$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72793750-8b56-37a5-9866-3378b2a3e940.roa File: 72793750-8b56-37a5-9866-3378b2a3e940.roa (raw, json) Hash identifier: F6FGq/VCQ5HRD38l6dGiZ4hy1AIBMJ+H8J3OXkQ4iLg= Subject key identifier: 93:EF:2F:28:3E:C5:1D:FF:B5:6E:E5:01:F1:14:23:31:7A:EA:D2:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244CE196B3991C53649280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72793750-8b56-37a5-9866-3378b2a3e940.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 68.161.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4c:e1:96:b3:99:1c:53:64:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=8e19816b-2928-47c3-8ef8-ca23af20e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:8e:79:18:cc:dd:e4:cf:f0:49:23:da:05: 5a:fb:55:25:a1:20:63:61:62:78:22:99:c8:fd:79: 8b:32:a6:fb:4c:3d:6f:64:07:24:9a:20:40:98:4a: 06:87:3b:93:0d:d2:ca:76:53:ed:f9:56:8e:93:a5: 1c:8f:0b:78:01:18:17:24:d8:89:bc:9d:11:94:6a: ae:b6:c1:b7:67:5c:9a:fb:3c:63:16:15:a1:b8:4d: ae:9f:e8:23:4c:ac:fc:d1:7e:45:af:ef:60:df:d3: d7:e7:81:8a:f1:96:27:d7:0a:8e:31:e9:db:cd:b8: 0e:bf:ae:b9:b4:5f:ac:c8:fe:19:4e:84:50:89:30: 06:fe:72:d8:2e:22:07:91:01:c5:02:0e:67:cb:67: 1f:b6:0a:31:81:14:b1:36:f9:0c:c6:74:78:67:f0: 6e:eb:3b:cf:5e:db:1a:61:0e:34:0d:ba:72:5e:0d: dc:83:b0:94:1f:e1:df:bf:c4:4c:77:ad:6c:f3:11: ca:88:c8:77:e9:58:6e:93:9d:82:9d:d6:b0:bd:be: 92:ca:80:a1:b8:f3:6f:75:7c:2a:ec:51:9c:d7:a6: e9:f1:2f:c7:9e:dd:71:47:d2:ab:50:8a:21:1b:8f: f4:86:a6:23:97:93:b7:ce:0b:91:63:b8:5c:01:47: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EF:2F:28:3E:C5:1D:FF:B5:6E:E5:01:F1:14:23:31:7A:EA:D2:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72793750-8b56-37a5-9866-3378b2a3e940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b6:79:be:5a:d2:42:81:17:4d:3e:71:ab:be:9a:fe:3b:3f: 69:3f:d4:eb:c2:fc:a5:67:fb:d9:de:7e:4c:97:c3:36:ad:8a: e0:8d:2b:8d:4b:7f:14:2f:5e:ba:d0:f8:3e:88:bd:23:e9:83: 3a:56:2d:7b:41:2a:2c:9a:24:f1:4c:db:ea:c7:7e:e7:7a:c2: 89:5b:28:56:30:c1:45:fd:8f:8b:bb:ab:d1:dd:86:88:86:2a: d3:82:d3:ed:bd:c8:a6:d1:56:79:5e:c6:3c:a7:31:a2:40:c4: 35:17:74:c2:c9:8b:ae:bb:e3:46:28:41:fe:31:06:d8:ce:9e: 9d:d7:62:56:f5:c2:04:d2:27:62:11:47:e7:3a:81:9c:ef:20: 0f:8a:3b:2c:ef:fa:2e:ef:4d:a7:1a:bb:0c:6f:ba:17:8d:98: 59:9d:33:98:e3:ba:f5:f3:cc:c5:59:d5:d3:81:17:7e:26:e7: 16:2c:e1:fa:7f:79:25:dd:1e:c1:c9:b0:4e:54:a2:98:bb:42: 10:c7:9a:13:35:ca:62:3f:5e:24:ec:2e:fb:d3:ff:19:86:83: b1:c4:9d:a9:61:79:3e:b3:04:54:bf:14:58:6d:6a:c8:d4:3c: 6e:e9:8c:a3:4a:a0:da:cf:f1:97:14:44:49:cc:c8:31:56:55: 98:00:ef:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEzhlrOZHFNkkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OGUxOTgxNmItMjkyOC00N2MzLThlZjgtY2EyM2FmMjBlNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoReOeRjM3eTP8Ekj2gVa+1UloSBjYWJ4IpnI /XmLMqb7TD1vZAckmiBAmEoGhzuTDdLKdlPt+VaOk6Ucjwt4ARgXJNiJvJ0RlGqu tsG3Z1ya+zxjFhWhuE2un+gjTKz80X5Fr+9g39PX54GK8ZYn1wqOMenbzbgOv665 tF+syP4ZToRQiTAG/nLYLiIHkQHFAg5ny2cftgoxgRSxNvkMxnR4Z/Bu6zvPXtsa YQ40DbpyXg3cg7CUH+Hfv8RMd61s8xHKiMh36Vhuk52Cndawvb6SyoChuPNvdXwq 7FGc16bp8S/Hnt1xR9KrUIohG4/0hqYjl5O3zguRY7hcAUc6JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPvLyg+xR3/tW7lAfEUIzF66tJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzI3OTM3NTAtOGI1Ni0z N2E1LTk4NjYtMzM3OGIyYTNlOTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq2eb5a0kKBF00+cau+mv47P2k/1OvC/KVn+9nefkyXwzatiuCNK41L fxQvXrrQ+D6IvSPpgzpWLXtBKiyaJPFM2+rHfud6wolbKFYwwUX9j4u7q9HdhoiG KtOC0+29yKbRVnlexjynMaJAxDUXdMLJi66740YoQf4xBtjOnp3XYlb1wgTSJ2IR R+c6gZzvIA+KOyzv+i7vTacauwxvuheNmFmdM5jjuvXzzMVZ1dOBF34m5xYs4fp/ eSXdHsHJsE5Uopi7QhDHmhM1ymI/XiTsLvvT/xmGg7HEnalheT6zBFS/FFhtasjU PG7pjKNKoNrP8ZcUREnMyDFWVZgA7/k= -----END CERTIFICATE-----Generated at Sun Apr 6 00:25:49 2025 by rpki-client