$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa File: 3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa (raw, json) Hash identifier: 8haslYwdNuA6NZ57AryQkiyy4WjoRcSXfGx7+0Qp5wI= Subject key identifier: 21:DA:F1:0C:69:58:D9:97:F4:3E:B1:33:55:2E:05:82:D7:C9:76:4D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6430164BD282D757D16B90 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 68.67.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:30:16:4b:d2:82:d7:57:d1:6b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=a06baaca-b07b-41a0-86ec-9e4c272b640a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:61:e4:4d:c2:b8:50:97:ec:d1:32:62:a8: 2d:33:c1:0c:00:3e:72:04:42:24:ed:c3:39:ae:8d: a7:81:5d:d8:62:7d:46:1a:b5:10:21:7b:55:5e:5d: 06:2c:35:55:99:f1:38:41:f4:09:ea:3a:bd:45:7c: 95:0d:76:c7:28:e6:1d:80:05:39:15:05:e6:35:62: e6:ab:e7:1a:f0:1f:12:41:3a:02:22:cf:5d:5d:d3: 4e:50:ad:99:a5:2f:34:e2:0e:3d:96:b2:b7:36:b9: 4f:a9:78:9d:52:87:01:39:55:94:dc:02:60:29:97: 7d:dd:a0:9e:25:97:c0:73:1f:bf:0d:9c:cd:d1:bc: 72:93:05:6e:e5:61:c3:38:3b:74:8f:8f:3a:8b:fb: 43:e0:e8:fb:0d:a5:03:53:86:02:04:dd:63:90:d4: e5:75:d5:55:e9:60:4c:6c:45:21:e1:f2:12:3b:38: e2:d4:1e:2a:ba:da:39:d7:47:91:bf:f5:ca:c2:10: 52:59:16:ae:67:4a:0c:dd:c4:9a:a6:d0:d3:7c:e1: 4b:84:fd:8a:92:9d:1f:09:fe:01:4f:07:6d:73:57: bc:ba:3e:40:fd:3d:bf:c3:ca:32:a2:96:b8:cc:30: c1:40:6b:d7:9c:24:06:24:96:2a:8c:7d:85:24:10: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DA:F1:0C:69:58:D9:97:F4:3E:B1:33:55:2E:05:82:D7:C9:76:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e4dc898-a5b1-33dd-83ef-2a1d76b0d2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.67.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ff:2d:f3:78:d9:d9:fd:f5:f8:9a:00:df:9f:c7:7c:a6:68: b1:f7:84:f8:e9:7c:f3:a8:8d:16:87:47:5f:d0:68:bb:56:21: 88:11:07:0b:78:81:dc:ee:75:44:81:49:6c:6c:76:9b:8e:74: eb:1b:5e:77:0d:48:3d:b8:97:77:17:05:15:2b:70:b0:19:28: b8:af:c7:78:fc:53:56:a0:49:9b:f0:7e:cd:a6:7c:da:c9:1f: fe:af:2f:14:d2:f6:e3:d8:3c:1e:4c:0c:2a:af:5b:3e:18:52: 3c:06:8b:19:59:6e:79:ef:88:d8:13:38:8f:8c:8e:b8:20:91: 85:ac:a2:40:25:2f:8a:8d:99:77:68:0d:0b:5d:d3:30:81:20: d1:f8:3d:ea:1d:6b:f4:1b:31:1a:9c:43:a9:63:c6:96:02:fd: 05:ab:5d:58:03:df:3a:77:9c:42:67:50:93:67:dc:3a:56:45: 46:78:f8:8a:a0:3c:75:3f:44:55:27:a7:6c:2b:c3:53:ba:c6: 0a:22:bc:a3:94:65:99:c0:4c:c9:d7:5d:ba:9b:76:f8:0e:91: fb:b8:8b:10:ab:b7:0a:8a:9b:35:49:2d:6a:bb:9d:4b:a1:02: bb:b3:e1:6a:ce:9b:7b:04:2d:ab:e8:54:70:c6:c1:54:33:3c: e4:6c:60:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDAWS9KC11fRa5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YTA2YmFhY2EtYjA3Yi00MWEwLTg2ZWMtOWU0YzI3MmI2NDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtelh5E3CuFCX7NEyYqgtM8EMAD5yBEIk7cM5 ro2ngV3YYn1GGrUQIXtVXl0GLDVVmfE4QfQJ6jq9RXyVDXbHKOYdgAU5FQXmNWLm q+ca8B8SQToCIs9dXdNOUK2ZpS804g49lrK3NrlPqXidUocBOVWU3AJgKZd93aCe JZfAcx+/DZzN0bxykwVu5WHDODt0j486i/tD4Oj7DaUDU4YCBN1jkNTlddVV6WBM bEUh4fISOzji1B4quto510eRv/XKwhBSWRauZ0oM3cSaptDTfOFLhP2Kkp0fCf4B Twdtc1e8uj5A/T2/w8oyopa4zDDBQGvXnCQGJJYqjH2FJBADZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHa8QxpWNmX9D6xM1UuBYLXyXZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2U0ZGM4OTgtYTViMS0z M2RkLTgzZWYtMmExZDc2YjBkMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERENQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7/LfN42dn99fiaAN+fx3ymaLH3hPjpfPOojRaHR1/QaLtWIYgRBwt4 gdzudUSBSWxsdpuOdOsbXncNSD24l3cXBRUrcLAZKLivx3j8U1agSZvwfs2mfNrJ H/6vLxTS9uPYPB5MDCqvWz4YUjwGixlZbnnviNgTOI+MjrggkYWsokAlL4qNmXdo DQtd0zCBINH4Peoda/QbMRqcQ6ljxpYC/QWrXVgD3zp3nEJnUJNn3DpWRUZ4+Iqg PHU/RFUnp2wrw1O6xgoivKOUZZnATMnXXbqbdvgOkfu4ixCrtwqKmzVJLWq7nUuh Aruz4WrOm3sELavoVHDGwVQzPORsYG4= -----END CERTIFICATE-----Generated at Sun Apr 13 02:43:22 2025 by rpki-client