$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa File: 7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa (raw, json) Hash identifier: ds2L4m4R3nElx1WrNhNUeIado+T9TvF/TMNkylZyBuw= Subject key identifier: 5A:FD:C7:C2:98:71:4A:B2:DC:F8:F1:C0:62:58:42:9A:A0:B0:AE:3A Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584930DE60C1B9F631A6905DBE80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 53291 IP address blocks: 68.168.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:60:c1:b9:f6:31:a6:90:5d:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=eda45116-5690-4a33-87e5-7eabfcaa9aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:a3:35:b1:0e:e3:a6:fc:a6:6b:70:3e:20: 81:a0:39:62:3b:bf:b7:b2:f1:d9:5a:0d:e5:ee:a9: be:9c:13:fb:25:7a:31:de:7e:c8:5d:25:d3:57:38: 74:a1:58:2f:7a:9c:38:42:08:67:75:26:3e:c7:63: e0:0f:d0:f1:f6:15:02:39:1e:5a:bd:34:80:0a:07: f4:44:74:0f:c6:ea:d3:5a:e2:72:4b:d1:e5:10:fc: 6b:9d:1e:de:75:27:b9:d5:eb:91:df:49:33:ac:16: 7f:4b:d6:c5:ce:eb:25:e7:53:db:13:2f:78:e5:13: 36:66:62:57:74:fa:16:7b:b0:38:20:47:d6:c7:3c: ff:18:62:2d:22:d9:a2:62:5c:0a:bc:ba:f1:58:98: 2c:61:7d:38:b5:f0:3b:8e:9f:bb:7e:f9:25:32:d0: fc:d5:a8:86:89:50:60:9b:e0:ae:a9:6c:22:ad:c3: ec:b7:d7:f7:3d:b6:24:f8:c7:53:15:3d:22:1a:c1: cc:c0:3f:47:0e:fd:7a:d4:d1:26:b8:de:5a:0d:42: 5b:15:76:3a:18:5f:42:21:30:77:b5:26:a1:d9:f6: 76:ba:07:85:c6:e2:a6:a2:9d:0f:24:a3:da:b5:40: 85:b6:c7:ec:f8:12:df:ec:0a:67:56:11:71:2d:52: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FD:C7:C2:98:71:4A:B2:DC:F8:F1:C0:62:58:42:9A:A0:B0:AE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cd:b1:56:47:65:77:49:69:d6:42:45:4b:4a:74:fd:21:ef: a7:85:dd:e9:70:ed:16:7c:b5:82:b2:b6:4e:a1:52:78:6c:61: 22:bc:e4:e4:d8:07:9f:6b:d4:96:a5:c4:aa:f1:0a:62:d3:7f: c0:e1:2a:69:d6:e0:c2:d7:4a:d5:7e:a6:69:36:3d:f7:f3:29: 7a:95:cc:c8:ea:9f:b3:1b:b0:12:64:41:98:5f:bd:77:07:21: 23:28:2b:3e:52:6a:fc:bd:72:f2:99:61:ed:10:fc:21:9c:c6: a1:09:95:ed:13:e6:fd:a4:5a:de:10:7e:3a:ee:95:a5:6a:25: 6b:50:bd:f4:ba:48:18:2b:90:71:c5:33:bd:2e:fa:68:27:e0: 75:a2:4b:a6:3f:95:96:f8:e2:03:4f:84:a9:24:6e:00:d5:c8: d3:37:a4:02:a1:ba:97:c8:ea:94:43:1a:72:30:6b:5e:7b:8a: ab:92:1e:cd:6b:2e:02:51:82:04:cd:1d:94:9e:7a:35:d6:48: 52:17:54:da:5f:e9:86:45:2f:27:d2:d4:8c:18:2f:2e:d0:a5: ac:07:fc:8c:bb:c8:1c:76:ad:63:1c:88:db:57:d0:17:b1:19: bb:57:e5:bd:29:5e:20:4d:a1:3a:b9:48:72:48:c9:49:52:2a: a9:75:b2:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mDBufYxppBdvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZWRhNDUxMTYtNTY5MC00YTMzLTg3ZTUtN2VhYmZjYWE5YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ajNbEO46b8pmtwPiCBoDliO7+3svHZWg3l 7qm+nBP7JXox3n7IXSXTVzh0oVgvepw4QghndSY+x2PgD9Dx9hUCOR5avTSACgf0 RHQPxurTWuJyS9HlEPxrnR7edSe51euR30kzrBZ/S9bFzusl51PbEy945RM2ZmJX dPoWe7A4IEfWxzz/GGItItmiYlwKvLrxWJgsYX04tfA7jp+7fvklMtD81aiGiVBg m+CuqWwircPst9f3PbYk+MdTFT0iGsHMwD9HDv161NEmuN5aDUJbFXY6GF9CITB3 tSah2fZ2ugeFxuKmop0PJKPatUCFtsfs+BLf7ApnVhFxLVIdnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr9x8KYcUqy3PjxwGJYQpqgsK46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvN2YwMzNhYTEtMGY2NC0z ZDM3LTg5NWItOGE0YzlhOTQ3M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfNsVZHZXdJadZCRUtKdP0h76eF3elw7RZ8tYKytk6hUnhsYSK85OTY B59r1JalxKrxCmLTf8DhKmnW4MLXStV+pmk2PffzKXqVzMjqn7MbsBJkQZhfvXcH ISMoKz5Savy9cvKZYe0Q/CGcxqEJle0T5v2kWt4QfjrulaVqJWtQvfS6SBgrkHHF M70u+mgn4HWiS6Y/lZb44gNPhKkkbgDVyNM3pAKhupfI6pRDGnIwa157iquSHs1r LgJRggTNHZSeejXWSFIXVNpf6YZFLyfS1IwYLy7QpawH/Iy7yBx2rWMciNtX0Bex GbtX5b0pXiBNoTq5SHJIyUlSKql1sr4= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:50 2025 by rpki-client