$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa File: aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa (raw, json) Hash identifier: hQf7AZhKFuEqYwW57RQ1zHYwjSIxfqR4I9lgtsYNd0c= Subject key identifier: 2A:F4:F1:E5:BE:40:FC:5A:53:16:BC:9A:CC:BF:82:30:49:01:B7:8D Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F43285848CC7B9D9D9D8EFD98831D1080 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 68.233.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9d:9d:9d:8e:fd:98:83:1d:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=b526a94c-e4a0-4e06-b58f-43d1ff82ac39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:22:74:65:a9:4f:1b:a8:69:14:cc:ff:1a: 14:0f:d4:af:21:43:58:a8:d2:b2:e8:56:c9:bf:16: 05:85:6b:81:3c:9d:ce:9d:35:e3:54:e1:c0:8c:6c: 33:62:91:ab:fc:8d:0d:51:db:ec:5b:4c:5a:5d:f2: 24:e2:10:eb:22:fc:dc:bc:51:2d:7f:21:a4:ff:2d: bd:85:4c:44:46:78:88:10:9b:1a:ac:5d:d4:6e:3f: ba:cb:0a:48:a7:2e:21:63:f2:8a:0a:4c:88:3b:c0: f1:28:63:68:15:90:d8:b1:fe:35:75:86:64:1a:f5: f2:aa:7b:5a:69:cd:61:87:40:32:a2:2b:e0:ff:11: e0:ce:ab:f6:ed:3e:62:32:90:80:a6:af:b0:94:27: d5:36:97:64:60:43:19:fa:26:09:f5:c0:65:fc:e5: 61:8b:9b:f6:2a:58:e2:78:bb:ee:98:9c:d6:93:ea: a3:9f:40:9d:10:e5:66:1f:47:90:e5:74:b8:32:c8: 73:77:61:99:b8:54:0d:3c:63:3c:36:4b:96:2f:7b: c4:cf:55:69:68:3e:83:9c:90:f5:de:dc:71:ea:b4: c5:a7:46:da:22:34:c5:da:72:16:02:7b:81:2e:86: 61:a2:89:78:73:a9:57:b1:08:33:93:79:11:2f:9a: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F4:F1:E5:BE:40:FC:5A:53:16:BC:9A:CC:BF:82:30:49:01:B7:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:13:67:c2:d5:02:6f:ba:d7:d5:a7:30:78:9f:43:92:d2:f6: 67:c2:62:40:3b:be:a5:ee:7a:d4:91:9f:b1:f4:21:79:04:a2: 12:8b:75:12:2f:6d:17:bc:78:4a:22:1c:dd:aa:46:b6:c2:1b: 3b:a0:f4:2a:e6:09:ea:bf:72:a2:10:04:96:3c:6d:f4:47:ba: 61:32:bb:6c:86:4c:ae:55:64:2d:3a:47:16:61:04:34:00:10: 52:e3:9e:3c:81:e6:73:11:f5:68:fd:ff:11:d0:08:13:b3:7e: 1d:14:b4:7e:27:82:c8:bf:5c:43:a3:de:5d:e5:ea:77:a2:1f: dc:f5:d7:5b:b8:72:f7:6c:04:a4:f4:e2:34:f2:08:34:d8:16: 72:38:2d:f3:cb:ce:59:b3:fe:26:da:4f:6b:90:7b:ee:f3:23: 83:32:5e:f3:65:42:77:10:6e:ef:58:30:a2:48:8e:90:63:c2: ca:38:06:61:5e:c9:ee:42:1f:61:0e:78:1d:44:9d:3c:ec:da: 67:b4:53:52:19:e2:2a:2b:67:ec:df:60:61:24:a0:55:11:5f: 8b:95:11:73:3b:5a:c0:60:9f:77:85:32:d1:56:bf:d3:71:fc: 7d:41:d3:25:bb:c7:51:07:4a:52:cb:17:63:ba:46:14:4f:c6: b6:fb:ad:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe52dnY79mIMdEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YjUyNmE5NGMtZTRhMC00ZTA2LWI1OGYtNDNkMWZmODJhYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/MidGWpTxuoaRTM/xoUD9SvIUNYqNKy6FbJ vxYFhWuBPJ3OnTXjVOHAjGwzYpGr/I0NUdvsW0xaXfIk4hDrIvzcvFEtfyGk/y29 hUxERniIEJsarF3Ubj+6ywpIpy4hY/KKCkyIO8DxKGNoFZDYsf41dYZkGvXyqnta ac1hh0Ayoivg/xHgzqv27T5iMpCApq+wlCfVNpdkYEMZ+iYJ9cBl/OVhi5v2Klji eLvumJzWk+qjn0CdEOVmH0eQ5XS4Mshzd2GZuFQNPGM8NkuWL3vEz1VpaD6DnJD1 3txx6rTFp0baIjTF2nIWAnuBLoZhool4c6lXsQgzk3kRL5rJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr08eW+QPxaUxa8msy/gjBJAbeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYWVhMjQ2ZGQtZjAyZS0z ZTUyLTgxODctZjFjZjI3MjJjNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4TZ8LVAm+619WnMHifQ5LS9mfCYkA7vqXuetSRn7H0IXkEohKLdRIv bRe8eEoiHN2qRrbCGzug9CrmCeq/cqIQBJY8bfRHumEyu2yGTK5VZC06RxZhBDQA EFLjnjyB5nMR9Wj9/xHQCBOzfh0UtH4ngsi/XEOj3l3l6neiH9z111u4cvdsBKT0 4jTyCDTYFnI4LfPLzlmz/ibaT2uQe+7zI4MyXvNlQncQbu9YMKJIjpBjwso4BmFe ye5CH2EOeB1EnTzs2me0U1IZ4iorZ+zfYGEkoFURX4uVEXM7WsBgn3eFMtFWv9Nx /H1B0yW7x1EHSlLLF2O6RhRPxrb7rVc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:29 2025 by rpki-client