$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa File: 3af553af-3e25-340a-8320-484a9fc606f9.roa (raw, json) Hash identifier: 3Jqzn4wgo5cic2AeCd9qlXjgzaB1dd/B1uWWPyYJx98= Subject key identifier: DC:AF:85:0B:3E:6A:FE:88:D5:C6:30:DE:D8:9D:83:B0:2D:19:F4:15 Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584A0D6A87323026DBEDE702F100 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 37277 IP address blocks: 68.142.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:87:32:30:26:db:ed:e7:02:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=d7858a6c-8ed0-4fe0-9d6e-1aa38aa605b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:cb:d4:e1:88:08:8b:79:c5:50:8c:2b:fb: 69:99:42:32:9f:d9:14:1c:12:f3:a2:fd:0e:b7:49: 28:d7:18:97:9b:69:a3:ac:0d:e5:96:96:6c:5b:29: 84:5f:05:dd:83:f7:1c:1d:35:07:f5:e3:67:f2:bb: d1:3f:f8:2e:6e:b7:80:22:24:3e:a7:e9:9b:b9:b3: b3:27:14:7f:ff:49:ed:b8:1e:1e:d2:bd:30:59:9a: 28:d8:20:ee:d6:96:f1:12:84:cb:8e:73:0a:a2:89: 9f:89:0b:a7:f0:88:ce:0f:1b:0a:72:37:55:f4:d3: 14:3c:c9:4c:8e:18:86:52:76:4a:42:9a:bc:40:78: 4f:79:75:c1:19:c5:bc:45:ba:97:24:ee:a5:97:35: c2:16:f5:e5:81:35:30:76:ae:3f:09:5f:23:cd:c9: 9b:aa:91:19:ee:ba:ca:ce:fb:e5:69:5f:84:d7:59: 92:85:3e:77:df:62:54:56:67:0c:82:e0:f2:64:bd: 88:c7:80:23:ba:44:9e:e8:e8:84:d0:f4:a0:36:e3: 26:99:a1:a5:aa:9c:18:8c:5c:12:f5:11:5e:d1:cc: fb:9a:73:7c:84:e8:83:7c:7b:0f:ac:9b:d1:07:5d: f0:ae:fc:84:24:9f:a8:11:54:f1:48:db:b4:83:6f: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AF:85:0B:3E:6A:FE:88:D5:C6:30:DE:D8:9D:83:B0:2D:19:F4:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 68.142.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:15:2a:f4:a2:70:8d:8d:bf:ad:9a:ab:3a:27:7b:14:69:9a: 30:68:c4:9f:7b:49:19:f0:d9:70:ed:c0:f2:bb:dc:67:19:8f: 35:f6:66:21:07:75:92:ac:33:8a:2d:f8:a5:01:92:20:d5:85: 85:6a:83:9d:c7:de:40:d5:75:76:77:67:57:1d:4f:48:2d:b2: 38:e6:86:1d:6e:fd:f9:c2:dc:23:31:a9:30:b9:24:61:f4:02: 3f:6b:5b:fc:5e:22:f8:d9:aa:9d:23:e5:65:e7:6a:c4:ce:83: 64:1f:47:79:a5:1e:3d:a1:d6:5f:a4:49:6d:c7:6b:25:d4:13: e7:0d:8d:a3:3f:88:18:cc:45:65:1f:c9:5d:33:0c:ce:df:f9: 90:2e:79:e9:0b:c1:a4:f3:4c:37:60:02:d6:7d:a1:f5:64:44: d0:3b:42:d6:6c:64:e5:d9:63:09:ca:01:81:22:d7:0d:38:38: ff:d6:be:a1:47:8b:11:6e:6c:d0:5d:a3:bb:5d:c7:b4:3d:10: 7a:4e:0e:9c:9c:af:a4:59:c5:f6:4a:ff:f9:30:46:bb:57:04: 61:6b:d0:2a:5f:9b:a4:bc:18:ca:db:72:45:e9:81:3d:3f:2a: fc:25:f8:14:6a:4c:df:58:f7:39:3d:4b:40:bf:00:6a:f7:05: 67:e7:fb:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaocyMCbb7ecC8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZDc4NThhNmMtOGVkMC00ZmUwLTlkNmUtMWFhMzhhYTYwNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+rL1OGICIt5xVCMK/tpmUIyn9kUHBLzov0O t0ko1xiXm2mjrA3llpZsWymEXwXdg/ccHTUH9eNn8rvRP/gubreAIiQ+p+mbubOz JxR//0ntuB4e0r0wWZoo2CDu1pbxEoTLjnMKoomfiQun8IjODxsKcjdV9NMUPMlM jhiGUnZKQpq8QHhPeXXBGcW8RbqXJO6llzXCFvXlgTUwdq4/CV8jzcmbqpEZ7rrK zvvlaV+E11mShT5332JUVmcMguDyZL2Ix4AjukSe6OiE0PSgNuMmmaGlqpwYjFwS 9RFe0cz7mnN8hOiDfHsPrJvRB13wrvyEJJ+oEVTxSNu0g29FGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyvhQs+av6I1cYw3tidg7AtGfQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvM2FmNTUzYWYtM2UyNS0z NDBhLTgzMjAtNDg0YTlmYzYwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRI5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8VKvSicI2Nv62aqzonexRpmjBoxJ97SRnw2XDtwPK73GcZjzX2ZiEH dZKsM4ot+KUBkiDVhYVqg53H3kDVdXZ3Z1cdT0gtsjjmhh1u/fnC3CMxqTC5JGH0 Aj9rW/xeIvjZqp0j5WXnasTOg2QfR3mlHj2h1l+kSW3HayXUE+cNjaM/iBjMRWUf yV0zDM7f+ZAueekLwaTzTDdgAtZ9ofVkRNA7QtZsZOXZYwnKAYEi1w04OP/WvqFH ixFubNBdo7tdx7Q9EHpODpycr6RZxfZK//kwRrtXBGFr0Cpfm6S8GMrbckXpgT0/ Kvwl+BRqTN9Y9zk9S0C/AGr3BWfn+0Q= -----END CERTIFICATE-----Generated at Mon Jul 21 23:53:42 2025 by rpki-client