$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa File: c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa (raw, json) Hash identifier: yMURe/YrS7e4OJr7eFFj6b1tQeTumHZTv7QIe7Lv/mY= Subject key identifier: 85:5B:10:44:BC:00:66:F3:7B:74:1E:71:8C:6C:EB:65:11:6D:BC:12 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F432858490CB1414A658B38D417D4CA00 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 54852 IP address blocks: 68.168.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:41:4a:65:8b:38:d4:17:d4:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=bf68321c-8941-4e9b-aded-b1e5166d3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:d9:54:f6:37:0a:96:ca:6a:a3:10:89:1a: 65:66:08:27:72:81:9c:68:4b:2f:3c:13:32:0f:5a: f9:cf:61:e4:a8:e9:ae:d4:40:9d:77:01:72:37:a5: e7:9f:72:db:30:32:87:e5:93:97:7e:ce:27:89:d8: 10:2b:a3:91:2f:47:2e:39:57:d2:4a:70:b3:8f:9c: 04:b7:26:f3:e0:4d:31:8f:de:79:b9:c8:90:dd:46: fa:9a:72:c8:73:02:c2:ea:83:c8:70:49:c5:54:bc: c9:df:55:81:87:6d:d0:5f:a5:ad:40:c4:21:26:9f: e1:f9:6b:35:24:12:b4:2c:f6:0f:1f:0c:da:dc:d5: ac:62:ec:7b:37:18:5f:e1:42:52:08:e3:c0:c5:b2: d3:33:7c:4f:83:07:1c:86:1c:34:32:30:82:7b:90: 34:a2:8a:99:82:82:dc:67:0d:c8:7b:1b:17:24:47: ba:b2:0b:45:74:a9:93:4c:64:f4:94:1d:e6:19:77: 72:59:c5:ed:9c:64:fe:a5:d3:39:a1:03:90:6d:0c: e2:92:34:fa:09:60:fa:02:4d:29:ef:2f:c8:05:fc: be:7f:14:9a:fc:65:0d:5c:71:f6:b9:5e:9d:83:aa: c0:1d:28:f2:02:9f:ed:65:d6:6a:dd:26:5e:3d:1b: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:10:44:BC:00:66:F3:7B:74:1E:71:8C:6C:EB:65:11:6D:BC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c024bbee-23b7-32a0-a732-a4c7c0a2b58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e1:d7:c8:4e:22:1b:51:28:f2:e0:7d:1a:b1:ba:f7:9a:07: f9:e6:76:1f:ab:ed:35:dc:99:7d:af:55:a2:02:80:24:e2:95: 2a:1c:34:0b:5f:94:67:bb:ba:05:fc:5c:1f:b6:41:ae:9f:80: 99:2a:48:6f:77:03:dc:5d:54:87:66:b2:39:c5:0e:5b:6f:1f: d9:41:03:86:e5:73:fc:a2:32:2e:e2:8e:ae:8c:81:55:58:70: 79:3c:d0:5b:9d:6f:a1:96:9a:35:8d:63:74:a2:87:84:73:76: d3:d3:f4:8e:76:99:e3:24:b9:39:c5:14:ba:26:33:6d:f0:bf: 88:41:3a:68:2a:0d:3d:c1:e6:99:ac:46:00:e0:69:72:a0:e3: 35:60:6a:f7:7f:cf:2e:0d:35:77:b8:5f:27:98:fd:da:1a:cf: f6:c5:c5:f3:6c:01:27:05:1c:ef:37:f1:c1:9c:4b:76:13:a6: 99:c7:15:0f:97:c8:d1:09:77:29:52:b9:25:aa:10:99:f0:0c: 52:bd:00:09:e9:a1:d9:52:7f:e4:7f:0e:1c:c9:b6:ad:06:01: 83:b9:07:c5:da:42:a9:43:db:e6:e7:e0:e9:29:14:42:70:d3: 40:2c:0c:ed:c1:2e:88:42:b7:f1:65:24:bd:00:99:e4:a8:b5: 4f:7c:d5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsUFKZYs41BfUygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YmY2ODMyMWMtODk0MS00ZTliLWFkZWQtYjFlNTE2NmQzNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UzZVPY3CpbKaqMQiRplZggncoGcaEsvPBMy D1r5z2HkqOmu1ECddwFyN6Xnn3LbMDKH5ZOXfs4nidgQK6ORL0cuOVfSSnCzj5wE tybz4E0xj955uciQ3Ub6mnLIcwLC6oPIcEnFVLzJ31WBh23QX6WtQMQhJp/h+Ws1 JBK0LPYPHwza3NWsYux7Nxhf4UJSCOPAxbLTM3xPgwcchhw0MjCCe5A0ooqZgoLc Zw3IexsXJEe6sgtFdKmTTGT0lB3mGXdyWcXtnGT+pdM5oQOQbQzikjT6CWD6Ak0p 7y/IBfy+fxSa/GUNXHH2uV6dg6rAHSjyAp/tZdZq3SZePRvvQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVbEES8AGbze3QecYxs62URbbwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYzAyNGJiZWUtMjNiNy0z MmEwLWE3MzItYTRjN2MwYTJiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbh18hOIhtRKPLgfRqxuveaB/nmdh+r7TXcmX2vVaICgCTilSocNAtf lGe7ugX8XB+2Qa6fgJkqSG93A9xdVIdmsjnFDltvH9lBA4blc/yiMi7ijq6MgVVY cHk80Fudb6GWmjWNY3Sih4RzdtPT9I52meMkuTnFFLomM23wv4hBOmgqDT3B5pms RgDgaXKg4zVgavd/zy4NNXe4XyeY/doaz/bFxfNsAScFHO838cGcS3YTppnHFQ+X yNEJdylSuSWqEJnwDFK9AAnpodlSf+R/DhzJtq0GAYO5B8XaQqlD2+bn4OkpFEJw 00AsDO3BLohCt/FlJL0AmeSotU981WQ= -----END CERTIFICATE-----Generated at Wed Apr 16 03:03:00 2025 by rpki-client