$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa File: 7f688b8f-3942-3db6-8392-940669f88020.roa (raw, json) Hash identifier: h08Q7xDYIzC+CwfOP+iCk7UXBLJHxzjY1F/ZJZdbHNg= Subject key identifier: 6A:56:B4:EE:76:36:D4:91:52:BE:C0:7B:4E:71:84:7F:D6:6B:C5:5B Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584951CEE063B64D8374CCA45980 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa Signing time: Wed 26 Mar 2025 20:11:08 +0000 ROA not before: Wed 26 Mar 2025 20:11:08 +0000 ROA not after: Tue 24 Jun 2025 20:11:08 +0000 asID: 63023 IP address blocks: 68.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:ce:e0:63:b6:4d:83:74:cc:a4:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Mar 26 20:11:08 2025 GMT Not After : Jun 24 20:11:08 2025 GMT Subject: CN=cd3c51f8-3edd-42ec-aca8-9e096e155964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:6f:d9:e0:af:7f:da:a1:23:6a:7d:fc:7e: e3:28:d1:8a:ed:36:d1:ac:7b:ae:ce:6f:b0:00:4d: 62:55:e3:b2:7c:61:2b:0c:22:33:d3:9c:af:56:d2: 06:d2:98:8d:f0:33:2b:62:6a:de:24:87:0d:ab:a0: a2:eb:c4:7e:04:cc:66:75:7a:95:a1:59:dc:d9:8b: 8c:66:ca:84:3e:78:20:ac:e6:c5:53:6a:c9:fa:7b: 74:3a:54:17:f5:c8:84:42:ae:f8:5a:24:8f:22:fc: d9:00:6f:d5:b8:5c:20:04:d4:ea:ad:ae:a6:82:8c: 6f:78:95:70:9c:69:20:0b:6c:0e:a0:83:cd:c2:f0: 60:6a:9b:f7:01:88:21:8c:79:5d:2c:4a:ba:4e:15: e1:d1:f3:89:f7:5e:39:7c:d7:6f:e5:29:eb:3c:fc: 48:fe:30:c9:e3:bf:47:d7:7e:f3:56:fc:88:96:af: 5a:da:e2:69:1c:e6:e8:2b:8e:74:41:b9:55:06:f7: 7a:8d:ca:80:9f:80:54:6b:eb:33:67:11:8d:55:48: fd:e3:0e:58:58:c1:20:2d:22:78:ea:0a:b1:cb:84: f9:8c:40:16:e4:54:29:7e:07:cb:ae:3c:a3:c7:e7: 67:6a:3e:8a:38:04:3c:61:7e:4c:22:84:a1:c2:93: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:B4:EE:76:36:D4:91:52:BE:C0:7B:4E:71:84:7F:D6:6B:C5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:10:dd:26:70:22:42:e6:3c:91:d8:07:ef:9c:35:50:10:1d: 80:22:90:9a:e0:40:ca:6f:49:e3:f2:5e:fb:6a:03:5d:9c:c8: 7f:7c:61:06:2a:9c:6a:93:cd:f1:05:68:55:3c:e7:3c:9b:d6: f6:9c:22:35:e0:d5:b1:1a:7f:99:5b:86:73:fe:46:28:6d:82: 80:ed:fd:06:0f:b3:99:dc:72:12:0d:54:82:a1:b7:e5:e1:1c: 43:a9:4c:e9:a4:7f:db:9e:72:ba:97:89:5b:a0:3e:fa:00:c2: e3:78:cd:6c:44:fb:df:b6:29:c7:b1:9b:93:76:a5:88:36:14: 0f:57:57:17:06:ff:a5:b6:65:db:68:01:8e:fc:ba:bd:c3:f8: 9b:a8:1c:66:76:f1:4c:a3:34:0c:fa:26:63:ff:84:32:24:47: 24:c5:8d:9e:9c:a3:3d:a4:00:d6:e0:c9:8d:74:08:54:e8:c0: 97:ee:ff:e0:66:36:c4:57:96:9f:ae:1e:44:ca:75:67:22:9b: 9e:d8:aa:cf:ad:2c:5e:7c:fd:ff:04:76:2e:86:99:36:a0:7e: 01:71:a3:db:89:34:c0:6a:03:c3:80:af:51:e3:f4:0e:d9:d3: 2b:7f:fd:2f:a4:89:4a:f4:d3:37:30:ce:a0:c4:c0:e2:6f:92: 10:47:db:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRzuBjtk2DdMykWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDMyNjIwMTEwOFoXDTI1MDYyNDIwMTEwOFowLzEtMCsGA1UEAxMk Y2QzYzUxZjgtM2VkZC00MmVjLWFjYTgtOWUwOTZlMTU1OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktRv2eCvf9qhI2p9/H7jKNGK7TbRrHuuzm+w AE1iVeOyfGErDCIz05yvVtIG0piN8DMrYmreJIcNq6Ci68R+BMxmdXqVoVnc2YuM ZsqEPnggrObFU2rJ+nt0OlQX9ciEQq74WiSPIvzZAG/VuFwgBNTqra6mgoxveJVw nGkgC2wOoIPNwvBgapv3AYghjHldLEq6ThXh0fOJ9145fNdv5SnrPPxI/jDJ479H 137zVvyIlq9a2uJpHOboK450QblVBvd6jcqAn4BUa+szZxGNVUj94w5YWMEgLSJ4 6gqxy4T5jEAW5FQpfgfLrjyjx+dnaj6KOAQ8YX5MIoShwpOVUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpWtO52NtSRUr7Ae05xhH/Wa8VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvN2Y2ODhiOGYtMzk0Mi0z ZGI2LTgzOTItOTQwNjY5Zjg4MDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYQ3SZwIkLmPJHYB++cNVAQHYAikJrgQMpvSePyXvtqA12cyH98YQYq nGqTzfEFaFU85zyb1vacIjXg1bEaf5lbhnP+RihtgoDt/QYPs5ncchINVIKht+Xh HEOpTOmkf9uecrqXiVugPvoAwuN4zWxE+9+2Kcexm5N2pYg2FA9XVxcG/6W2Zdto AY78ur3D+JuoHGZ28UyjNAz6JmP/hDIkRyTFjZ6coz2kANbgyY10CFTowJfu/+Bm NsRXlp+uHkTKdWcim57Yqs+tLF58/f8Edi6GmTagfgFxo9uJNMBqA8OAr1Hj9A7Z 0yt//S+kiUr00zcwzqDEwOJvkhBH284= -----END CERTIFICATE-----Generated at Sat Apr 5 13:24:48 2025 by rpki-client