$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa File: 5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa (raw, json) Hash identifier: e2VFCU7aBHj12kB5RcWhHCYxqYbqU77yOPfz9qWNKt8= Subject key identifier: 18:78:A4:E3:8D:50:8A:74:5B:F9:72:2A:74:98:12:D7:2E:AB:2B:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C286BD1A2FA4066667C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 68.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:28:6b:d1:a2:fa:40:66:66:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=2bf892de-1a46-44b9-bee6-05c6acce9009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e9:b5:83:72:db:f4:c2:a7:88:61:21:6e:59: 35:93:dc:24:f5:3c:67:2c:a2:ec:16:93:96:f3:1e: 39:f0:84:0d:37:7f:0d:e3:5e:cc:10:4d:a4:07:3b: bd:b3:5b:88:57:58:9e:fc:99:a4:d5:f1:6c:0c:98: 7e:07:6e:44:be:a1:9e:04:87:f4:2a:ec:46:45:f5: 85:24:97:13:85:61:72:89:35:06:5c:f4:62:d7:bc: 2e:5f:08:3d:5e:57:3b:6e:3b:50:5a:1a:2c:4e:b6: 90:ac:09:16:22:37:ee:0a:4c:c4:ee:43:79:a9:53: 6d:c3:0e:74:08:5a:e4:9d:a3:67:e0:29:42:c2:f6: 20:49:ba:2d:7d:b3:e2:b8:91:7f:ff:78:89:50:0f: 55:19:8e:c0:19:34:03:84:32:d3:d6:b7:d4:91:0e: 6a:eb:d9:b9:8e:47:87:53:09:3f:c6:22:a2:41:ee: da:59:42:4e:d8:a2:5b:6d:c7:57:ef:0b:51:80:97: e9:75:c1:ee:55:3c:27:79:19:55:b9:0e:82:49:b8: 93:a2:57:a2:da:67:21:85:19:0a:e8:b3:dd:bb:c9: f5:57:26:52:1c:bd:56:cd:5a:69:9f:0b:17:f2:47: 57:e8:03:69:61:bc:ae:e6:d3:64:9a:9c:90:87:6f: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:78:A4:E3:8D:50:8A:74:5B:F9:72:2A:74:98:12:D7:2E:AB:2B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c2:d0:ad:2b:1b:57:84:f0:65:88:06:5b:05:d3:ff:03:20: af:8d:11:94:22:5a:40:80:2b:f3:52:97:1f:55:39:4e:53:a0: 90:4f:ff:5c:b6:57:5d:b5:71:80:65:b2:70:d2:74:02:12:c4: 40:88:12:3b:c2:55:40:4d:44:6d:24:1e:9b:ab:c3:18:61:8f: 53:49:6a:b2:6f:c9:9d:ee:b8:c2:fd:59:b4:a7:e1:8b:20:63: 82:e3:b2:46:5c:81:db:82:91:64:71:5d:2c:43:cc:be:cb:3b: 86:32:f8:2d:8e:aa:ac:66:2c:07:93:43:63:2a:24:be:5d:ea: 0f:81:87:4d:b9:e5:a7:ab:05:94:fd:e5:34:32:b0:22:f2:dd: 10:b0:bf:5d:af:15:05:e0:87:0f:83:00:b8:54:a9:91:a3:2b: 50:e7:2a:47:8a:25:e1:fc:c6:04:68:ac:f1:d4:db:c5:9e:7d: e2:11:85:73:2b:61:e1:ec:0a:06:60:11:c2:98:79:ef:1e:c9: 90:26:39:38:cd:6d:d0:cd:b8:27:d2:f0:4f:64:18:74:0f:a5: f8:1e:5a:73:18:bf:e3:5b:8d:88:ad:01:a0:0f:bd:66:1c:c2: b7:14:c1:74:5a:70:ad:0e:4e:1d:e9:26:53:2d:0e:14:dc:5e: 0a:92:49:ae -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkLTChr0aL6QGZmfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MmJmODkyZGUtMWE0Ni00NGI5LWJlZTYtMDVjNmFjY2U5MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoem1g3Lb9MKniGEhblk1k9wk9TxnLKLsFpOW 8x458IQNN38N417MEE2kBzu9s1uIV1ie/Jmk1fFsDJh+B25EvqGeBIf0KuxGRfWF JJcThWFyiTUGXPRi17wuXwg9Xlc7bjtQWhosTraQrAkWIjfuCkzE7kN5qVNtww50 CFrknaNn4ClCwvYgSbotfbPiuJF//3iJUA9VGY7AGTQDhDLT1rfUkQ5q69m5jkeH Uwk/xiKiQe7aWUJO2KJbbcdX7wtRgJfpdcHuVTwneRlVuQ6CSbiTolei2mchhRkK 6LPdu8n1VyZSHL1WzVppnwsX8kdX6ANpYbyu5tNkmpyQh2/WdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBh4pOONUIp0W/lyKnSYEtcuqytuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWYzZGMzZTgtNGIyMC0z NWQ1LWFkYTUtNzViOWI1NWY3MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATcLQrSsbV4TwZYgGWwXT/wMgr40RlCJaQIAr81KXH1U5TlOgkE//XLZX XbVxgGWycNJ0AhLEQIgSO8JVQE1EbSQem6vDGGGPU0lqsm/Jne64wv1ZtKfhiyBj guOyRlyB24KRZHFdLEPMvss7hjL4LY6qrGYsB5NDYyokvl3qD4GHTbnlp6sFlP3l NDKwIvLdELC/Xa8VBeCHD4MAuFSpkaMrUOcqR4ol4fzGBGis8dTbxZ594hGFcyth 4ewKBmARwph57x7JkCY5OM1t0M24J9LwT2QYdA+l+B5acxi/41uNiK0BoA+9ZhzC txTBdFpwrQ5OHekmUy0OFNxeCpJJrg== -----END CERTIFICATE-----Generated at Sun Apr 6 07:22:30 2025 by rpki-client