$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13a69a79-2d55-3db7-b3f0-e6972c909718.roa File: 13a69a79-2d55-3db7-b3f0-e6972c909718.roa (raw, json) Hash identifier: D4igO+ZIvh9FsQYDp31HWLvWb+8bqNLDlv6veK09VNY= Subject key identifier: 20:6D:F3:1C:10:46:3D:78:3F:73:84:28:8A:E3:AA:83:68:36:F7:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244D701CD9BBC8571CF480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13a69a79-2d55-3db7-b3f0-e6972c909718.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 68.238.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4d:70:1c:d9:bb:c8:57:1c:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=ce1c8b9c-9611-43d6-b5e2-ec2058b8d41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:5c:b4:78:5d:2f:be:31:dd:31:81:ff:c5: 2b:03:38:a6:bf:7b:1a:de:24:81:1d:76:8d:56:83: 81:47:35:97:2c:53:04:fe:de:1a:b0:b6:39:09:01: e0:c3:07:b0:3a:03:29:84:c2:88:5f:e0:dd:47:96: ea:64:d9:1d:92:a0:95:14:40:ff:00:70:e7:ec:f9: ed:77:16:3b:57:b5:8a:a2:65:54:25:b7:00:cb:ad: f9:67:e7:b6:93:08:cb:3f:71:90:b2:e8:b9:60:bc: b8:57:15:95:ec:cf:b4:91:91:78:f4:97:b1:36:cd: ae:ba:aa:d1:1f:74:27:9e:30:94:f2:a8:0e:32:02: 40:64:b7:f4:db:79:da:5e:0c:8d:dc:60:38:7f:9c: 36:4a:36:53:c0:3b:34:aa:e1:af:c6:3e:0c:a0:09: a8:d6:82:4b:32:20:f6:b7:f3:d2:3b:91:b0:49:16: ad:6a:f1:c4:20:2a:9f:cf:77:74:05:21:e6:a5:13: bc:a3:74:aa:7d:c0:0c:6d:11:b1:43:82:f7:11:d6: 2d:fc:1f:77:0d:e4:b0:fa:e9:79:7d:62:44:e3:8c: b5:03:e6:c5:c4:33:19:65:6a:43:ca:8d:2d:12:9d: e7:57:5a:f0:bb:82:6c:42:f0:6f:92:6e:12:a2:c1: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6D:F3:1C:10:46:3D:78:3F:73:84:28:8A:E3:AA:83:68:36:F7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13a69a79-2d55-3db7-b3f0-e6972c909718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:95:f2:5c:7e:00:a1:8b:99:c3:b1:17:89:d2:f9:9f:a4:50: eb:84:06:40:04:72:f3:55:04:a9:8d:ff:4d:cc:13:fe:dc:da: 76:4b:82:72:f0:ae:02:7a:f1:bf:f1:8a:9d:1f:b7:3d:12:bb: f8:a2:b5:b8:f6:6f:a0:aa:09:49:dc:4b:16:2f:f7:5d:f2:c7: 43:50:1e:05:48:42:a6:f0:7f:ca:5a:f6:3f:a0:5f:12:74:e7: 1a:cc:42:14:2a:e6:c2:62:61:56:54:ac:ae:84:47:0f:19:24: 2a:2c:0a:ab:de:d2:02:02:94:a7:e1:80:c4:52:9c:e4:7a:cb: ad:bb:40:bb:08:2d:a4:de:05:11:4a:23:05:7e:bc:2e:b5:d6: 2b:54:60:1f:6b:7b:a0:69:92:a6:57:18:10:d0:b0:b3:f6:0a: 8c:b3:4e:61:ec:66:71:c5:70:b2:27:39:e9:93:55:f1:e5:28: 99:63:16:5a:ae:1d:ff:16:21:26:dc:52:3a:fd:c5:ce:f7:5e: d9:9e:40:02:86:7e:72:13:67:23:aa:5e:8a:70:85:9a:b1:52: cd:e9:18:13:31:0e:d9:a3:8b:a6:3e:f2:88:80:85:f1:0a:6b: 6b:f8:d1:2a:49:9f:01:ef:02:cb:0b:81:5a:50:0e:e7:0d:c2: 47:a5:3c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE1wHNm7yFcc9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk Y2UxYzhiOWMtOTYxMS00M2Q2LWI1ZTItZWMyMDU4YjhkNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6FctHhdL74x3TGB/8UrAzimv3sa3iSBHXaN VoOBRzWXLFME/t4asLY5CQHgwwewOgMphMKIX+DdR5bqZNkdkqCVFED/AHDn7Pnt dxY7V7WKomVUJbcAy635Z+e2kwjLP3GQsui5YLy4VxWV7M+0kZF49JexNs2uuqrR H3QnnjCU8qgOMgJAZLf023naXgyN3GA4f5w2SjZTwDs0quGvxj4MoAmo1oJLMiD2 t/PSO5GwSRatavHEICqfz3d0BSHmpRO8o3SqfcAMbRGxQ4L3EdYt/B93DeSw+ul5 fWJE44y1A+bFxDMZZWpDyo0tEp3nV1rwu4JsQvBvkm4SosG8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBt8xwQRj14P3OEKIrjqoNoNvdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTNhNjlhNzktMmQ1NS0z ZGI3LWIzZjAtZTY5NzJjOTA5NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO5BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCV8lx+AKGLmcOxF4nS+Z+kUOuEBkAEcvNVBKmN/03ME/7c2nZLgnLw rgJ68b/xip0ftz0Su/iitbj2b6CqCUncSxYv913yx0NQHgVIQqbwf8pa9j+gXxJ0 5xrMQhQq5sJiYVZUrK6ERw8ZJCosCqve0gIClKfhgMRSnOR6y627QLsILaTeBRFK IwV+vC611itUYB9re6BpkqZXGBDQsLP2CoyzTmHsZnHFcLInOemTVfHlKJljFlqu Hf8WISbcUjr9xc73XtmeQAKGfnITZyOqXopwhZqxUs3pGBMxDtmji6Y+8oiAhfEK a2v40SpJnwHvAssLgVpQDucNwkelPAM= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:15 2025 by rpki-client