4 N+g6tNvr9jmj96l9PwV7Uk7CCb9KhD7AyuSdRagglYwpdpOIBdzQaHbnAxQ5OR5o AP26Cssazt4peYwJmf5BD2pbp9SpbroDSUI5Z0qKYtWSSwPeCOrjtqIyTk+pfki8 +7pyQW7q0ABpmO5MvVnWbOQudK7FLiXnUJaw8YkyDsF+twf97K5GuuL+9A5EjsJv 1LdRII8v3hQGOWeeqpS8FZrEA6LGviI= -----END CERTIFICATE-----Generated at Thu Apr 10 13:34:48 2025 by rpki-client