$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe875c1c-effd-3f67-a8b2-203a1ce65146.roa File: fe875c1c-effd-3f67-a8b2-203a1ce65146.roa (raw, json) Hash identifier: DCgjWJRe+Kk9kVP1itLefqGQqKUTHg+4XvfSowbxqi4= Subject key identifier: 9A:A9:42:FF:09:69:32:D1:0F:79:0D:F8:97:F0:5A:9A:06:44:8D:21 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C35147BED144E2341B640 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe875c1c-effd-3f67-a8b2-203a1ce65146.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 68.237.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:35:14:7b:ed:14:4e:23:41:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=448da986-9a8f-4d18-a186-8d0ee9ac370f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:98:be:0b:9f:3d:87:ae:5c:d3:96:59:59: 0a:d5:3c:63:eb:21:16:af:55:b6:d3:4f:74:54:40: 1e:56:f9:9b:ee:02:c1:ba:18:8e:25:bb:80:35:9a: 21:3c:37:0c:fd:b1:6c:fe:6e:2d:1c:0b:b0:7e:d4: d3:38:77:17:24:05:0b:8d:5e:ed:77:77:3b:34:fb: 59:2e:9d:ca:54:a9:86:01:4c:f3:74:0a:29:1c:dc: 55:1f:33:e5:83:8b:7e:3a:a9:fd:93:42:c2:30:93: c2:a2:a1:a3:77:0a:19:84:84:9c:7c:ab:86:66:ce: 39:dd:72:ea:d4:ae:9a:80:51:f0:00:3a:6c:9c:6a: a4:c9:36:d9:b5:05:05:f0:c2:f6:02:c5:a6:ce:08: 14:24:ec:6c:f0:40:ea:9e:45:4b:ee:37:28:98:4a: 43:f4:bc:f6:69:80:d2:a5:fd:20:4d:1b:1e:34:61: bd:aa:2b:f9:bd:6b:5d:24:6a:39:8d:43:eb:f9:7c: 89:75:23:56:bd:c0:46:05:d7:ec:be:d3:59:ad:4c: 95:42:87:d0:7a:35:e2:5d:5b:eb:89:0e:35:5b:c7: 6b:f3:fc:91:89:99:06:0d:ff:9f:a0:84:21:39:28: d9:14:ab:83:9f:ee:66:7c:02:a5:a3:43:23:13:03: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A9:42:FF:09:69:32:D1:0F:79:0D:F8:97:F0:5A:9A:06:44:8D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe875c1c-effd-3f67-a8b2-203a1ce65146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.237.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:8d:15:97:2b:2a:6e:f6:a5:61:47:23:02:e3:88:e8:60:4a: 04:cc:20:51:0b:2c:01:b5:d3:6a:9b:e1:22:23:2c:76:ef:11: 3d:2b:8d:49:8c:9d:57:1f:9f:e6:1c:b9:58:6c:f6:7e:6c:aa: a2:83:52:9b:bf:1d:b6:de:70:dc:1d:1e:05:7b:61:bc:d8:54: a3:5d:40:6f:df:66:0c:9a:c4:d9:38:13:9b:bd:e2:f5:d0:02: 0f:bd:ec:31:1e:2c:ba:a7:fd:c5:38:0f:23:3d:2a:7c:0a:50: 34:06:40:99:39:f5:6c:7b:72:97:e8:ea:84:ca:86:3f:59:c2: aa:96:f2:3d:4b:e3:6a:39:5f:39:ec:cc:d9:0a:31:c2:82:b2: 1f:05:1f:8b:b7:97:1a:cc:66:1e:66:8b:1a:25:3a:d7:df:98: 71:4b:19:69:4c:bc:63:e3:78:83:35:ba:5b:57:db:8d:19:f2: 45:c5:8e:1a:f5:b3:07:40:fb:92:23:be:4b:c9:fc:86:33:03: be:3d:62:5e:d5:32:84:78:48:0a:1d:e9:99:ea:44:12:83:28: af:67:fa:9e:85:bf:69:a6:f0:5a:e5:ca:be:17:98:3a:fa:fd: 18:19:d9:18:11:bb:5f:0c:37:d7:74:fd:77:e8:eb:3c:06:a5: cd:9c:0b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDUUe+0UTiNBtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NDQ4ZGE5ODYtOWE4Zi00ZDE4LWExODYtOGQwZWU5YWMzNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2+YvgufPYeuXNOWWVkK1Txj6yEWr1W20090 VEAeVvmb7gLBuhiOJbuANZohPDcM/bFs/m4tHAuwftTTOHcXJAULjV7td3c7NPtZ Lp3KVKmGAUzzdAopHNxVHzPlg4t+Oqn9k0LCMJPCoqGjdwoZhIScfKuGZs453XLq 1K6agFHwADpsnGqkyTbZtQUF8ML2AsWmzggUJOxs8EDqnkVL7jcomEpD9Lz2aYDS pf0gTRseNGG9qiv5vWtdJGo5jUPr+XyJdSNWvcBGBdfsvtNZrUyVQofQejXiXVvr iQ41W8dr8/yRiZkGDf+foIQhOSjZFKuDn+5mfAKlo0MjEwMJ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqpQv8JaTLRD3kN+JfwWpoGRI0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmU4NzVjMWMtZWZmZC0z ZjY3LWE4YjItMjAzYTFjZTY1MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRO0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALONFZcrKm72pWFHIwLjiOhgSgTMIFELLAG102qb4SIjLHbvET0rjUmM nVcfn+YcuVhs9n5sqqKDUpu/HbbecNwdHgV7YbzYVKNdQG/fZgyaxNk4E5u94vXQ Ag+97DEeLLqn/cU4DyM9KnwKUDQGQJk59Wx7cpfo6oTKhj9ZwqqW8j1L42o5Xzns zNkKMcKCsh8FH4u3lxrMZh5mixolOtffmHFLGWlMvGPjeIM1ultX240Z8kXFjhr1 swdA+5IjvkvJ/IYzA749Yl7VMoR4SAod6ZnqRBKDKK9n+p6Fv2mm8Frlyr4XmDr6 /RgZ2RgRu18MN9d0/Xfo6zwGpc2cC4k= -----END CERTIFICATE-----Generated at Sun Apr 6 07:22:34 2025 by rpki-client