$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa File: d0843c5d-c232-3c52-a28c-e504b426fab2.roa (raw, json) Hash identifier: ZKhFJA3MPCRVmbi11yQ94YsTp+pG4ktfCEhOIBwFN28= Subject key identifier: 0F:14:CB:45:EC:8E:48:29:88:CA:83:4F:6C:73:27:E2:08:3A:1C:DE Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858491D718A7E8E0CFF28C3F14F80 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19107 IP address blocks: 68.235.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:8a:7e:8e:0c:ff:28:c3:f1:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=5d6928d7-259c-46c9-a4de-ab4ec26a18d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:06:7f:7a:9e:05:47:aa:5b:4c:22:63:72: 6e:c0:70:9c:23:80:8a:f3:18:bd:55:9b:1d:03:a8: 48:8d:6c:80:dc:b5:ba:6f:7e:90:c4:f9:7c:e0:08: cf:8a:10:3c:42:af:3c:d6:c8:53:1d:ce:69:4f:9d: a6:47:d9:b1:84:b8:6b:71:44:db:8f:d8:6a:c8:8f: 5b:ca:2a:6e:fa:82:16:a1:a5:87:58:c1:1c:66:8d: f7:22:06:51:f2:4f:19:3b:80:99:95:ee:dc:63:50: 45:2b:78:c8:61:52:eb:83:27:c0:28:10:94:31:c4: 97:d2:5e:ab:c3:44:4e:de:c1:e2:11:e6:1c:5a:42: d8:e2:a4:8a:4b:cc:9d:8f:cd:12:59:e4:f9:29:dc: 2d:00:a7:c2:32:76:e2:bd:17:7a:7c:28:f9:20:c1: f4:79:e6:57:b1:25:8e:07:c8:93:01:37:49:9d:1a: 2b:bc:65:c0:4f:56:f6:23:e7:5d:03:5e:e1:d0:a4: 21:e7:e7:9f:bd:11:7d:9b:7a:db:77:21:69:e1:16: ef:5e:3b:d1:af:76:6c:24:f2:0f:6a:48:75:47:3b: ca:ef:a6:e1:4a:fe:e2:da:ee:89:d9:2b:ba:27:a0: 07:34:f2:c7:91:90:ea:1c:25:2b:fc:7c:bd:57:d3: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:14:CB:45:EC:8E:48:29:88:CA:83:4F:6C:73:27:E2:08:3A:1C:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:25:20:bc:56:5a:cb:9c:22:01:88:5d:ca:e8:c9:04:41:22: bf:28:08:24:dc:f9:8b:3b:c9:0f:6f:07:5a:53:2b:a3:a0:80: a5:dd:94:8d:19:05:1c:e7:55:7e:61:5d:c5:34:d1:67:c8:76: f6:75:99:93:17:4d:96:34:03:06:6d:21:d5:fd:52:a3:1a:4b: 45:e4:52:2e:6d:3a:b0:e3:e3:f0:e1:04:bb:7c:23:57:d6:26: b7:db:ea:cd:47:76:43:ee:74:f7:1a:29:63:6d:fb:37:9f:f8: 6b:a0:4b:43:93:f4:2b:3f:6e:0a:ff:13:72:7b:7d:4e:5a:e0: 6c:a1:c1:a5:aa:28:5a:75:cb:99:35:9b:3a:01:15:59:0b:76: b9:e2:0c:49:b9:13:bf:bf:38:c3:59:d5:ba:5c:4a:3e:95:8f: 58:cc:fc:d5:68:d3:21:34:5b:3e:43:3e:71:e8:eb:a8:5d:fd: 11:5b:c4:fa:78:56:28:d8:69:83:f4:6c:fc:de:4e:51:89:4f: 4e:62:29:46:b3:b6:40:a8:68:de:90:9d:dc:c7:6f:b7:c6:86: ce:68:a2:f2:db:98:62:f2:6e:64:97:cd:f9:17:0d:ce:b4:49: eb:8e:cc:33:38:ad:c7:fa:c9:4d:11:8e:c8:de:37:85:2c:99: a8:4d:b4:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYp+jgz/KMPxT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NWQ2OTI4ZDctMjU5Yy00NmM5LWE0ZGUtYWI0ZWMyNmExOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxoGf3qeBUeqW0wiY3JuwHCcI4CK8xi9VZsd A6hIjWyA3LW6b36QxPl84AjPihA8Qq881shTHc5pT52mR9mxhLhrcUTbj9hqyI9b yipu+oIWoaWHWMEcZo33IgZR8k8ZO4CZle7cY1BFK3jIYVLrgyfAKBCUMcSX0l6r w0RO3sHiEeYcWkLY4qSKS8ydj80SWeT5KdwtAKfCMnbivRd6fCj5IMH0eeZXsSWO B8iTATdJnRorvGXAT1b2I+ddA17h0KQh5+efvRF9m3rbdyFp4RbvXjvRr3ZsJPIP akh1RzvK76bhSv7i2u6J2Su6J6AHNPLHkZDqHCUr/Hy9V9MIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8Uy0XsjkgpiMqDT2xzJ+IIOhzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZDA4NDNjNWQtYzIzMi0z YzUyLWEyOGMtZTUwNGI0MjZmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABslILxWWsucIgGIXcroyQRBIr8oCCTc+Ys7yQ9vB1pTK6OggKXdlI0Z BRznVX5hXcU00WfIdvZ1mZMXTZY0AwZtIdX9UqMaS0XkUi5tOrDj4/DhBLt8I1fW Jrfb6s1HdkPudPcaKWNt+zef+GugS0OT9Cs/bgr/E3J7fU5a4GyhwaWqKFp1y5k1 mzoBFVkLdrniDEm5E7+/OMNZ1bpcSj6Vj1jM/NVo0yE0Wz5DPnHo66hd/RFbxPp4 VijYaYP0bPzeTlGJT05iKUaztkCoaN6QndzHb7fGhs5oovLbmGLybmSXzfkXDc60 SeuOzDM4rcf6yU0RjsjeN4UsmahNtEQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:35 2025 by rpki-client