$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe932c1-3970-3a17-96ef-7343494ea5e5.roa File: 3fe932c1-3970-3a17-96ef-7343494ea5e5.roa (raw, json) Hash identifier: t3rP8FHOc5Lwk6n2f/2gQGGfhLKGLEvuY8320BdSKgM= Subject key identifier: 9C:14:07:B5:A5:DB:66:D2:C8:34:BE:F5:47:E6:8F:0C:3D:E5:5B:DD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244D1F5BBBF9910EB5B2C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe932c1-3970-3a17-96ef-7343494ea5e5.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 68.237.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4d:1f:5b:bb:f9:91:0e:b5:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=f50bd866-d802-401b-a06c-52b70c13b749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:93:ac:da:92:af:19:6c:b5:ce:91:7e:0c: 88:95:54:0f:a5:0f:4c:a2:a4:30:8e:6f:f8:39:63: e2:e8:7c:1f:0c:d0:62:bc:1b:de:e4:1e:32:53:7e: b3:b8:db:e2:e2:f9:27:dc:e9:bd:2e:f3:00:87:b3: 9a:84:03:fe:b3:94:c1:af:e9:4d:4e:ee:da:e8:91: f0:3f:aa:45:76:22:18:9b:4a:4d:ce:1b:c2:e3:24: 9e:0a:0b:12:bf:13:0c:6c:8f:24:5a:29:d5:7f:75: 06:89:43:68:89:32:9c:b6:37:b6:7c:a9:76:bb:36: bb:31:9f:50:05:d6:43:8c:ab:97:25:2a:6c:b8:52: 89:ae:dd:82:7c:85:db:bd:6c:b5:86:61:b1:85:83: 96:43:b6:4e:d2:c1:e9:72:b0:7d:10:99:a7:97:80: 44:fe:47:9e:38:42:24:6c:2d:2a:e5:d4:bb:a9:4b: 5d:68:96:6d:4d:80:fd:e6:53:83:b9:7a:81:7b:45: ea:c6:f4:8b:0f:a9:a8:ac:fc:fc:9d:a0:35:23:c9: d0:01:52:c4:29:97:cd:a6:f4:a5:47:f0:c1:33:e0: c4:aa:3e:f5:c7:d4:be:1b:5f:b0:d2:8b:2c:86:3b: f5:ce:32:5f:7a:6a:ab:f0:7b:b7:ab:30:37:1e:5b: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:14:07:B5:A5:DB:66:D2:C8:34:BE:F5:47:E6:8F:0C:3D:E5:5B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe932c1-3970-3a17-96ef-7343494ea5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.237.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:93:fd:16:39:b9:ab:41:04:ad:5e:89:8e:f0:0f:62:23:ef: 7b:2e:af:72:85:69:42:b7:c4:26:a6:b9:4b:42:27:87:5d:6c: d7:f0:a9:e2:de:1e:82:95:ca:be:04:04:be:00:00:a6:e8:35: 09:82:cc:03:01:35:fc:30:4f:11:16:29:63:9c:7f:a5:95:ec: 59:76:1f:15:58:1e:7b:53:a8:5c:ce:9a:a9:a6:85:30:38:50: 28:1c:0f:b7:6a:5d:e0:0b:63:f6:9d:69:71:d4:66:f4:d9:53: ac:0e:34:84:a7:72:e5:6a:5d:a7:28:53:68:a6:79:93:b8:49: 48:d0:26:90:67:9d:39:10:fe:9d:1c:c6:25:be:e3:5f:49:9d: 71:6e:15:95:92:45:20:b8:ed:b0:a5:69:e4:b9:38:86:13:5a: c5:87:80:c1:ba:e7:b1:ef:83:b3:f6:e0:e8:72:3b:87:b0:de: 53:74:98:d4:46:a6:6b:55:fb:2f:c8:8d:fb:b1:9a:2c:3d:05: 3f:72:0d:ca:0f:b2:f7:c5:e5:ee:54:c1:ba:c4:11:b7:1a:c9: cb:15:b8:40:a1:34:df:b3:a9:62:5b:1b:5a:4d:7c:9e:d7:93: b5:be:38:57:f0:70:b0:4b:e2:e6:63:30:48:70:11:db:3e:ed: b6:22:fc:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE0fW7v5kQ61ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZjUwYmQ4NjYtZDgwMi00MDFiLWEwNmMtNTJiNzBjMTNiNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgaTrNqSrxlstc6RfgyIlVQPpQ9MoqQwjm/4 OWPi6HwfDNBivBve5B4yU36zuNvi4vkn3Om9LvMAh7OahAP+s5TBr+lNTu7a6JHw P6pFdiIYm0pNzhvC4ySeCgsSvxMMbI8kWinVf3UGiUNoiTKctje2fKl2uza7MZ9Q BdZDjKuXJSpsuFKJrt2CfIXbvWy1hmGxhYOWQ7ZO0sHpcrB9EJmnl4BE/keeOEIk bC0q5dS7qUtdaJZtTYD95lODuXqBe0XqxvSLD6morPz8naA1I8nQAVLEKZfNpvSl R/DBM+DEqj71x9S+G1+w0osshjv1zjJfemqr8Hu3qzA3HlusNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwUB7Wl22bSyDS+9Ufmjww95VvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZlOTMyYzEtMzk3MC0z YTE3LTk2ZWYtNzM0MzQ5NGVhNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO2hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+T/RY5uatBBK1eiY7wD2Ij73sur3KFaUK3xCamuUtCJ4ddbNfwqeLe HoKVyr4EBL4AAKboNQmCzAMBNfwwTxEWKWOcf6WV7Fl2HxVYHntTqFzOmqmmhTA4 UCgcD7dqXeALY/adaXHUZvTZU6wONISncuVqXacoU2imeZO4SUjQJpBnnTkQ/p0c xiW+419JnXFuFZWSRSC47bClaeS5OIYTWsWHgMG657Hvg7P24OhyO4ew3lN0mNRG pmtV+y/Ijfuxmiw9BT9yDcoPsvfF5e5UwbrEEbcaycsVuEChNN+zqWJbG1pNfJ7X k7W+OFfwcLBL4uZjMEhwEds+7bYi/CY= -----END CERTIFICATE-----Generated at Sun Apr 6 11:06:08 2025 by rpki-client