$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa File: 4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa (raw, json) Hash identifier: QOBX0fbVdVGWiQi62ea8Ym76x49c9BkvZDXRRlsE8iw= Subject key identifier: 88:9E:3C:D4:25:6F:62:B5:F9:07:77:C6:DE:4F:B4:AE:B0:31:27:7B Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858491D7189E637B436E03F095CA0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:89:e6:37:b4:36:e0:3f:09:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=d2b81b54-cf28-4087-b9e8-a4fe04008c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:96:dc:25:e8:7a:47:87:57:50:da:64:3f: 76:5a:75:cd:35:f8:ff:23:a5:25:58:48:82:87:1f: a9:90:49:2f:fc:9c:32:fd:ca:31:f7:4a:04:8b:1b: f0:73:58:d9:53:3d:28:8a:0d:69:33:68:8d:b0:fd: 27:90:41:d4:b1:cd:ce:b3:07:fb:a8:cb:d5:a3:9a: 93:b2:0d:cb:b1:9b:b4:8e:ff:aa:b2:7e:3a:20:fd: a1:03:4c:01:38:58:3d:0b:78:8f:4e:2b:18:45:ba: 16:a1:a4:27:ee:ae:e8:b8:2a:91:30:be:28:dc:8b: 4f:d9:15:b3:b7:56:e1:f5:6b:64:94:22:38:e4:f8: 58:aa:31:de:9d:2e:03:b4:78:5b:07:53:a7:d5:22: 86:15:d7:25:43:16:6e:21:61:6c:ca:d6:8c:95:d9: 5d:c0:6b:8e:2f:66:0a:a5:71:47:2d:68:b5:03:e4: 56:e2:41:b6:93:87:fe:bb:f0:7a:8b:ce:dc:66:89: 08:13:5f:0a:c9:fc:64:47:9d:dc:77:55:d7:de:07: 4d:3b:01:3c:6b:a8:bb:d5:75:59:39:62:ba:d1:dc: bb:83:4d:36:47:3a:bf:00:63:e7:c1:71:77:4c:80: b1:60:38:e6:76:28:53:b1:35:a3:56:9e:35:5c:13: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9E:3C:D4:25:6F:62:B5:F9:07:77:C6:DE:4F:B4:AE:B0:31:27:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:23:50:32:ab:8d:c5:b5:eb:d5:9d:35:7d:78:04:ba:c5:a9: 80:d9:11:04:39:1c:0b:20:12:c0:ba:77:81:a1:19:68:ca:d2: 32:fb:22:25:bd:ca:3e:32:41:a9:10:fa:3e:4d:c6:a8:4d:be: df:28:23:bc:d8:1c:cd:12:b6:74:d9:95:67:61:d9:c4:bb:6b: 2d:34:86:7e:9f:47:24:6a:be:b0:2a:66:cf:25:93:bf:c6:ea: 9b:ac:2f:db:62:9d:de:b3:e3:c9:fa:8a:da:41:6f:35:4a:b8: 3b:8c:1d:6c:a8:b3:e6:f1:63:ca:88:54:5d:53:26:fa:3a:18: 4e:f8:2f:66:21:78:b9:f7:ed:c0:06:fd:5d:41:80:6e:b3:98: a5:92:89:cb:d3:74:83:d3:24:9c:17:ef:d1:79:73:bc:ea:ed: 7c:de:4a:71:9a:46:51:eb:11:d9:d2:c6:11:1f:0b:49:16:cb: 10:db:67:42:86:58:ff:e4:c0:07:fe:45:3b:77:f4:d5:63:55: d9:72:50:81:64:2b:b8:82:1c:f4:a3:95:96:f6:35:12:f4:9b: 4a:a9:ce:4e:13:88:0e:5d:0f:cc:32:fb:b6:af:60:a8:71:7e: 1c:c8:0a:32:3f:fb:ff:e0:65:31:58:30:b3:ab:2c:db:8b:95: 31:7f:ba:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYnmN7Q24D8JXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDJiODFiNTQtY2YyOC00MDg3LWI5ZTgtYTRmZTA0MDA4YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuROW3CXoekeHV1DaZD92WnXNNfj/I6UlWEiC hx+pkEkv/Jwy/cox90oEixvwc1jZUz0oig1pM2iNsP0nkEHUsc3Oswf7qMvVo5qT sg3LsZu0jv+qsn46IP2hA0wBOFg9C3iPTisYRboWoaQn7q7ouCqRML4o3ItP2RWz t1bh9WtklCI45PhYqjHenS4DtHhbB1On1SKGFdclQxZuIWFsytaMldldwGuOL2YK pXFHLWi1A+RW4kG2k4f+u/B6i87cZokIE18KyfxkR53cd1XX3gdNOwE8a6i71XVZ OWK60dy7g002Rzq/AGPnwXF3TICxYDjmdihTsTWjVp41XBMkYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiePNQlb2K1+Qd3xt5PtK6wMSd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNGFmNmYzNDItYmYyYi0z MTdhLThjNmMtOWRhNmU0ZTQ2YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQjUDKrjcW169WdNX14BLrFqYDZEQQ5HAsgEsC6d4GhGWjK0jL7IiW9 yj4yQakQ+j5NxqhNvt8oI7zYHM0StnTZlWdh2cS7ay00hn6fRyRqvrAqZs8lk7/G 6pusL9tind6z48n6itpBbzVKuDuMHWyos+bxY8qIVF1TJvo6GE74L2YheLn37cAG /V1BgG6zmKWSicvTdIPTJJwX79F5c7zq7XzeSnGaRlHrEdnSxhEfC0kWyxDbZ0KG WP/kwAf+RTt39NVjVdlyUIFkK7iCHPSjlZb2NRL0m0qpzk4TiA5dD8wy+7avYKhx fhzICjI/+//gZTFYMLOrLNuLlTF/unY= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:21 2025 by rpki-client