$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa File: f6c9df29-3b43-3fad-b06a-619bbb47b781.roa (raw, json) Hash identifier: t68hYCN2QCxDlTP9uEb7SbMpFijw5ZG/aIUEsth8+qA= Subject key identifier: 22:F1:85:79:C9:3E:ED:70:2F:72:8D:74:46:80:D6:85:D9:18:9A:F0 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285849350E8764F05B13EB565D4E60 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 10747 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:87:64:f0:5b:13:eb:56:5d:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=b8189c81-9d1a-40be-bb92-0594e92740fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:53:9c:50:36:46:79:fd:eb:7b:32:29:d6: e7:02:21:38:fc:d8:20:cc:b6:69:bb:18:d7:ef:8d: 99:e0:72:1d:a6:80:4d:95:7e:95:03:39:9d:5e:8b: 17:47:f6:fe:2b:ab:0b:64:34:ab:35:59:8b:73:eb: 73:3a:83:5f:59:b1:42:4f:ac:ae:cd:b9:68:e1:d4: 9e:7c:2f:04:91:9d:c7:cf:bb:40:94:c7:1d:f0:85: 10:77:3e:59:aa:d6:2e:15:b7:d6:05:cd:2e:a4:9c: 0d:a8:e8:df:d2:65:6d:02:1c:2a:15:a5:99:82:81: ff:59:05:6d:1e:bd:70:0d:6f:df:ff:a8:f1:ec:30: dd:ca:5f:86:47:a5:da:b1:72:f0:f1:05:d8:32:dd: ea:8a:80:b7:0d:46:52:10:19:f2:7c:f0:c3:b4:7e: 0e:ce:6d:4b:5a:8c:a2:2d:61:83:e6:81:6a:0e:27: 68:af:5b:7c:29:a1:43:8a:57:e6:e9:00:63:78:2d: 91:55:31:fe:91:68:cd:18:36:36:c2:c6:80:97:63: 27:e5:4f:68:a2:23:04:44:a6:43:ae:76:5c:bc:d8: 9f:de:fc:aa:35:e5:6c:07:72:18:44:81:b5:2d:93: 8a:d1:b0:5c:d3:1d:5e:a4:b5:88:ab:40:80:26:e5: 08:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:85:79:C9:3E:ED:70:2F:72:8D:74:46:80:D6:85:D9:18:9A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:59:56:f6:16:15:a3:2f:f9:ea:41:5c:eb:c7:b6:e7:06:70: 88:a8:95:58:b0:e9:eb:73:f3:da:10:e4:35:fe:95:df:03:20: 84:d9:46:d3:a3:74:cb:58:67:b3:57:18:f9:5c:a8:a6:19:d1: ac:60:c4:36:19:33:62:5d:73:a8:3e:09:3b:c6:79:1e:70:99: 37:d8:21:bf:65:bc:59:76:ee:af:79:19:79:5b:e3:16:9f:18: 73:57:98:4f:27:61:1f:a8:61:a4:64:f4:b9:c7:94:cc:d2:88: 05:a0:9e:c8:44:bf:7c:44:a7:3c:c7:84:46:83:52:66:d2:ad: 59:75:63:a2:10:6a:c4:5b:bd:6f:a7:22:31:df:e3:1e:70:ad: fa:74:64:64:39:23:c9:87:70:29:f6:cf:d6:b2:81:37:8b:18: 88:ab:bb:aa:99:00:99:6f:15:1f:85:b1:ab:cd:04:4b:d4:c6: b1:8c:c0:15:0f:57:ff:b9:f6:16:8f:7b:1b:39:15:9b:bc:f7: 14:d9:89:51:93:1c:01:42:c8:72:af:03:4d:f2:37:81:0a:4b: e1:8d:b9:d0:7e:a2:c0:29:aa:9c:90:ff:52:cb:8f:64:0e:dd: 25:77:35:76:7e:b1:ca:88:b6:e8:af:59:0b:55:e5:f5:ec:21: 9e:ac:1b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dodk8FsT61ZdTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YjgxODljODEtOWQxYS00MGJlLWJiOTItMDU5NGU5Mjc0MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpFTnFA2Rnn963syKdbnAiE4/NggzLZpuxjX 742Z4HIdpoBNlX6VAzmdXosXR/b+K6sLZDSrNVmLc+tzOoNfWbFCT6yuzblo4dSe fC8EkZ3Hz7tAlMcd8IUQdz5ZqtYuFbfWBc0upJwNqOjf0mVtAhwqFaWZgoH/WQVt Hr1wDW/f/6jx7DDdyl+GR6XasXLw8QXYMt3qioC3DUZSEBnyfPDDtH4Ozm1LWoyi LWGD5oFqDidor1t8KaFDilfm6QBjeC2RVTH+kWjNGDY2wsaAl2Mn5U9ooiMERKZD rnZcvNif3vyqNeVsB3IYRIG1LZOK0bBc0x1epLWIq0CAJuUIkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLxhXnJPu1wL3KNdEaA1oXZGJrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZjZjOWRmMjktM2I0My0z ZmFkLWIwNmEtNjE5YmJiNDdiNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBZVvYWFaMv+epBXOvHtucGcIiolViw6etz89oQ5DX+ld8DIITZRtOj dMtYZ7NXGPlcqKYZ0axgxDYZM2Jdc6g+CTvGeR5wmTfYIb9lvFl27q95GXlb4xaf GHNXmE8nYR+oYaRk9LnHlMzSiAWgnshEv3xEpzzHhEaDUmbSrVl1Y6IQasRbvW+n IjHf4x5wrfp0ZGQ5I8mHcCn2z9aygTeLGIiru6qZAJlvFR+FsavNBEvUxrGMwBUP V/+59haPexs5FZu89xTZiVGTHAFCyHKvA03yN4EKS+GNudB+osApqpyQ/1LLj2QO 3SV3NXZ+scqItuivWQtV5fXsIZ6sG/U= -----END CERTIFICATE-----Generated at Sat Apr 19 11:39:14 2025 by rpki-client