$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa File: 8892a56b-b42f-3e9e-9415-db3e66493158.roa (raw, json) Hash identifier: NITiRe0ixfelV9zm5MRIWZ2RyAxRn9OvrgWWdlhIjIE= Subject key identifier: 38:6C:4F:DB:24:75:94:92:7B:C1:22:59:01:78:BA:5B:B2:58:5C:36 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829BF9631A0CCF41D456900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 54004 IP address blocks: 68.182.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:bf:96:31:a0:cc:f4:1d:45:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=029ae382-37cc-4358-a6dd-8da22cba8f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:17:59:07:ec:2f:5b:5c:bc:66:9a:49:4e: 9f:04:3b:d9:cb:c6:08:73:f7:00:a1:c6:ba:e7:cd: 42:30:fd:0c:32:91:9a:e1:80:8d:34:0c:67:7e:99: 83:dd:b6:68:f0:ef:16:4a:73:67:d5:9d:76:9c:78: 82:3c:a3:4a:65:ee:5b:5c:9e:f1:2e:cd:9d:1a:13: d2:42:4d:8b:81:95:cd:99:78:c9:aa:93:4f:82:bd: bd:11:c4:3b:96:c2:47:9f:f4:a4:dc:4e:59:c9:da: 08:a4:52:04:63:2f:bb:18:4d:67:c1:5d:51:22:9e: a0:ad:3a:6a:b9:c5:93:56:dd:e5:f1:4f:29:ca:05: a7:f6:26:f4:c1:f3:28:87:72:07:bc:be:00:a7:df: 23:be:7d:32:a8:bc:d2:94:fe:33:83:8f:c7:ed:7b: ad:f4:ce:c5:30:94:54:ad:01:b3:2a:62:7d:64:eb: b4:00:93:b5:dd:1d:39:11:2d:b4:b2:04:23:d6:f2: d8:43:ec:77:c2:9a:df:25:f6:f9:28:c9:8c:d8:24: 6c:25:b1:14:ab:7b:8e:2a:93:5f:71:ac:34:3f:86: 95:d8:02:a9:5a:3a:9f:23:1b:18:20:cb:1c:ff:06: 6c:c4:95:ba:eb:b1:d3:74:e8:c2:a2:23:0d:40:55: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6C:4F:DB:24:75:94:92:7B:C1:22:59:01:78:BA:5B:B2:58:5C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e0:61:f1:65:0b:c3:bf:2b:c6:69:9c:68:10:9e:3e:f9:80: ee:d0:f1:86:f6:8f:74:06:7a:87:e1:c5:69:c9:37:d2:bd:3b: f7:63:0f:c5:64:7f:ca:84:ed:1b:2e:77:a4:e9:e2:9c:c8:5f: 7d:29:25:c5:70:50:d4:f3:44:b4:8f:df:d9:f2:95:2d:82:3a: 13:f8:5c:c3:19:36:8e:b2:93:f8:d1:e8:45:53:50:46:22:22: 3d:55:16:e6:7c:be:4c:ad:03:e0:1f:7a:7d:1d:07:88:87:d2: 90:bb:62:62:09:57:cf:50:5b:69:e4:ce:61:6f:81:f7:50:11: 24:98:ee:ec:65:ac:71:7b:74:a8:c4:78:06:be:09:96:13:e7: c8:81:e0:c9:11:59:f3:96:f6:64:13:8c:8a:8c:f9:da:71:d5: 8c:ad:49:27:a1:d5:27:2e:7a:37:d4:ef:9d:ae:e3:f1:c0:76: 0d:89:63:81:29:88:43:71:13:c8:50:d1:51:d0:f0:9e:21:79: 11:97:0d:57:46:82:e9:42:ee:af:a8:9b:e7:51:f5:6d:a6:65: 22:9c:ef:b8:0f:02:70:07:80:8b:83:20:ed:c6:1b:3a:43:9d: de:ac:70:9e:ab:e9:e9:43:41:3c:42:1d:5b:f5:a9:c1:ac:43: 09:32:9d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKb+WMaDM9B1FaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MDI5YWUzODItMzdjYy00MzU4LWE2ZGQtOGRhMjJjYmE4ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofMXWQfsL1tcvGaaSU6fBDvZy8YIc/cAoca6 581CMP0MMpGa4YCNNAxnfpmD3bZo8O8WSnNn1Z12nHiCPKNKZe5bXJ7xLs2dGhPS Qk2LgZXNmXjJqpNPgr29EcQ7lsJHn/Sk3E5ZydoIpFIEYy+7GE1nwV1RIp6grTpq ucWTVt3l8U8pygWn9ib0wfMoh3IHvL4Ap98jvn0yqLzSlP4zg4/H7Xut9M7FMJRU rQGzKmJ9ZOu0AJO13R05ES20sgQj1vLYQ+x3wprfJfb5KMmM2CRsJbEUq3uOKpNf caw0P4aV2AKpWjqfIxsYIMsc/wZsxJW667HTdOjCoiMNQFXBSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhsT9skdZSSe8EiWQF4uluyWFw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODg5MmE1NmItYjQyZi0z ZTllLTk0MTUtZGIzZTY2NDkzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDgYfFlC8O/K8ZpnGgQnj75gO7Q8Yb2j3QGeofhxWnJN9K9O/djD8Vk f8qE7Rsud6Tp4pzIX30pJcVwUNTzRLSP39nylS2COhP4XMMZNo6yk/jR6EVTUEYi Ij1VFuZ8vkytA+Afen0dB4iH0pC7YmIJV89QW2nkzmFvgfdQESSY7uxlrHF7dKjE eAa+CZYT58iB4MkRWfOW9mQTjIqM+dpx1YytSSeh1ScuejfU752u4/HAdg2JY4Ep iENxE8hQ0VHQ8J4heRGXDVdGgulC7q+om+dR9W2mZSKc77gPAnAHgIuDIO3GGzpD nd6scJ6r6elDQTxCHVv1qcGsQwkynb0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:54 2025 by rpki-client