$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa File: 22ce9333-f4e1-3463-b3d9-608137f7b619.roa (raw, json) Hash identifier: OZpkrzu3t1n6vzYHZh76TxQGsRVexpQL+WLcZwvS9Nk= Subject key identifier: 94:52:A1:A1:6E:A5:D5:DE:81:0F:E2:4A:18:F9:65:CE:65:DF:F3:B1 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858491D718A2EE65A866342E60F80 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:8a:2e:e6:5a:86:63:42:e6:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=2a66aeb8-15bd-4791-af5b-288359740027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:17:aa:f9:36:a2:db:fc:9a:33:8b:ee:67: 28:e0:e7:b3:67:1e:a4:d3:7e:c7:53:e7:13:31:6b: 66:7e:88:89:4e:8d:3f:85:1d:f4:25:dc:43:4c:5b: 37:34:dd:8e:f1:fe:b4:a4:2b:42:65:36:a8:a7:db: 56:99:7d:53:b0:db:d9:6e:52:93:eb:a1:0a:31:c8: 8a:ef:80:f6:b2:c4:40:20:dc:bd:43:d0:21:40:66: 89:bb:4c:43:2a:ec:fc:14:a9:46:e6:e9:f7:45:9c: 4f:9c:c9:93:98:63:b4:ad:61:39:c5:fa:bb:e6:7e: 3a:02:e1:78:fb:90:ca:cb:c3:a0:30:fb:ac:80:a4: e9:27:3f:01:d6:25:e4:4d:00:fe:7e:54:b1:0c:af: 26:42:31:3d:1c:03:75:f6:63:1c:17:a9:bb:64:48: af:31:cc:16:fd:d8:b2:5a:22:f1:50:a5:c7:ce:5d: 53:b2:5e:53:b3:59:44:92:f5:a2:da:9b:f2:c9:5c: f4:40:61:6d:b0:f9:d6:a7:55:c3:ae:61:f9:a3:7c: da:52:2d:df:51:4f:56:f1:b8:9d:b7:6d:a5:e3:9c: 56:80:ea:d7:2b:43:f8:f6:27:7c:9c:62:79:38:08: a8:78:f7:d1:15:3b:e9:05:7c:df:e8:5d:72:f0:78: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:52:A1:A1:6E:A5:D5:DE:81:0F:E2:4A:18:F9:65:CE:65:DF:F3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ce:b8:2e:d2:f0:42:94:9d:4f:f2:a2:7d:8e:de:8f:53:b3: 39:e0:61:41:25:95:cd:25:2d:72:21:fd:1c:2d:dc:a0:c0:51: 45:b8:bd:88:e2:f1:2a:cb:74:41:e5:38:06:19:f6:78:65:7d: 80:ad:d8:4b:0e:32:86:96:d0:95:62:e9:8a:2f:03:1c:eb:e5: 37:7a:a1:f3:ed:27:da:82:9e:6d:27:69:54:14:7b:ee:25:41: a9:ea:2c:44:8b:08:02:0f:9e:19:64:83:cb:fd:0b:d2:b9:08: 22:13:03:60:0e:15:b6:5c:00:51:38:38:47:fb:dd:5e:20:c8: f9:18:80:e2:c1:a4:16:16:e4:fc:41:a5:2f:d4:67:0a:7c:99: bc:9b:b9:9e:62:ae:ac:54:4b:ce:35:04:9d:3c:c9:b6:59:48: 00:f7:d7:cc:a3:ec:54:1f:dd:da:30:01:fc:53:f0:25:df:dd: 2b:9c:91:f1:bf:40:98:8d:65:69:02:da:12:ed:36:ce:17:ac: 66:aa:d1:f9:73:1e:13:0f:14:12:0d:54:d8:9f:29:c9:cf:6b: fa:85:51:c4:30:bd:1a:da:c2:60:fa:a0:b6:69:7f:82:fa:c3: b3:31:47:30:0b:3b:e3:70:93:c2:a4:69:7f:70:ac:7b:40:f2: d1:01:7a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYou5lqGY0LmD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MmE2NmFlYjgtMTViZC00NzkxLWFmNWItMjg4MzU5NzQwMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBcXqvk2otv8mjOL7mco4OezZx6k037HU+cT MWtmfoiJTo0/hR30JdxDTFs3NN2O8f60pCtCZTaop9tWmX1TsNvZblKT66EKMciK 74D2ssRAINy9Q9AhQGaJu0xDKuz8FKlG5un3RZxPnMmTmGO0rWE5xfq75n46AuF4 +5DKy8OgMPusgKTpJz8B1iXkTQD+flSxDK8mQjE9HAN19mMcF6m7ZEivMcwW/diy WiLxUKXHzl1Tsl5Ts1lEkvWi2pvyyVz0QGFtsPnWp1XDrmH5o3zaUi3fUU9W8bid t22l45xWgOrXK0P49id8nGJ5OAioePfRFTvpBXzf6F1y8HiZOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRSoaFupdXegQ/iShj5Zc5l3/OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMjJjZTkzMzMtZjRlMS0z NDYzLWIzZDktNjA4MTM3ZjdiNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXOuC7S8EKUnU/yon2O3o9TszngYUEllc0lLXIh/Rwt3KDAUUW4vYji 8SrLdEHlOAYZ9nhlfYCt2EsOMoaW0JVi6YovAxzr5Td6ofPtJ9qCnm0naVQUe+4l QanqLESLCAIPnhlkg8v9C9K5CCITA2AOFbZcAFE4OEf73V4gyPkYgOLBpBYW5PxB pS/UZwp8mbybuZ5irqxUS841BJ08ybZZSAD318yj7FQf3dowAfxT8CXf3SuckfG/ QJiNZWkC2hLtNs4XrGaq0flzHhMPFBINVNifKcnPa/qFUcQwvRrawmD6oLZpf4L6 w7MxRzALO+Nwk8KkaX9wrHtA8tEBeoo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:24:43 2025 by rpki-client