$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa File: a1da6f6b-ff4c-320f-ae27-198fcae45575.roa (raw, json) Hash identifier: pYf9XFFYhfVQ5Tz4I0MKIYlNKFaHjQB6OZwxjsbQxbA= Subject key identifier: 94:BE:20:6C:F6:17:E1:A2:6D:3B:2F:0F:08:CC:39:C0:B3:B2:A0:BE Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584913AC33BB584F7361BAAF5480 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 63023 IP address blocks: 68.233.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:33:bb:58:4f:73:61:ba:af:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=03aa537c-22c5-475f-9211-2f8484df65e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:af:44:70:f8:99:34:86:fd:2a:ad:29:9a: 49:61:ce:ce:87:4b:9f:da:0f:20:55:a1:88:39:92: 03:ef:e0:77:cc:1b:eb:7d:53:95:31:2a:56:46:cf: a5:45:7d:6d:e9:17:f2:2c:b9:53:ac:9e:31:b6:ee: e5:e6:33:90:ba:e5:ae:2f:b6:3f:78:e1:bc:40:09: 03:12:68:05:6b:67:be:f0:b4:73:86:ef:87:c7:17: 84:34:a1:55:21:af:83:c8:d7:6d:fe:4f:6b:97:d7: 52:18:91:69:ae:aa:49:26:86:16:88:2c:e4:b6:99: 63:9c:a8:bd:03:6e:9e:06:a2:4d:20:a5:d8:26:02: d3:c5:ce:c5:29:ec:b4:9b:62:6b:7e:9f:4a:76:76: 70:14:23:88:c9:ca:45:3d:45:42:ed:e6:4d:46:81: d6:3e:1d:6d:3b:eb:3a:d7:00:92:1d:f7:7f:42:c8: 2d:d7:6b:ae:06:8f:9b:9f:39:f9:67:23:d3:bf:71: 54:e7:0d:c7:03:0b:ab:2e:01:7b:5b:92:ca:fb:41: 79:db:53:bb:98:dc:e4:10:2d:e0:8f:bb:5f:b2:cb: a0:dc:d1:f3:1f:6a:24:c0:b9:13:fd:50:c4:f6:cf: ac:d8:46:85:36:ee:90:a2:9a:45:f6:b8:28:68:ab: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BE:20:6C:F6:17:E1:A2:6D:3B:2F:0F:08:CC:39:C0:B3:B2:A0:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:eb:35:85:01:4e:48:1c:19:15:30:b8:0b:11:5c:21:d5:2b: 02:a7:2f:4d:8d:77:33:14:3b:81:70:38:da:24:77:0d:c1:27: 05:6d:04:56:de:e4:8e:07:f4:83:a2:91:38:6e:c8:0b:84:b0: 31:40:16:3f:79:0a:59:81:c2:55:4e:09:ef:b9:07:96:ca:90: 4d:f8:1e:cb:5c:34:2f:a3:06:b2:11:e2:e2:86:12:f9:d0:2f: ea:23:f8:49:46:a5:28:d4:e0:7f:d6:75:e7:6c:b0:c3:50:ad: ac:47:d4:e8:85:c5:b8:8d:3f:78:c5:06:b8:a4:16:1c:d8:03: c3:1c:a7:4d:97:86:bd:b6:2c:98:a8:a2:4f:55:9b:e7:5b:3d: 5c:9c:68:b1:c4:c8:fe:0c:4d:69:f0:43:71:e8:ce:e2:ce:10: 82:9c:42:53:1f:d5:c9:13:cd:7f:ec:3d:73:ee:46:20:04:4e: 3f:e9:85:4f:04:b7:c0:b0:da:d5:f9:25:df:20:8b:cc:81:3c: 78:46:ce:1b:ab:f7:bd:83:13:cd:bd:5d:ec:df:34:66:69:59: dc:de:ea:5a:99:80:d5:9c:08:a1:7c:d4:02:b7:f8:78:ff:7a: ac:30:9c:6c:b3:b2:c9:a1:71:90:f4:8d:fe:70:80:db:04:e4: 4a:44:6a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDO7WE9zYbqvVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MDNhYTUzN2MtMjJjNS00NzVmLTkyMTEtMmY4NDg0ZGY2NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdSvRHD4mTSG/SqtKZpJYc7Oh0uf2g8gVaGI OZID7+B3zBvrfVOVMSpWRs+lRX1t6RfyLLlTrJ4xtu7l5jOQuuWuL7Y/eOG8QAkD EmgFa2e+8LRzhu+HxxeENKFVIa+DyNdt/k9rl9dSGJFprqpJJoYWiCzktpljnKi9 A26eBqJNIKXYJgLTxc7FKey0m2Jrfp9KdnZwFCOIycpFPUVC7eZNRoHWPh1tO+s6 1wCSHfd/Qsgt12uuBo+bnzn5ZyPTv3FU5w3HAwurLgF7W5LK+0F521O7mNzkEC3g j7tfssug3NHzH2okwLkT/VDE9s+s2EaFNu6QoppF9rgoaKvIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS+IGz2F+GibTsvDwjMOcCzsqC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTFkYTZmNmItZmY0Yy0z MjBmLWFlMjctMTk4ZmNhZTQ1NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3rNYUBTkgcGRUwuAsRXCHVKwKnL02NdzMUO4FwONokdw3BJwVtBFbe 5I4H9IOikThuyAuEsDFAFj95ClmBwlVOCe+5B5bKkE34HstcNC+jBrIR4uKGEvnQ L+oj+ElGpSjU4H/WdedssMNQraxH1OiFxbiNP3jFBrikFhzYA8Mcp02Xhr22LJio ok9Vm+dbPVycaLHEyP4MTWnwQ3HozuLOEIKcQlMf1ckTzX/sPXPuRiAETj/phU8E t8Cw2tX5Jd8gi8yBPHhGzhur972DE829XezfNGZpWdze6lqZgNWcCKF81AK3+Hj/ eqwwnGyzssmhcZD0jf5wgNsE5EpEarc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:54 2025 by rpki-client