$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa File: ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa (raw, json) Hash identifier: IeZKYIY4qnsJsD+gCcv5SNj3KmWyyNhGQ706pIVat+Q= Subject key identifier: B0:12:73:08:59:7F:5D:EA:59:BA:F6:6D:08:62:29:BC:2A:82:9B:60 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246CECC81CB4D9B41201800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 68.163.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ce:cc:81:cb:4d:9b:41:20:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bd120fa0-5614-4fa5-9ff7-53a0070dfa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:e0:a4:a5:38:c1:87:ba:8b:30:67:ba:24: d2:9c:a5:cc:4f:c1:d9:f5:24:4e:45:89:53:9f:dc: ab:d0:93:4e:0a:82:92:fd:c9:05:18:6f:3f:96:ff: 73:63:79:36:53:be:51:c7:9c:fd:37:da:1a:d7:b0: bb:5f:8d:21:bc:9c:8d:95:e4:d5:c9:0a:e6:46:26: 59:57:14:6a:d7:66:5e:9c:ff:de:37:12:a9:b0:44: 1c:ae:0e:c3:c6:33:87:ae:fb:d0:78:b4:6a:dd:bd: 3a:8a:d0:81:ae:dd:ac:6b:61:48:82:34:3b:97:8a: f4:e5:17:e6:f2:67:aa:e5:c9:6b:61:16:c2:ec:6f: 9d:ee:4e:48:f2:d7:27:c0:ed:7a:06:7b:a3:47:e2: 1b:5d:cb:63:2d:ea:06:ee:87:cc:ca:f0:d4:52:92: 99:50:dc:8e:0e:3d:98:f1:d0:bc:67:ef:03:d8:65: 38:7b:10:11:7f:54:9f:94:0d:c7:b1:c9:86:a3:74: ce:ed:41:70:db:a8:95:e6:80:c5:a5:ce:d5:bc:e6: 7f:26:91:89:e1:e7:e4:ba:d7:ce:bf:9b:a6:e7:f9: 8f:47:fa:39:44:ee:3c:01:d1:a5:89:68:7a:43:29: 70:ac:b3:e8:05:d4:69:55:7e:1c:fe:84:66:52:96: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:12:73:08:59:7F:5D:EA:59:BA:F6:6D:08:62:29:BC:2A:82:9B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.163.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4f:4f:30:92:b4:74:50:dc:b3:ee:57:7f:ac:70:cd:ae:d9: ca:d7:1b:86:47:5d:19:37:07:33:07:d2:fb:56:cd:83:a1:2d: f7:be:03:b7:0a:23:dc:ce:c4:95:30:f6:a8:da:8f:a4:37:bd: 38:b6:8b:62:77:ca:8b:64:b7:a6:06:3d:bf:16:18:19:96:0d: 3f:78:c5:65:77:cf:9a:ec:e4:fa:96:ff:51:1f:e5:b3:e1:37: f0:19:53:d9:79:35:6d:5b:03:08:74:e5:f6:30:05:1f:53:29: df:4a:08:2e:29:52:64:64:ca:37:64:50:a6:cc:4c:22:ac:6e: fe:e1:4b:a2:04:3a:95:4d:b3:a8:30:53:f2:6c:70:35:4e:76: 70:b7:8a:57:f0:8c:c7:4b:af:93:33:28:99:0f:97:39:3b:8a: 6f:51:cf:e5:6a:76:cf:43:65:3b:35:ef:1d:14:c0:50:07:4a: f0:47:22:ac:d9:e1:98:06:5d:18:38:c8:05:f2:8c:cf:0c:ca: 70:aa:46:f3:65:21:60:25:b0:33:d7:06:93:84:8f:65:bd:2a: fb:18:de:7c:01:96:b8:d0:83:b9:b0:84:da:94:1d:49:ca:8e: 3b:59:30:f5:41:d8:56:0a:19:4a:bf:4c:8d:47:9d:7a:41:4f: 5d:16:4b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRs7MgctNm0EgGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmQxMjBmYTAtNTYxNC00ZmE1LTlmZjctNTNhMDA3MGRmYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIHgpKU4wYe6izBnuiTSnKXMT8HZ9SRORYlT n9yr0JNOCoKS/ckFGG8/lv9zY3k2U75Rx5z9N9oa17C7X40hvJyNleTVyQrmRiZZ VxRq12ZenP/eNxKpsEQcrg7DxjOHrvvQeLRq3b06itCBrt2sa2FIgjQ7l4r05Rfm 8meq5clrYRbC7G+d7k5I8tcnwO16BnujR+IbXctjLeoG7ofMyvDUUpKZUNyODj2Y 8dC8Z+8D2GU4exARf1SflA3HscmGo3TO7UFw26iV5oDFpc7VvOZ/JpGJ4efkutfO v5um5/mPR/o5RO48AdGliWh6QylwrLPoBdRpVX4c/oRmUpaSbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAScwhZf13qWbr2bQhiKbwqgptgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWM4ZjQyMjUtMjZlYS0z ZTA1LWI3MGEtM2MxMjdkM2I5YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9PTzCStHRQ3LPuV3+scM2u2crXG4ZHXRk3BzMH0vtWzYOhLfe+A7cK I9zOxJUw9qjaj6Q3vTi2i2J3yotkt6YGPb8WGBmWDT94xWV3z5rs5PqW/1Ef5bPh N/AZU9l5NW1bAwh05fYwBR9TKd9KCC4pUmRkyjdkUKbMTCKsbv7hS6IEOpVNs6gw U/JscDVOdnC3ilfwjMdLr5MzKJkPlzk7im9Rz+Vqds9DZTs17x0UwFAHSvBHIqzZ 4ZgGXRg4yAXyjM8MynCqRvNlIWAlsDPXBpOEj2W9KvsY3nwBlrjQg7mwhNqUHUnK jjtZMPVB2FYKGUq/TI1HnXpBT10WS1U= -----END CERTIFICATE-----Generated at Sun Apr 6 03:27:26 2025 by rpki-client