$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa File: 94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa (raw, json) Hash identifier: nsdPLqUyXoBUE6bm9HQVeF5Qj2ABsUUvm9aBb1omnMc= Subject key identifier: E2:54:E2:20:BE:58:F6:65:35:95:46:87:2D:32:F6:AC:83:35:74:A3 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F432858494733EA6387EB83E4EAC5F600 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 62563 IP address blocks: 68.233.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ea:63:87:eb:83:e4:ea:c5:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=92abf8ae-3662-4e12-9119-2cab990b7bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:4b:be:79:dc:0d:30:4a:96:e8:7c:a3:fd: 45:c7:ad:33:5d:23:a9:88:aa:97:f5:99:ef:76:14: fd:9a:29:ba:52:d6:58:29:43:53:a3:61:97:0b:c3: 2d:5e:ba:e8:e2:2a:52:b4:da:64:82:b6:29:34:af: f0:4b:18:07:f9:02:5c:a8:b2:f7:c6:f9:ff:a8:ca: a0:ec:30:e5:c4:d0:a4:de:5c:21:77:07:15:6f:de: 2c:ab:cb:6e:47:55:85:58:8f:fe:15:87:cd:c4:d3: 47:af:a3:3f:7b:e1:64:6b:18:0f:97:76:a1:3b:4e: 94:c6:50:cb:23:e2:75:a4:0b:20:3a:c9:e6:9b:7a: 2a:74:0d:73:32:74:0e:a0:76:a0:30:c4:b9:ae:88: fa:0a:e7:5d:14:7d:2f:0d:8d:29:d2:86:a6:09:d4: 03:ac:e4:36:f9:ec:6c:ef:fe:f8:cd:70:30:08:d9: 54:60:3a:5f:c4:11:fc:54:f7:21:a7:b9:3d:35:70: e4:8f:63:09:3f:22:fa:2c:69:a5:ec:c4:4a:bc:4e: f5:9b:da:02:a8:ee:70:43:bd:20:41:f9:04:3c:ef: 96:27:4f:07:e0:c6:82:59:d9:b5:02:fd:b5:1d:6a: 13:e9:c2:6e:98:10:79:47:f8:c6:d0:ae:b5:6e:f2: 6b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:54:E2:20:BE:58:F6:65:35:95:46:87:2D:32:F6:AC:83:35:74:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f6:6c:4b:f3:37:c3:d1:bc:57:4a:d2:1f:00:e7:cb:0c:e4: bd:d8:82:7b:52:50:46:76:f2:a3:1f:b7:82:da:24:7b:24:8c: 2c:35:1f:03:57:8b:77:e6:c8:e3:43:0f:f8:17:76:fb:01:d3: 30:6d:a2:98:05:55:e9:bd:47:62:c8:dd:de:c5:8b:0b:36:f4: 3f:49:1e:cd:43:4b:e4:e7:0c:91:7c:d7:33:59:51:ed:e2:40: 44:1a:3c:4e:d7:d2:6a:1e:d0:20:31:6d:1e:b8:f2:bc:a4:d8: 75:8b:9b:f7:18:38:e2:1d:d6:bf:b5:16:cd:12:15:d6:b1:af: 7a:e4:ad:7d:14:13:43:61:48:4f:49:08:41:21:a7:9a:77:09: 4c:4a:f0:25:1b:81:6b:66:23:a0:3f:29:4f:1a:6a:bf:86:bb: 51:8d:75:b8:4b:48:d8:23:fe:34:ad:6a:b6:8f:d9:ae:77:44: 31:c0:4e:07:77:dd:49:ce:2e:bc:eb:e4:7d:cf:2e:a8:eb:64: 5d:3a:1f:b7:4d:f5:16:c6:d4:08:d7:22:a0:e5:f6:93:b8:d2: d9:96:87:0c:cb:a4:cd:94:46:4a:cf:f0:af:c5:e5:48:de:8c: de:c5:d3:1d:5f:2c:c0:ee:8a:9a:a1:14:f1:72:24:2e:55:c4: 70:7e:12:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+pjh+uD5OrF9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OTJhYmY4YWUtMzY2Mi00ZTEyLTkxMTktMmNhYjk5MGI3YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwFLvnncDTBKluh8o/1Fx60zXSOpiKqX9Znv dhT9mim6UtZYKUNTo2GXC8MtXrro4ipStNpkgrYpNK/wSxgH+QJcqLL3xvn/qMqg 7DDlxNCk3lwhdwcVb94sq8tuR1WFWI/+FYfNxNNHr6M/e+FkaxgPl3ahO06UxlDL I+J1pAsgOsnmm3oqdA1zMnQOoHagMMS5roj6CuddFH0vDY0p0oamCdQDrOQ2+exs 7/74zXAwCNlUYDpfxBH8VPchp7k9NXDkj2MJPyL6LGml7MRKvE71m9oCqO5wQ70g QfkEPO+WJ08H4MaCWdm1Av21HWoT6cJumBB5R/jG0K61bvJraQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJU4iC+WPZlNZVGhy0y9qyDNXSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvOTRjNDAzZTEtNWQ3ZS0z MTYyLThhYTktOGQ4MjE3NGRmZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH2bEvzN8PRvFdK0h8A58sM5L3YgntSUEZ28qMft4LaJHskjCw1HwNX i3fmyONDD/gXdvsB0zBtopgFVem9R2LI3d7Fiws29D9JHs1DS+TnDJF81zNZUe3i QEQaPE7X0moe0CAxbR648ryk2HWLm/cYOOId1r+1Fs0SFdaxr3rkrX0UE0NhSE9J CEEhp5p3CUxK8CUbgWtmI6A/KU8aar+Gu1GNdbhLSNgj/jStaraP2a53RDHATgd3 3UnOLrzr5H3PLqjrZF06H7dN9RbG1AjXIqDl9pO40tmWhwzLpM2URkrP8K/F5Uje jN7F0x1fLMDuipqhFPFyJC5VxHB+ErM= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:38 2025 by rpki-client