$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa File: 6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa (raw, json) Hash identifier: cqdqjBaTgN2+G1sqTGxsNvaMbBf+VztK1rxvSHyrwsI= Subject key identifier: 7F:C2:D5:C2:6F:76:EE:8D:A0:AC:76:61:0D:E9:C8:E6:BD:53:8D:49 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858491D7189CA068EA35CA0C628D0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:89:ca:06:8e:a3:5c:a0:c6:28:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=2284eeaa-852a-4eeb-823e-e6ad5a739775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:34:6e:d0:0e:60:1f:16:50:65:02:58:2c:30: 82:ef:f8:f6:32:57:93:84:00:17:45:71:8d:f0:d9: 57:10:6d:fc:5d:d7:5a:34:7c:fc:54:a3:67:e3:d1: a5:92:3c:8f:86:b3:23:eb:1f:cb:49:27:80:8d:5e: c3:f1:b3:0e:a0:a4:89:82:2d:4e:9f:90:b0:7d:ce: f8:cc:c8:f7:e0:b5:c0:89:db:e3:80:9f:6a:ba:ca: 9c:f5:14:55:aa:70:97:6d:ac:6d:49:3a:7b:8b:30: 24:2e:74:2b:70:2a:c3:59:63:d8:45:ca:9d:25:78: 77:44:55:3d:ce:86:c2:f4:e6:6e:53:e0:ee:e3:8d: 45:7f:00:14:cd:af:39:bb:67:05:66:d9:04:c1:66: bd:69:19:e2:fe:e7:dc:93:1c:8b:63:1f:8f:ce:6f: d0:16:a2:76:1a:1b:25:d4:2e:0f:a5:47:f2:af:18: 7e:6e:96:67:c0:7f:ec:d0:d7:70:08:6a:13:d0:05: 11:a3:5e:37:40:53:f7:49:b1:2a:d9:8c:ff:bb:b7: 4c:15:f2:14:5c:c9:c6:ce:81:3f:b8:fa:19:73:ee: d1:99:13:88:0e:4e:29:6f:d8:af:67:b0:df:e8:a0: 06:39:a8:37:fc:f3:ca:bb:5e:12:f2:c6:69:35:9f: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:D5:C2:6F:76:EE:8D:A0:AC:76:61:0D:E9:C8:E6:BD:53:8D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:96:2c:d3:73:6a:c3:c8:19:c8:f5:46:17:4a:4d:d2:17:51: 3a:aa:f9:50:ea:6e:47:d9:0b:22:93:61:ed:af:4f:1e:40:04: 99:ef:f0:22:0d:3c:63:bd:ff:e8:c6:e3:34:11:21:87:fd:f8: 11:34:6a:d7:94:c3:f8:b1:62:6c:f7:07:47:84:c9:e7:77:b5: 8b:72:89:44:a5:f2:7d:91:14:5a:ab:f3:3b:3c:09:8d:5a:c8: 15:ef:88:12:70:25:5d:54:9c:ad:7b:56:be:24:4a:0d:9c:cc: a3:2f:e1:7d:9b:76:31:49:14:6f:6c:f4:95:62:7d:34:6e:b6: d9:89:ec:71:7f:d0:04:38:10:24:02:dd:e6:6c:50:ff:f3:b1: 9e:d1:73:d9:c9:ad:a6:da:f9:48:25:88:f9:2e:5a:cc:ce:23: 8c:3b:62:65:bb:69:9d:ce:ee:dd:30:45:d0:5d:6e:79:cc:98: 28:76:b4:35:7c:40:2e:4b:93:a8:14:01:5f:7c:d6:00:60:01: a9:42:bf:39:d7:de:38:08:7d:e1:98:bd:85:86:28:5e:b7:f5: c4:da:23:df:58:e2:f7:b1:b8:22:4a:80:d1:28:9e:3d:19:e0: ef:d1:9e:ee:06:93:db:c8:38:25:c2:e6:c6:68:fb:9d:72:9b: 06:0e:d4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYnKBo6jXKDGKNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MjI4NGVlYWEtODUyYS00ZWViLTgyM2UtZTZhZDVhNzM5Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jRu0A5gHxZQZQJYLDCC7/j2MleThAAXRXGN 8NlXEG38XddaNHz8VKNn49GlkjyPhrMj6x/LSSeAjV7D8bMOoKSJgi1On5Cwfc74 zMj34LXAidvjgJ9qusqc9RRVqnCXbaxtSTp7izAkLnQrcCrDWWPYRcqdJXh3RFU9 zobC9OZuU+Du441FfwAUza85u2cFZtkEwWa9aRni/ufckxyLYx+Pzm/QFqJ2Ghsl 1C4PpUfyrxh+bpZnwH/s0NdwCGoT0AURo143QFP3SbEq2Yz/u7dMFfIUXMnGzoE/ uPoZc+7RmROIDk4pb9ivZ7Df6KAGOag3/PPKu14S8sZpNZ/N0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/C1cJvdu6NoKx2YQ3pyOa9U41JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNjQ3NWViZTQtOWI0NC0z ZGM5LTlkYjYtMGM3ZGUwMGUyYmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+WLNNzasPIGcj1RhdKTdIXUTqq+VDqbkfZCyKTYe2vTx5ABJnv8CIN PGO9/+jG4zQRIYf9+BE0ateUw/ixYmz3B0eEyed3tYtyiUSl8n2RFFqr8zs8CY1a yBXviBJwJV1UnK17Vr4kSg2czKMv4X2bdjFJFG9s9JVifTRuttmJ7HF/0AQ4ECQC 3eZsUP/zsZ7Rc9nJraba+UgliPkuWszOI4w7YmW7aZ3O7t0wRdBdbnnMmCh2tDV8 QC5Lk6gUAV981gBgAalCvznX3jgIfeGYvYWGKF639cTaI99Y4vexuCJKgNEonj0Z 4O/Rnu4Gk9vIOCXC5sZo+51ymwYO1Nk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:10:52 2025 by rpki-client