$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/418a947f-8fd6-3187-aded-b3a63dd2c763.roa File: 418a947f-8fd6-3187-aded-b3a63dd2c763.roa (raw, json) Hash identifier: Bedgv3C89bxiRNdJbiqtFJwcOH33mbJ8WUEZmvyCqAY= Subject key identifier: 19:10:8A:BC:04:7E:72:04:B6:C0:52:66:75:74:45:22:A1:18:06:E1 Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Certificate serial: 010D0C9F43285848F92692F219C1706A44C21280 Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/418a947f-8fd6-3187-aded-b3a63dd2c763.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 397181 IP address blocks: 68.71.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:92:f2:19:c1:70:6a:44:c2:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=f568d440-0e9b-4b44-81d8-2d5bdaad91c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:8e:6f:33:bb:ff:1e:b0:6e:73:94:c3:ee: ee:55:47:54:77:c0:11:af:ca:78:2f:df:9b:ce:7c: 9b:75:9c:e6:b0:05:1f:59:fd:93:e8:a8:33:d9:02: c8:b4:ce:4e:1d:ec:11:83:98:de:40:4d:d2:60:8b: c5:6f:c6:db:9d:24:89:8e:e3:69:94:6c:70:86:11: 1b:e5:57:d9:4b:47:3b:44:1b:64:d6:d3:2c:d1:a7: 27:ce:24:26:e2:24:01:da:83:ee:61:42:04:dd:ee: f3:81:68:af:5b:e6:8e:4f:62:d8:a4:cf:1c:28:b7: aa:2b:d8:27:a2:0a:a2:ac:2a:43:ea:df:83:50:98: ad:a0:c9:9b:f1:a1:c6:fe:8c:97:7d:e6:93:8c:6a: c3:20:dc:a7:15:ff:d6:e6:ec:81:48:c2:33:c9:53: 05:70:ce:17:ca:d3:44:93:68:d6:11:95:94:3c:89: 11:41:c9:f2:ca:07:a0:03:18:63:01:71:a0:e2:76: a1:b7:36:0a:23:fd:80:6e:70:e8:fc:19:ad:8c:3d: 73:36:52:d0:a6:99:66:e0:4d:8a:83:2f:8e:91:04: 13:27:fc:01:8e:2d:6c:51:10:fd:41:2c:56:61:a7: aa:d9:74:38:84:d8:87:fa:8b:e5:c1:00:a4:c3:c4: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:10:8A:BC:04:7E:72:04:B6:C0:52:66:75:74:45:22:A1:18:06:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/418a947f-8fd6-3187-aded-b3a63dd2c763.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl X509v3 Authority Key Identifier: keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer sbgp-ipAddrBlock: critical IPv4: 68.71.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:84:8b:94:b3:31:f0:09:59:1b:94:76:b3:db:4b:c1:81:65: 18:49:c1:4c:03:ee:91:de:7a:9c:78:a7:d9:e9:aa:3b:26:7a: 2f:e1:d3:f4:79:9f:73:a4:7d:41:35:57:19:36:4b:34:04:2c: b5:4a:1a:70:cb:86:61:83:fc:12:d0:15:ba:ac:e4:e5:0a:bc: 62:29:95:84:e3:81:6f:71:08:6d:46:d8:ef:03:ea:7b:a7:f7: 55:0b:24:51:6e:63:ec:75:0f:6f:0b:ab:8c:7c:e1:d4:f9:1d: 93:53:b7:cb:3f:49:03:49:80:01:f5:b9:db:e8:00:60:cd:cd: 61:e1:a3:02:d6:b8:fd:30:7f:ac:7e:3e:73:3f:5d:49:02:ad: a5:9a:98:d6:3a:d8:ed:f9:f4:77:31:2d:ab:a8:a6:9f:02:de: e1:dd:33:67:84:e6:bd:73:1f:18:16:10:4a:4c:ea:43:6f:f6: e7:d7:31:9b:18:8d:63:7c:42:b8:3a:69:6c:e1:98:bf:a7:4c: 76:c7:1f:97:d9:4a:6d:53:ee:71:d4:e3:bc:ae:c4:b4:83:c1: 2f:73:b7:ca:f4:10:22:ef:d5:80:a2:d4:95:2c:10:74:49:ec: a8:ba:98:c1:2b:e1:89:a4:cb:5c:41:d2:bf:bd:58:96:02:80: 66:db:55:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpLyGcFwakTCEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz NWUwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjU2OGQ0NDAtMGU5Yi00YjQ0LTgxZDgtMmQ1YmRhYWQ5MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOSObzO7/x6wbnOUw+7uVUdUd8ARr8p4L9+b znybdZzmsAUfWf2T6Kgz2QLItM5OHewRg5jeQE3SYIvFb8bbnSSJjuNplGxwhhEb 5VfZS0c7RBtk1tMs0acnziQm4iQB2oPuYUIE3e7zgWivW+aOT2LYpM8cKLeqK9gn ogqirCpD6t+DUJitoMmb8aHG/oyXfeaTjGrDINynFf/W5uyBSMIzyVMFcM4XytNE k2jWEZWUPIkRQcnyygegAxhjAXGg4nahtzYKI/2AbnDo/BmtjD1zNlLQpplm4E2K gy+OkQQTJ/wBji1sURD9QSxWYaeq2XQ4hNiH+ovlwQCkw8RHAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkQirwEfnIEtsBSZnV0RSKhGAbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3 ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvNDE4YTk0N2YtOGZkNi0z MTg3LWFkZWQtYjNhNjNkZDJjNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1 Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2 NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREc2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImEi5SzMfAJWRuUdrPbS8GBZRhJwUwD7pHeepx4p9npqjsmei/h0/R5 n3OkfUE1Vxk2SzQELLVKGnDLhmGD/BLQFbqs5OUKvGIplYTjgW9xCG1G2O8D6nun 91ULJFFuY+x1D28Lq4x84dT5HZNTt8s/SQNJgAH1udvoAGDNzWHhowLWuP0wf6x+ PnM/XUkCraWamNY62O359HcxLauopp8C3uHdM2eE5r1zHxgWEEpM6kNv9ufXMZsY jWN8Qrg6aWzhmL+nTHbHH5fZSm1T7nHU47yuxLSDwS9zt8r0ECLv1YCi1JUsEHRJ 7Ki6mMEr4Ymky1xB0r+9WJYCgGbbVZM= -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:14 2025 by rpki-client