$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa File: 0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa (raw, json) Hash identifier: wuPR35xBxdvQm4cgVFUlLWJTWFTe2WGBsGbaKknxcbk= Subject key identifier: 3D:A9:D2:5C:1F:BD:B4:B6:0C:6C:A9:EC:82:1E:E0:7F:BD:B5:83:7F Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F43285848B8385E4475B32058E8284500 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa Signing time: Thu 30 Jan 2025 19:49:12 +0000 ROA not before: Thu 30 Jan 2025 19:49:12 +0000 ROA not after: Wed 30 Apr 2025 18:49:12 +0000 asID: 5650 IP address blocks: 68.170.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:38:5e:44:75:b3:20:58:e8:28:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Jan 30 19:49:12 2025 GMT Not After : Apr 30 18:49:12 2025 GMT Subject: CN=99ab2006-f4f8-46a7-843e-310106ee61f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7d:a3:fd:d9:b5:52:6a:9b:98:a2:f8:7e:4a: dd:72:7f:cb:5d:49:a0:e3:dc:50:61:3a:b8:dc:90: f8:36:10:33:9d:fd:6e:f7:9e:2b:a5:e1:08:3c:66: 65:8d:fa:af:01:11:ee:ef:bd:eb:6a:ff:21:01:1a: 14:17:14:c0:01:f7:85:9b:58:d8:34:60:87:bf:ec: 6c:d8:7e:bf:9b:7c:7e:fd:80:5b:a7:87:6f:97:2f: f2:35:26:1b:a0:b8:19:36:e3:c2:2b:86:06:08:73: e6:f1:1a:53:87:5d:3f:04:09:ca:c2:02:5c:b7:6c: f7:4b:f1:1b:a9:86:71:6e:14:1e:7b:bf:81:94:c5: e4:61:4e:df:34:4f:8f:5c:30:55:b3:de:19:30:12: d7:d2:dc:50:65:96:f3:d7:37:fe:88:0c:1c:61:3a: 86:6f:d4:1b:ea:4e:ff:cd:d6:67:b3:41:56:5b:af: 9d:e7:a1:07:ed:f9:fe:d6:e7:a8:8a:8b:e4:35:a1: 25:7b:47:9b:74:74:e7:3d:27:80:bb:c8:8f:1d:11: 35:c7:d9:99:fc:66:31:37:aa:51:a3:e6:17:f1:23: 76:6d:9b:e1:60:e6:83:47:86:e8:4e:e0:b7:75:21: 5a:d8:0c:f3:77:6e:d1:58:90:6c:20:a5:bc:b8:0f: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:D2:5C:1F:BD:B4:B6:0C:6C:A9:EC:82:1E:E0:7F:BD:B5:83:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:08:7d:a7:0a:ab:ab:71:a6:7a:2e:e6:14:58:9b:f6:18:64: 08:81:7e:48:cc:01:e6:24:62:fd:8d:cf:32:b9:df:c8:a6:10: 1d:a3:ea:70:83:b3:9b:ff:6b:37:56:83:e3:47:8a:38:09:8f: 9a:0a:4a:1b:91:69:31:df:47:01:91:6d:dc:cd:3e:72:d9:6d: a7:38:94:39:7a:38:db:ef:9c:3b:30:9d:73:43:52:47:08:58: 9c:e1:20:0f:dd:da:12:35:9f:d6:90:91:7c:83:ce:af:58:a4: 96:c9:53:da:ca:2c:01:83:59:16:7b:7d:7f:73:ef:55:77:ca: ef:6b:d0:25:1a:e3:fb:b9:3f:c4:e6:4c:d3:10:ba:af:5e:d3: d9:22:fb:70:cb:75:19:55:36:a2:44:a0:17:f8:db:f8:0b:ba: 4a:72:ee:bc:8b:f3:16:e2:33:ab:de:ab:9f:bc:61:45:4e:c4: 2b:3d:44:fc:8c:e6:40:38:25:b3:72:b0:28:b9:a4:47:4a:78: 15:4c:e5:ef:34:be:4f:68:29:5f:05:f7:c9:74:fc:96:e2:34: b5:2e:a1:7e:68:d7:a7:f0:d3:1b:1c:f5:02:3d:46:a3:2f:55: 3c:89:13:67:22:92:08:78:5a:ef:5d:5f:4b:fa:ef:39:c8:58: 89:97:41:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi4OF5EdbMgWOgoRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MDEzMDE5NDkxMloXDTI1MDQzMDE4NDkxMlowLzEtMCsGA1UEAxMk OTlhYjIwMDYtZjRmOC00NmE3LTg0M2UtMzEwMTA2ZWU2MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn2j/dm1UmqbmKL4fkrdcn/LXUmg49xQYTq4 3JD4NhAznf1u954rpeEIPGZljfqvARHu773rav8hARoUFxTAAfeFm1jYNGCHv+xs 2H6/m3x+/YBbp4dvly/yNSYboLgZNuPCK4YGCHPm8RpTh10/BAnKwgJct2z3S/Eb qYZxbhQee7+BlMXkYU7fNE+PXDBVs94ZMBLX0txQZZbz1zf+iAwcYTqGb9Qb6k7/ zdZns0FWW6+d56EH7fn+1ueoiovkNaEle0ebdHTnPSeAu8iPHRE1x9mZ/GYxN6pR o+YX8SN2bZvhYOaDR4boTuC3dSFa2Azzd27RWJBsIKW8uA/BcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2p0lwfvbS2DGyp7IIe4H+9tYN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMGY1NjRkMjktNDUwYi0z N2I4LTljNjctNWY4MWVjMGM3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0IfacKq6txpnou5hRYm/YYZAiBfkjMAeYkYv2NzzK538imEB2j6nCD s5v/azdWg+NHijgJj5oKShuRaTHfRwGRbdzNPnLZbac4lDl6ONvvnDswnXNDUkcI WJzhIA/d2hI1n9aQkXyDzq9YpJbJU9rKLAGDWRZ7fX9z71V3yu9r0CUa4/u5P8Tm TNMQuq9e09ki+3DLdRlVNqJEoBf42/gLukpy7ryL8xbiM6veq5+8YUVOxCs9RPyM 5kA4JbNysCi5pEdKeBVM5e80vk9oKV8F98l0/JbiNLUuoX5o16fw0xsc9QI9RqMv VTyJE2cikgh4Wu9dX0v67znIWImXQT4= -----END CERTIFICATE-----Generated at Tue Apr 8 22:06:03 2025 by rpki-client