$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa File: 00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa (raw, json) Hash identifier: 82pufTcTYy/UNSmRjJTS73GhRFS965lZL+Lv0Cux0RQ= Subject key identifier: 61:74:0E:E1:CA:99:46:B7:8C:7F:77:39:8E:A9:D7:42:60:23:C4:18 Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F43285848E16BD08FD1CFEFF3538AD500 Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 40183 IP address blocks: 68.68.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d0:8f:d1:cf:ef:f3:53:8a:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=42a22d9e-a117-4888-9431-527d8377191c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:ab:e5:99:0c:ec:da:34:59:87:a0:e8:63: 96:57:b2:40:06:60:66:54:78:7a:07:af:3d:3e:93: 3f:16:35:00:f4:30:f8:b5:40:dd:e5:1b:84:ad:73: 48:63:e7:50:7e:88:2a:66:17:ff:5e:94:64:ef:26: 48:2e:91:44:5d:d8:f6:2a:dc:a4:a1:0d:06:83:12: de:2a:4c:bf:42:80:e1:57:7d:b0:20:ea:a4:5a:c2: 10:23:58:f2:e8:33:50:a5:f2:6a:18:2c:80:4c:ab: db:47:18:ad:3b:61:85:b6:51:67:e3:04:3d:3f:3f: f7:08:b3:e9:ef:af:bc:b7:2b:a2:71:88:e4:40:8c: b2:4d:27:f3:91:a8:08:4f:ba:35:9f:cb:24:7b:d0: 3e:7b:c4:61:e2:73:33:50:dc:69:0d:6e:c1:3d:79: 5d:95:43:f0:ce:2c:d9:00:34:c5:74:f9:b1:10:76: 38:74:86:d0:0c:e0:73:ce:51:c5:4c:b0:e4:42:c8: c5:ff:6e:13:c3:a6:27:a0:3e:5b:2c:7a:97:24:6f: d1:eb:ea:e4:10:80:bf:3d:70:f6:30:32:3c:51:44: b1:73:1f:a9:e5:26:0c:d5:69:dd:20:13:0b:93:9f: de:2d:b9:48:91:60:c4:57:45:73:68:b1:9f:6b:9e: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:0E:E1:CA:99:46:B7:8C:7F:77:39:8E:A9:D7:42:60:23:C4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 68.68.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:dd:8d:31:9a:cd:41:d5:fa:68:ca:34:4e:6d:76:9d:0f:7c: 35:65:fa:9d:23:5f:d8:b7:6d:ee:03:ff:59:cb:61:3c:1f:12: 48:ac:43:81:60:8a:69:d1:b9:8e:87:53:c6:d8:6a:8c:51:44: b9:d4:3a:0d:77:a4:56:38:d9:a2:7f:f2:43:5b:41:1f:4f:4d: 7d:30:4a:2a:82:a0:6d:04:7a:a3:07:51:45:24:38:89:b3:54: 3c:53:27:23:96:20:84:e3:91:b9:96:2d:92:4f:b7:60:e7:2c: 97:39:16:4f:86:7d:95:5f:7e:73:78:4d:43:7d:7f:9c:df:e6: 8d:03:6f:26:eb:b6:b4:91:16:36:25:5a:8d:82:15:d5:8f:bf: f8:0b:f2:ce:b7:0f:32:99:6a:ed:65:6b:61:60:ec:8a:c4:8a: 19:6d:9f:ea:66:bd:2c:55:97:fd:56:53:ab:4d:b8:3f:38:e7: 16:91:ec:61:a5:fa:dc:17:83:a9:25:04:71:ef:3f:b9:e5:c0: 62:ed:b1:6e:1b:44:b0:48:5d:9a:d2:b9:b8:59:49:dc:1f:8c: e9:85:2b:e4:3c:00:d7:ca:fb:d8:0e:1c:2c:aa:b9:08:1f:67: 99:e2:e5:b8:76:97:4e:47:41:a0:fb:8a:9b:cc:3a:e6:28:8c: 39:f2:47:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9CP0c/v81OK1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NDJhMjJkOWUtYTExNy00ODg4LTk0MzEtNTI3ZDgzNzcxOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNyr5ZkM7No0WYeg6GOWV7JABmBmVHh6B689 PpM/FjUA9DD4tUDd5RuErXNIY+dQfogqZhf/XpRk7yZILpFEXdj2KtykoQ0GgxLe Kky/QoDhV32wIOqkWsIQI1jy6DNQpfJqGCyATKvbRxitO2GFtlFn4wQ9Pz/3CLPp 76+8tyuicYjkQIyyTSfzkagIT7o1n8ske9A+e8Rh4nMzUNxpDW7BPXldlUPwzizZ ADTFdPmxEHY4dIbQDOBzzlHFTLDkQsjF/24Tw6YnoD5bLHqXJG/R6+rkEIC/PXD2 MDI8UUSxcx+p5SYM1WndIBMLk5/eLblIkWDEV0VzaLGfa57urQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF0DuHKmUa3jH93OY6p10JgI8QYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvMDBiMzZiNGYtYjkyZS0z ZmI2LTg0NzktMWIxNjZiMWY1ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/djTGazUHV+mjKNE5tdp0PfDVl+p0jX9i3be4D/1nLYTwfEkisQ4Fg imnRuY6HU8bYaoxRRLnUOg13pFY42aJ/8kNbQR9PTX0wSiqCoG0EeqMHUUUkOImz VDxTJyOWIITjkbmWLZJPt2DnLJc5Fk+GfZVffnN4TUN9f5zf5o0DbybrtrSRFjYl Wo2CFdWPv/gL8s63DzKZau1la2Fg7IrEihltn+pmvSxVl/1WU6tNuD845xaR7GGl +twXg6klBHHvP7nlwGLtsW4bRLBIXZrSubhZSdwfjOmFK+Q8ANfK+9gOHCyquQgf Z5ni5bh2l05HQaD7ipvMOuYojDnyR/I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:03 2025 by rpki-client