$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa File: 09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa (raw, json) Hash identifier: hIzjkp9M19/kYJ/z+kcURo23DEEEkWrZKx05th9t2+Q= Subject key identifier: 7F:2D:30:71:82:E2:A5:A4:6A:06:77:EC:D6:C6:3E:4C:BE:07:FE:29 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B64176F327F2124BCFA2B80 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 68.68.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:17:6f:32:7f:21:24:bc:fa:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=38680e54-bd3f-4f49-ba49-e47306c31739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2b:3c:f2:2a:a9:23:2b:da:28:32:86:bf:d4: 7f:b7:aa:5f:e8:93:b4:ba:6f:19:48:e2:15:7b:22: 66:b3:45:e5:e7:e0:e2:e8:a4:59:f2:d6:6e:bc:39: 70:1e:00:29:b2:bb:59:0c:c0:3c:8f:bd:f5:f3:3d: 09:e6:db:5f:e2:07:96:db:f5:24:ab:53:b8:5b:e0: 86:f8:46:d9:84:3f:01:54:10:e3:39:47:89:49:a0: 67:58:80:bc:93:04:62:30:8f:9e:65:2f:cb:46:23: bf:a1:52:3c:d3:75:ad:e9:6d:b3:35:70:dd:6a:52: 77:5c:5b:d5:42:0e:06:f5:81:47:91:d4:57:b0:17: 99:d8:ab:0c:f9:bf:43:f3:79:a5:c0:73:f5:d2:34: 91:81:79:97:4f:88:0a:ec:37:7c:64:f6:a3:4a:94: 72:c9:1b:d7:d1:00:34:c3:97:c3:de:00:b7:41:79: 7b:25:c8:a7:c0:72:31:d8:5b:dc:4b:90:be:b5:5b: 2c:77:d5:08:06:d1:31:0f:28:4b:c0:b3:1b:dc:65: e6:05:2a:f7:4d:b6:d4:c5:0a:4d:76:76:4e:8d:67: 07:7d:fc:87:fb:bc:34:f3:d1:53:d0:e0:d4:0a:22: eb:e8:94:3c:14:ad:bb:67:18:6a:a1:d3:fc:5d:27: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2D:30:71:82:E2:A5:A4:6A:06:77:EC:D6:C6:3E:4C:BE:07:FE:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ff:fe:01:51:96:d8:a8:24:e6:d8:dd:1e:fd:b6:5d:eb:50: b7:3a:a7:26:0a:bd:8e:71:3f:ed:4f:cb:95:23:05:ff:fa:79: 91:28:03:5d:7c:d0:19:6a:9a:95:9e:a6:28:29:0d:e5:94:72: ec:37:16:90:8f:4c:85:e2:11:63:62:c9:bc:6b:33:8b:e7:c9: 92:87:54:14:67:16:2d:0c:c3:d3:74:d2:2f:8e:59:d8:26:6a: 86:fe:48:9d:bb:56:41:70:70:ce:8c:1b:4b:d2:16:5d:c0:fe: 31:90:6f:69:6e:22:6e:a0:32:13:f7:cb:01:02:92:b2:f1:0c: 1a:d6:18:37:44:6e:9f:25:db:c8:48:cb:65:65:9b:15:3d:5c: e4:c9:4e:6f:b4:7a:6e:e7:2b:ed:04:8e:a1:1f:8d:5e:9a:9f: 24:0c:22:e2:e9:3c:13:6c:04:1a:74:19:11:0c:95:6b:3a:96: 1c:22:ff:83:65:74:f7:77:88:ce:63:48:7d:4a:b0:e0:17:d5: d9:78:ee:c0:a9:f8:26:1f:4a:77:8b:e1:b1:f7:13:c5:b5:20: 82:f8:2f:6d:e4:b0:05:71:bd:42:e6:08:69:91:e4:f2:75:99: ff:1d:0f:e8:94:09:4d:91:22:5d:39:c0:b2:5d:ad:65:17:c6: 0f:8e:8a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBdvMn8hJLz6K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk Mzg2ODBlNTQtYmQzZi00ZjQ5LWJhNDktZTQ3MzA2YzMxNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ys88iqpIyvaKDKGv9R/t6pf6JO0um8ZSOIV eyJms0Xl5+Di6KRZ8tZuvDlwHgApsrtZDMA8j7318z0J5ttf4geW2/Ukq1O4W+CG +EbZhD8BVBDjOUeJSaBnWIC8kwRiMI+eZS/LRiO/oVI803Wt6W2zNXDdalJ3XFvV Qg4G9YFHkdRXsBeZ2KsM+b9D83mlwHP10jSRgXmXT4gK7Dd8ZPajSpRyyRvX0QA0 w5fD3gC3QXl7JcinwHIx2FvcS5C+tVssd9UIBtExDyhLwLMb3GXmBSr3TbbUxQpN dnZOjWcHffyH+7w089FT0ODUCiLr6JQ8FK27ZxhqodP8XScw/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8tMHGC4qWkagZ37NbGPky+B/4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMDlhYWYyY2QtM2E2OS0z MjFmLTlkYTEtZjgzZDcyZDlhNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL//gFRltioJObY3R79tl3rULc6pyYKvY5xP+1Py5UjBf/6eZEoA118 0BlqmpWepigpDeWUcuw3FpCPTIXiEWNiybxrM4vnyZKHVBRnFi0Mw9N00i+OWdgm aob+SJ27VkFwcM6MG0vSFl3A/jGQb2luIm6gMhP3ywECkrLxDBrWGDdEbp8l28hI y2VlmxU9XOTJTm+0em7nK+0EjqEfjV6anyQMIuLpPBNsBBp0GREMlWs6lhwi/4Nl dPd3iM5jSH1KsOAX1dl47sCp+CYfSneL4bH3E8W1IIL4L23ksAVxvULmCGmR5PJ1 mf8dD+iUCU2RIl05wLJdrWUXxg+Oiq4= -----END CERTIFICATE-----Generated at Sun Apr 6 22:33:24 2025 by rpki-client