$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa File: ef6ef0be-d7e9-316c-ac17-32c51d629568.roa (raw, json) Hash identifier: wIqdjDVwbYPO9DFmIes9GVHkkZZMxHlQDIrNVZson2g= Subject key identifier: 97:D1:FB:15:E1:F4:D0:DE:C8:91:4E:BC:60:52:FF:04:1C:63:9F:A0 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584930DE60872561B2D40E922980 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 25843 IP address blocks: 68.168.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:60:87:25:61:b2:d4:0e:92:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=1580f8e0-a149-41ef-93c4-4e85ab1fa0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:f5:de:ad:73:2c:37:ea:52:34:98:09:81: 63:f7:50:66:c7:ad:cd:b1:15:0d:c5:0d:8c:25:ee: c9:d6:46:d3:77:3c:84:d7:dd:c1:fe:79:26:04:53: 6e:27:b9:7a:d9:39:a1:5f:04:e0:3f:a2:74:80:af: fe:fa:68:2f:9b:2b:7f:88:aa:ba:d0:a4:28:37:bb: ef:0e:90:f0:85:86:89:dd:51:30:19:bb:5d:55:f9: af:ef:8a:e3:b4:a6:e8:c7:a7:63:96:aa:41:83:b1: 21:46:33:03:66:e6:7f:cb:79:de:94:1a:2e:a6:77: 88:51:08:8d:f8:81:b5:75:e1:f0:84:d0:bc:aa:f5: cf:37:c6:78:75:2b:4b:98:4e:e3:ea:ce:b8:2b:db: fc:63:0e:3b:d4:8b:c8:c9:78:a7:1a:06:11:a3:53: 62:cf:d0:c8:00:16:c9:df:1e:be:35:81:8c:08:31: 11:27:90:81:7a:b4:98:39:10:ed:39:0b:00:02:4d: 03:43:69:3a:3d:7e:f2:5a:80:61:8e:98:8b:73:58: 9e:fd:17:fc:ca:b1:09:0c:18:45:88:59:79:66:62: 0c:30:7c:59:b1:00:58:d3:dc:81:06:40:fd:2f:0d: 51:12:50:e1:c6:87:7c:c3:d1:4f:f1:b9:b6:52:5a: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D1:FB:15:E1:F4:D0:DE:C8:91:4E:BC:60:52:FF:04:1C:63:9F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ef6ef0be-d7e9-316c-ac17-32c51d629568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:29:08:4c:71:68:cc:58:4e:3d:61:0e:48:6a:91:9c:ea:e7: ac:a4:a3:79:66:a3:bb:64:60:cd:be:b1:ce:64:59:01:2a:3c: 2a:4b:79:42:9a:aa:57:9a:4b:87:64:9d:8b:64:f3:88:e8:55: 38:85:eb:22:42:6f:c6:9f:2e:2f:82:03:a8:9f:5d:04:d4:a0: 10:a8:7b:3c:0f:41:77:06:40:28:97:c9:ab:f6:e1:1f:cb:1d: 7b:56:53:83:46:ed:3a:d1:25:12:f4:e7:08:49:58:72:01:7b: 9f:33:b0:03:04:7a:45:4f:d8:39:a5:55:30:a3:66:e7:14:81: 96:41:9c:ec:da:28:e1:b5:61:59:59:05:8d:00:e9:03:51:cc: 1a:d0:32:b7:f9:f5:48:e7:ce:03:b0:d7:f6:3c:4c:45:1e:ac: 44:1c:b3:3c:3c:22:4d:d2:61:a9:7d:9f:e8:40:db:7a:ab:73: d2:a2:bc:3b:eb:b0:5b:78:aa:82:e4:d0:45:f1:6f:70:d1:9e: a2:10:1a:e3:f0:b4:a1:1d:31:ae:5d:9c:8a:8a:31:de:bb:88: e2:bf:c6:90:fd:e1:c1:e2:4d:8e:30:ea:7a:6c:b5:6e:56:fb: be:4a:0e:f4:f6:5e:7a:b4:be:59:f4:55:11:66:3d:02:4d:68: 1a:41:32:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mCHJWGy1A6SKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MTU4MGY4ZTAtYTE0OS00MWVmLTkzYzQtNGU4NWFiMWZhMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x713q1zLDfqUjSYCYFj91Bmx63NsRUNxQ2M Je7J1kbTdzyE193B/nkmBFNuJ7l62TmhXwTgP6J0gK/++mgvmyt/iKq60KQoN7vv DpDwhYaJ3VEwGbtdVfmv74rjtKbox6djlqpBg7EhRjMDZuZ/y3nelBoupneIUQiN +IG1deHwhNC8qvXPN8Z4dStLmE7j6s64K9v8Yw471IvIyXinGgYRo1Niz9DIABbJ 3x6+NYGMCDERJ5CBerSYORDtOQsAAk0DQ2k6PX7yWoBhjpiLc1ie/Rf8yrEJDBhF iFl5ZmIMMHxZsQBY09yBBkD9Lw1RElDhxod8w9FP8bm2UloZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfR+xXh9NDeyJFOvGBS/wQcY5+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZWY2ZWYwYmUtZDdlOS0z MTZjLWFjMTctMzJjNTFkNjI5NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8pCExxaMxYTj1hDkhqkZzq56yko3lmo7tkYM2+sc5kWQEqPCpLeUKa qleaS4dknYtk84joVTiF6yJCb8afLi+CA6ifXQTUoBCoezwPQXcGQCiXyav24R/L HXtWU4NG7TrRJRL05whJWHIBe58zsAMEekVP2DmlVTCjZucUgZZBnOzaKOG1YVlZ BY0A6QNRzBrQMrf59UjnzgOw1/Y8TEUerEQcszw8Ik3SYal9n+hA23qrc9KivDvr sFt4qoLk0EXxb3DRnqIQGuPwtKEdMa5dnIqKMd67iOK/xpD94cHiTY4w6npstW5W +75KDvT2Xnq0vln0VRFmPQJNaBpBMqU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:13:46 2025 by rpki-client