$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa File: 3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa (raw, json) Hash identifier: jhxRrmfx+UoYu1a3pKY4B1gA/2UOtpmpkKz21sxHNnM= Subject key identifier: D1:15:6E:F9:5C:8A:51:1B:CB:64:E9:A6:68:35:CD:93:14:F0:2D:1B Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858491D718A6DC3CB210E7DF02B40 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:8a:6d:c3:cb:21:0e:7d:f0:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=e570f933-282f-490d-8d98-23e273b7d9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:f7:80:16:1e:03:3f:de:a3:31:b9:db:68: 98:3e:81:7b:97:99:5f:4c:9e:8e:39:da:5b:e6:6a: 42:dd:19:33:ef:a5:ba:2d:cb:84:2f:11:10:c7:47: 0d:f0:72:26:4e:44:4f:a3:53:31:60:80:40:cf:fa: dd:8d:3e:7a:cd:71:f8:ff:e6:33:44:ac:f8:1c:97: 81:a2:93:bc:5c:ca:14:c8:47:22:ac:f0:a4:7e:54: db:36:b0:e1:82:83:fe:21:d4:88:ea:f0:92:84:58: a9:43:05:36:70:c2:8e:21:45:c6:05:32:2b:4f:02: 6b:76:82:0a:20:81:13:20:4d:42:30:aa:70:29:28: 7f:c5:21:85:71:61:6c:4a:eb:23:29:25:a7:2e:27: 96:cf:19:66:a3:27:83:e8:b0:a0:ff:ac:0e:1f:29: 90:ec:47:f1:40:9d:cf:32:6f:43:d7:2c:c0:21:ed: 0d:81:36:b2:ff:69:9c:e5:0b:bb:56:fa:23:dc:68: 19:5b:e6:af:29:02:f2:ec:aa:cc:01:53:ac:77:2b: e4:5e:5d:93:f1:90:49:30:9d:99:aa:9e:75:9b:13: e9:eb:b8:e3:74:59:4d:28:a1:f9:a5:e4:e0:7a:94: db:c9:08:87:de:47:69:d9:2a:40:cb:da:50:7b:0d: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:15:6E:F9:5C:8A:51:1B:CB:64:E9:A6:68:35:CD:93:14:F0:2D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7f:c8:82:b0:d1:35:e6:a0:5b:da:80:cd:f4:15:a0:ec:f7: 5d:3e:0c:6b:d2:63:44:08:ce:9e:f0:99:46:be:09:85:87:ce: 38:63:9e:d5:d1:a4:bc:38:80:f7:68:c2:1a:40:74:90:9c:2d: 17:1e:98:e8:f3:34:8d:e0:4c:b8:83:55:83:fa:d2:1d:27:41: 65:e0:5b:6d:a9:ff:f7:b5:f5:38:31:ca:1f:58:53:79:03:1d: 18:bc:40:2c:83:ad:d3:b3:ed:bf:41:45:9f:6f:1b:e6:e0:58: d7:3f:62:71:06:80:fe:76:8d:df:4c:c3:28:47:7d:62:22:02: 5d:d6:7d:4d:73:72:ef:45:f6:40:3c:a5:59:3e:fc:a8:9d:95: 4b:e1:a8:0b:06:bf:94:f3:1c:a2:e7:c0:cf:7a:31:cf:e5:1b: 40:d7:bd:fc:08:fd:6a:78:de:e6:1b:8e:e8:22:dc:70:0f:4b: 09:38:29:83:3f:6c:2e:33:cf:67:87:33:b4:4c:e6:5b:5d:71: d3:be:d3:6e:5b:51:db:8b:5d:a1:96:22:98:b3:de:ea:f3:61: c3:14:64:87:d3:a7:bc:43:a3:11:41:4e:8a:d5:20:11:f0:4b: 1a:ca:c7:f0:c7:1a:6d:f1:44:2d:e2:5a:82:cd:e5:fd:99:f0: 63:51:8d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYptw8shDn3wK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTU3MGY5MzMtMjgyZi00OTBkLThkOTgtMjNlMjczYjdkOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B73gBYeAz/eozG522iYPoF7l5lfTJ6OOdpb 5mpC3Rkz76W6LcuELxEQx0cN8HImTkRPo1MxYIBAz/rdjT56zXH4/+YzRKz4HJeB opO8XMoUyEcirPCkflTbNrDhgoP+IdSI6vCShFipQwU2cMKOIUXGBTIrTwJrdoIK IIETIE1CMKpwKSh/xSGFcWFsSusjKSWnLieWzxlmoyeD6LCg/6wOHymQ7EfxQJ3P Mm9D1yzAIe0NgTay/2mc5Qu7Vvoj3GgZW+avKQLy7KrMAVOsdyvkXl2T8ZBJMJ2Z qp51mxPp67jjdFlNKKH5peTgepTbyQiH3kdp2SpAy9pQew0UEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEVbvlcilEby2Tppmg1zZMU8C0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvM2QyODg0ZWItODRjOS0z NGFjLTk3ZDEtMzRiNzc5MGQ3YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9/yIKw0TXmoFvagM30FaDs910+DGvSY0QIzp7wmUa+CYWHzjhjntXR pLw4gPdowhpAdJCcLRcemOjzNI3gTLiDVYP60h0nQWXgW22p//e19Tgxyh9YU3kD HRi8QCyDrdOz7b9BRZ9vG+bgWNc/YnEGgP52jd9MwyhHfWIiAl3WfU1zcu9F9kA8 pVk+/KidlUvhqAsGv5TzHKLnwM96Mc/lG0DXvfwI/Wp43uYbjugi3HAPSwk4KYM/ bC4zz2eHM7RM5ltdcdO+025bUduLXaGWIpiz3urzYcMUZIfTp7xDoxFBTorVIBHw SxrKx/DHGm3xRC3iWoLN5f2Z8GNRjVY= -----END CERTIFICATE-----Generated at Fri Mar 14 09:50:05 2025 by rpki-client