$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ebcfbf4-32ac-3271-93b2-345a76c9f0c0.roa File: 8ebcfbf4-32ac-3271-93b2-345a76c9f0c0.roa (raw, json) Hash identifier: +X4OOflAfUlm4bMenrJGzbrZ86qbhFi4/H1c5cselDw= Subject key identifier: FD:F6:70:EF:A1:14:B0:5D:8A:40:52:8F:0F:07:97:C1:60:0F:FC:CB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244CBA8B9FECE3BBFF8780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ebcfbf4-32ac-3271-93b2-345a76c9f0c0.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 68.161.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4c:ba:8b:9f:ec:e3:bb:ff:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=f2a251b2-8aea-40a9-8ae3-792dde889518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:4e:5c:b7:0b:8d:15:d0:01:98:19:c9:19: a3:1b:5a:f2:ad:3e:d4:f8:6f:c7:25:31:9b:7d:b5: c8:76:78:70:4b:b2:d4:2b:4f:b3:ed:d5:86:2b:a2: d8:05:ab:f6:34:15:a0:6a:dc:14:3d:eb:e1:74:53: a4:83:5f:ee:ab:c1:57:f2:68:78:a8:9a:81:79:34: 3f:b4:b1:2b:81:ff:ef:86:13:ba:db:31:a9:f0:1d: 29:30:45:4b:8a:7f:3c:73:d3:45:35:c5:96:ca:f2: 2d:7e:5e:cf:3f:91:4d:43:e3:d6:6d:32:7d:45:2a: 0f:b1:df:8d:e5:2b:3b:74:a1:0f:f0:c6:da:86:91: 0d:96:4e:80:d5:68:7b:4f:0d:02:09:75:9b:c1:39: ff:43:fd:df:e9:f3:42:d7:23:c5:46:48:f1:a7:dc: d4:dc:88:42:36:88:58:dc:c8:86:73:97:89:1b:17: e1:b7:d3:18:6f:29:32:d5:14:30:47:a5:4f:83:55: 2c:99:1e:e9:1f:47:8e:38:c2:d1:17:fe:5a:50:d6: 77:6c:1e:9c:13:b3:71:e9:89:de:52:e6:f7:c7:60: 88:2d:4b:d4:bc:88:d2:b2:76:7f:28:f0:ae:2c:d7: b8:e5:b9:cc:1f:37:8f:4b:f8:df:b6:ad:44:9e:ec: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F6:70:EF:A1:14:B0:5D:8A:40:52:8F:0F:07:97:C1:60:0F:FC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ebcfbf4-32ac-3271-93b2-345a76c9f0c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a5:da:11:3d:26:59:2c:eb:41:05:07:77:23:87:b9:1d:ac: d5:15:b9:dd:e0:29:e4:98:a4:5c:50:69:99:54:ba:98:8b:e0: 81:44:cd:08:06:60:1b:11:d1:5a:c3:9f:e5:ca:14:2b:0e:f4: 35:00:6e:63:22:a9:c6:2e:fa:0f:d3:55:cb:b2:1e:63:26:0b: 8d:11:87:c6:c9:b3:89:22:ab:89:36:bd:d9:92:87:a8:08:01: e0:8e:86:c0:be:c6:cc:6f:e5:fa:dc:85:6e:56:0b:d5:ea:55: 92:4b:01:d0:a9:e4:28:8d:34:0b:ca:f3:80:e6:8f:aa:23:25: 51:90:17:11:9a:01:97:0f:b9:4b:4e:83:8d:86:28:9c:03:ce: e9:55:4d:ec:2e:67:4d:64:9e:c0:a9:51:0f:fb:20:09:34:cf: 4c:94:d0:2b:2f:2d:6a:70:be:35:0f:ea:d7:5e:7f:ab:8f:f8: ad:a7:c2:1d:22:08:f4:dd:1a:4c:c7:61:60:2b:4b:4f:05:a0: ba:79:95:e0:6e:b8:26:d8:93:65:ea:5a:e7:02:8c:5f:7f:d7: 05:45:d6:c4:7c:25:5d:e7:a2:0b:1f:c7:f1:35:b4:de:f0:3f: 67:c5:be:ea:b5:1d:98:b0:14:c0:77:41:70:dd:3c:8b:af:87: 73:e4:42:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEy6i5/s47v/h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZjJhMjUxYjItOGFlYS00MGE5LThhZTMtNzkyZGRlODg5NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm05OXLcLjRXQAZgZyRmjG1ryrT7U+G/HJTGb fbXIdnhwS7LUK0+z7dWGK6LYBav2NBWgatwUPevhdFOkg1/uq8FX8mh4qJqBeTQ/ tLErgf/vhhO62zGp8B0pMEVLin88c9NFNcWWyvItfl7PP5FNQ+PWbTJ9RSoPsd+N 5Ss7dKEP8MbahpENlk6A1Wh7Tw0CCXWbwTn/Q/3f6fNC1yPFRkjxp9zU3IhCNohY 3MiGc5eJGxfht9MYbyky1RQwR6VPg1UsmR7pH0eOOMLRF/5aUNZ3bB6cE7Nx6Yne Uub3x2CILUvUvIjSsnZ/KPCuLNe45bnMHzePS/jftq1EnuxwNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP32cO+hFLBdikBSjw8Hl8FgD/zLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGViY2ZiZjQtMzJhYy0z MjcxLTkzYjItMzQ1YTc2YzlmMGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6l2hE9Jlks60EFB3cjh7kdrNUVud3gKeSYpFxQaZlUupiL4IFEzQgG YBsR0VrDn+XKFCsO9DUAbmMiqcYu+g/TVcuyHmMmC40Rh8bJs4kiq4k2vdmSh6gI AeCOhsC+xsxv5frchW5WC9XqVZJLAdCp5CiNNAvK84Dmj6ojJVGQFxGaAZcPuUtO g42GKJwDzulVTewuZ01knsCpUQ/7IAk0z0yU0CsvLWpwvjUP6tdef6uP+K2nwh0i CPTdGkzHYWArS08FoLp5leBuuCbYk2XqWucCjF9/1wVF1sR8JV3nogsfx/E1tN7w P2fFvuq1HZiwFMB3QXDdPIuvh3PkQtg= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:39 2025 by rpki-client