$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa File: 8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa (raw, json) Hash identifier: lOxu8bbiarxEgOv9nJ1P++Iv1x1VmNavZrM16pNtEXY= Subject key identifier: 35:BB:73:BD:45:FD:77:07:DB:DC:59:B9:44:21:18:6D:E8:27:46:05 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584930DE6E2709CCB94E98B75EC0 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 399045 IP address blocks: 68.69.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6e:27:09:cc:b9:4e:98:b7:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=49584e7e-b239-4ce8-bd3b-9396c5851406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:70:36:a3:1c:a7:18:11:ab:4a:04:84:e7:0d: 91:81:8b:fe:ac:e8:f1:38:68:25:11:cb:78:c8:f6: 7e:84:c1:80:80:2b:7e:47:09:52:bb:37:85:05:31: a6:06:16:f2:03:c3:46:8d:50:cc:b4:a8:c7:ff:f0: f7:96:97:45:57:8d:cb:c9:d2:ba:3f:eb:9e:ef:5c: 39:7d:a8:8e:ce:a8:dc:9c:94:f1:2a:df:45:6a:dc: 83:87:dd:af:29:01:7a:61:bf:5c:23:91:49:69:f2: 09:6b:d5:9d:72:58:e5:c9:e0:97:9c:2b:56:93:a7: cd:3d:24:df:6d:8c:dc:2e:21:77:46:59:da:91:d3: 05:e5:8b:14:1b:12:f0:ca:4d:ba:a3:21:79:47:6c: 50:08:73:5a:3b:6e:a3:5b:35:47:67:17:19:68:f0: 49:99:de:54:ea:1c:ad:e7:58:b6:f0:be:3e:6b:3d: ea:67:b2:9b:9c:72:4c:51:34:40:0d:67:58:b5:ab: 5f:fe:03:1c:61:50:56:b4:ac:43:38:26:78:21:ba: 39:54:72:c5:9f:c9:d4:68:b6:9e:32:ad:e1:96:77: 45:e2:65:59:c3:26:46:97:3d:fe:62:1c:d3:f6:5f: 7e:36:66:85:f0:1c:81:ee:24:45:36:b2:ee:b3:53: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BB:73:BD:45:FD:77:07:DB:DC:59:B9:44:21:18:6D:E8:27:46:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 68.69.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a9:14:54:aa:b1:7a:9c:e2:2b:ec:ac:9d:bc:aa:74:9e:61: 13:cc:3b:c1:03:c4:56:83:a3:40:5e:5f:6c:4f:b1:f7:57:39: 01:51:fe:0b:13:d2:03:51:34:20:68:c1:cc:d1:87:c6:65:52: f8:cb:6b:97:96:28:f4:72:57:8e:21:1e:e9:30:0b:79:97:91: 06:83:00:e2:34:63:c3:be:21:4b:3f:bf:e6:e5:45:6e:70:59: ca:97:b0:b6:70:4b:ae:ea:72:4e:2b:df:74:e9:f0:29:17:bf: 4b:49:5c:79:15:62:1b:4e:d6:4e:b0:84:94:1f:11:35:bb:13: 41:d9:92:aa:b3:7d:b7:6f:17:d6:f2:09:9a:e8:3c:d4:63:34: 95:18:b6:76:64:a7:99:1f:fe:18:0b:54:41:a7:18:31:d6:20: d7:59:f7:b5:6a:8b:76:6f:3b:86:e2:15:04:55:df:dc:6f:df: a2:e9:5a:0c:da:7e:72:da:d2:b2:7a:3d:f5:80:d6:05:81:2a: 02:0e:07:d4:67:cb:3b:ed:78:d2:17:0c:5f:d3:00:cf:56:49: de:8a:37:23:94:07:da:1b:34:e7:77:4e:72:20:66:44:cb:4a: dd:dc:bc:70:6d:d4:cb:b9:b0:b4:f8:d8:d6:3f:10:7e:ab:4f: 98:2a:3a:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m4nCcy5Tpi3XsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NDk1ODRlN2UtYjIzOS00Y2U4LWJkM2ItOTM5NmM1ODUxNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3A2oxynGBGrSgSE5w2RgYv+rOjxOGglEct4 yPZ+hMGAgCt+RwlSuzeFBTGmBhbyA8NGjVDMtKjH//D3lpdFV43LydK6P+ue71w5 faiOzqjcnJTxKt9FatyDh92vKQF6Yb9cI5FJafIJa9WdcljlyeCXnCtWk6fNPSTf bYzcLiF3RlnakdMF5YsUGxLwyk26oyF5R2xQCHNaO26jWzVHZxcZaPBJmd5U6hyt 51i28L4+az3qZ7KbnHJMUTRADWdYtatf/gMcYVBWtKxDOCZ4Ibo5VHLFn8nUaLae Mq3hlndF4mVZwyZGlz3+YhzT9l9+NmaF8ByB7iRFNrLus1PWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW7c71F/XcH29xZuUQhGG3oJ0YFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvOGY3ZmNiZDctOTczMi0z MWUyLWIyNjAtMDFiZGRlMzk0NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIupFFSqsXqc4ivsrJ28qnSeYRPMO8EDxFaDo0BeX2xPsfdXOQFR/gsT 0gNRNCBowczRh8ZlUvjLa5eWKPRyV44hHukwC3mXkQaDAOI0Y8O+IUs/v+blRW5w WcqXsLZwS67qck4r33Tp8CkXv0tJXHkVYhtO1k6whJQfETW7E0HZkqqzfbdvF9by CZroPNRjNJUYtnZkp5kf/hgLVEGnGDHWINdZ97Vqi3ZvO4biFQRV39xv36LpWgza fnLa0rJ6PfWA1gWBKgIOB9RnyzvteNIXDF/TAM9WSd6KNyOUB9obNOd3TnIgZkTL St3cvHBt1Mu5sLT42NY/EH6rT5gqOrs= -----END CERTIFICATE-----Generated at Sun Apr 6 07:27:27 2025 by rpki-client