$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98267ccb-96d5-3f79-a2c3-e6ed894a824a.roa File: 98267ccb-96d5-3f79-a2c3-e6ed894a824a.roa (raw, json) Hash identifier: RZ1YEhT7lFSVR6u6CUBB4a8I3gDVwNXZny7mdDYZ5xY= Subject key identifier: 1A:52:80:DF:7F:E2:4B:08:F7:C0:A6:AF:0C:A2:3F:8D:6F:A3:EF:41 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244C7384A96B030DEED0C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98267ccb-96d5-3f79-a2c3-e6ed894a824a.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 68.161.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4c:73:84:a9:6b:03:0d:ee:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=d9a740c1-1a33-4199-bed6-f71474a26a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:b3:5c:5f:67:44:d6:67:4f:23:91:a3:91: 3c:3a:3b:a9:6d:01:37:5f:42:2d:84:41:be:47:1a: 98:38:d5:eb:6e:a2:1e:60:b4:56:bc:ba:3a:87:0e: e0:22:d3:cd:8f:a6:10:32:16:d1:d4:d6:73:cf:a3: 59:48:af:e4:ef:3f:15:78:2d:13:67:15:d7:78:8e: d4:16:13:46:3c:28:15:d2:e1:2f:2f:29:e7:f0:d4: 2c:3a:48:fe:43:44:91:b8:16:71:09:f4:6c:ce:06: 4a:14:57:35:4c:73:95:be:66:8f:9b:8c:42:92:92: ba:3c:5a:9e:fa:d6:43:3f:2d:1d:11:c0:47:d9:ff: 4b:bc:07:52:49:11:50:4c:65:cc:f3:81:3a:19:1a: 99:67:86:62:f8:01:f2:3d:9c:8e:f6:6d:ed:7f:53: 27:8e:94:39:ed:d2:44:f7:83:55:19:7a:95:9b:fb: 53:e8:08:1e:1f:aa:25:0e:cb:45:31:e3:84:78:8f: 7b:dc:ee:6e:b3:0a:e1:90:b6:1f:0f:dd:ef:37:20: 57:15:7a:b3:e4:d4:a9:6a:34:44:3c:af:e3:b1:67: 18:9f:e9:0d:ea:86:bb:15:c3:6c:cf:73:db:c2:70: f7:4d:c5:69:93:a2:a6:ae:c6:44:9a:ec:b9:10:0e: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:80:DF:7F:E2:4B:08:F7:C0:A6:AF:0C:A2:3F:8D:6F:A3:EF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98267ccb-96d5-3f79-a2c3-e6ed894a824a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0f:0f:38:bc:85:4b:f2:99:eb:e0:c4:a2:d2:04:96:ea:a1: cd:b8:9c:b2:4f:71:ce:27:46:bb:31:4b:41:9c:b6:8d:a0:f4: b4:a8:b2:40:81:b2:d1:8f:ed:72:2c:f5:21:c3:b7:41:d6:b2: 2c:d1:2b:8d:de:95:7e:3a:a7:a6:16:b4:7d:f5:5e:ac:89:3d: de:4d:7f:60:85:d5:47:22:0c:52:aa:0a:18:72:49:18:8b:f7: 39:86:c4:8a:6e:6e:a2:46:33:bb:f3:03:a9:c5:6d:c1:a4:61: 6c:4e:a3:58:e0:0c:ca:af:1d:c7:24:fc:03:51:e8:cf:03:b9: 60:68:da:b3:c6:24:0c:b5:81:01:5e:a0:bc:f0:2b:84:dc:87: 9b:29:fc:4c:ff:b4:c7:a8:3e:ca:01:17:6a:6e:3b:70:f9:b2: 42:22:07:da:62:80:4e:85:7d:c6:ae:8b:e1:fe:9d:f2:db:8b: 5e:1a:ff:21:78:0a:24:84:87:86:1d:27:52:55:86:d9:f2:78: 40:2a:1e:1d:58:30:8d:70:70:88:b0:ae:b5:b5:39:51:6c:a5: 77:f5:94:e4:6b:6f:1a:f3:8f:38:f5:41:8a:aa:68:0b:18:00: 79:54:59:1f:5b:d5:7d:34:e5:ad:2a:1b:1c:b0:4e:fa:50:cc: a2:2c:d3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJExzhKlrAw3u0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZDlhNzQwYzEtMWEzMy00MTk5LWJlZDYtZjcxNDc0YTI2YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEKzXF9nRNZnTyORo5E8OjupbQE3X0IthEG+ RxqYONXrbqIeYLRWvLo6hw7gItPNj6YQMhbR1NZzz6NZSK/k7z8VeC0TZxXXeI7U FhNGPCgV0uEvLynn8NQsOkj+Q0SRuBZxCfRszgZKFFc1THOVvmaPm4xCkpK6PFqe +tZDPy0dEcBH2f9LvAdSSRFQTGXM84E6GRqZZ4Zi+AHyPZyO9m3tf1MnjpQ57dJE 94NVGXqVm/tT6AgeH6olDstFMeOEeI973O5uswrhkLYfD93vNyBXFXqz5NSpajRE PK/jsWcYn+kN6oa7FcNsz3PbwnD3TcVpk6KmrsZEmuy5EA5RbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpSgN9/4ksI98CmrwyiP41vo+9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTgyNjdjY2ItOTZkNS0z Zjc5LWEyYzMtZTZlZDg5NGE4MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0PDzi8hUvymevgxKLSBJbqoc24nLJPcc4nRrsxS0Gcto2g9LSoskCB stGP7XIs9SHDt0HWsizRK43elX46p6YWtH31XqyJPd5Nf2CF1UciDFKqChhySRiL 9zmGxIpubqJGM7vzA6nFbcGkYWxOo1jgDMqvHcck/ANR6M8DuWBo2rPGJAy1gQFe oLzwK4Tch5sp/Ez/tMeoPsoBF2puO3D5skIiB9pigE6Ffcaui+H+nfLbi14a/yF4 CiSEh4YdJ1JVhtnyeEAqHh1YMI1wcIiwrrW1OVFspXf1lORrbxrzjzj1QYqqaAsY AHlUWR9b1X005a0qGxywTvpQzKIs004= -----END CERTIFICATE-----Generated at Sat Apr 5 23:22:29 2025 by rpki-client