$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa File: 829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa (raw, json) Hash identifier: ZPMwcJlC/auQyUfV2u7wdxpCAsQ1ac0xeY+zB2DygAI= Subject key identifier: 01:E1:B3:89:82:DE:EB:E1:AF:04:EE:5F:FC:88:6A:0A:E1:82:BF:A9 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F432858491941893F3770D0F467CF3F00 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 68.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:89:3f:37:70:d0:f4:67:cf:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=ff0bfba7-d96b-4d02-a809-68cc0c6adf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:dc:37:c8:5d:70:00:c5:44:bd:a0:14:42: 29:90:fd:ca:bf:e0:72:63:c2:3a:92:de:6e:aa:71: 89:58:73:40:39:64:9d:7f:14:3f:81:62:8f:30:3b: db:29:8b:72:be:ce:59:e9:d3:14:23:c7:2e:66:72: 57:a9:2d:03:67:02:57:d5:db:92:e8:bc:a1:d9:27: d0:86:85:9a:d1:7f:6d:71:9b:4d:fc:fb:cf:c5:64: d7:99:6f:8f:96:67:4a:02:f1:42:11:b8:fd:3c:22: 42:6f:f3:eb:7f:76:b1:99:a2:b3:ea:3b:f6:55:81: e6:dc:3e:d6:b7:88:1a:81:c1:8e:7c:60:c4:3d:f7: 60:3e:37:a2:aa:c9:39:cf:fa:2c:29:eb:af:ce:15: 6b:86:c8:3e:5d:e7:d5:06:71:94:2f:39:ed:da:1d: 5a:eb:37:3d:5d:95:32:55:bf:84:02:e0:69:76:63: c4:23:1d:f4:cb:b9:1e:2e:7b:5d:16:16:6a:da:60: 4c:cf:36:5f:e2:04:89:15:9d:7d:78:20:14:2b:d9: fd:3f:bd:74:ae:52:14:52:c2:88:ea:4c:b5:a2:12: 0d:78:42:83:19:e6:0b:cd:3d:ca:69:3f:e3:91:28: 9b:8d:91:04:03:7a:ff:dc:a0:fa:39:3e:39:4a:50: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E1:B3:89:82:DE:EB:E1:AF:04:EE:5F:FC:88:6A:0A:E1:82:BF:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8e:06:d8:33:cd:49:c2:8f:0a:f8:31:3b:12:3d:a0:3e:ef: 28:5a:c0:08:cf:18:ee:f9:30:14:52:1d:d0:2a:b4:dd:bd:0c: 43:8e:f4:00:03:b9:1a:bc:2c:63:86:3c:8e:eb:f6:7f:19:3b: f7:3d:a8:8a:b2:91:19:4e:f8:83:9b:92:6b:dc:3f:33:bd:c7: 41:d8:99:a3:8e:2f:0e:3b:9b:1c:08:89:31:8f:c4:3b:c5:d7: a9:fa:cc:38:fe:14:91:ab:01:b3:10:7e:e4:97:31:29:0b:be: d2:3d:ec:29:b5:f6:8f:97:9d:10:0a:e3:34:6b:33:b9:b8:0c: f0:d3:75:c1:48:d0:31:e4:b3:3a:c6:d5:1a:5b:ed:cf:a0:e4: e8:28:d1:07:ae:2d:55:fd:f7:f3:f8:b8:dc:8a:6b:3e:be:43: 52:8f:3e:8e:f5:76:dd:16:1a:ed:9f:da:32:fc:4c:20:51:03: 43:26:a1:05:c2:d5:49:a5:24:3b:a1:a1:68:97:4c:53:fc:ee: f1:1f:b9:76:6e:f1:3c:21:54:e0:c9:bf:1d:a1:4f:c3:13:db: d1:b0:7f:6c:e3:bf:56:3c:a4:c3:4a:b1:32:58:c6:7c:e5:4f: e9:be:3b:fb:f1:ed:f6:17:a4:6d:c4:b5:f7:96:e5:4e:64:d9: dd:41:17:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYk/N3DQ9GfPPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZmYwYmZiYTctZDk2Yi00ZDAyLWE4MDktNjhjYzBjNmFkZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k7cN8hdcADFRL2gFEIpkP3Kv+ByY8I6kt5u qnGJWHNAOWSdfxQ/gWKPMDvbKYtyvs5Z6dMUI8cuZnJXqS0DZwJX1duS6Lyh2SfQ hoWa0X9tcZtN/PvPxWTXmW+PlmdKAvFCEbj9PCJCb/Prf3axmaKz6jv2VYHm3D7W t4gagcGOfGDEPfdgPjeiqsk5z/osKeuvzhVrhsg+XefVBnGULznt2h1a6zc9XZUy Vb+EAuBpdmPEIx30y7keLntdFhZq2mBMzzZf4gSJFZ19eCAUK9n9P710rlIUUsKI 6ky1ohINeEKDGeYLzT3KaT/jkSibjZEEA3r/3KD6OT45SlAYUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHhs4mC3uvhrwTuX/yIagrhgr+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODI5ZWEwN2QtOWRiZS0z NmZkLWI0YWEtYzdiMzgwMzRmMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiOBtgzzUnCjwr4MTsSPaA+7yhawAjPGO75MBRSHdAqtN29DEOO9AAD uRq8LGOGPI7r9n8ZO/c9qIqykRlO+IObkmvcPzO9x0HYmaOOLw47mxwIiTGPxDvF 16n6zDj+FJGrAbMQfuSXMSkLvtI97Cm19o+XnRAK4zRrM7m4DPDTdcFI0DHkszrG 1Rpb7c+g5Ogo0QeuLVX99/P4uNyKaz6+Q1KPPo71dt0WGu2f2jL8TCBRA0MmoQXC 1UmlJDuhoWiXTFP87vEfuXZu8TwhVODJvx2hT8MT29Gwf2zjv1Y8pMNKsTJYxnzl T+m+O/vx7fYXpG3EtfeW5U5k2d1BF9o= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:43 2025 by rpki-client