$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa File: 2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa (raw, json) Hash identifier: 0oUZbwdhEUUgQwfe885HjnAOk9Le7avYbz3Pn739zIc= Subject key identifier: B2:B1:32:79:42:AB:10:71:02:87:D5:DA:BA:94:72:3D:AC:7B:3D:43 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F432858490E16CB5C99310D715BAA3E00 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 834 IP address blocks: 68.67.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cb:5c:99:31:0d:71:5b:aa:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=22f17071-806d-4fbf-af51-6ade34942525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:84:bd:44:e7:1a:37:cd:e3:90:1b:a7:63: 6e:eb:da:0c:3d:65:be:7f:83:47:58:3a:1b:3a:0f: a2:20:9d:cd:24:b2:e0:fd:2d:cc:88:f0:11:a6:0b: 38:42:40:2e:cf:c1:fe:c7:2a:dc:c1:aa:19:a1:2f: 99:b5:5f:c8:c8:0a:6b:69:7a:2a:17:ec:67:ac:f0: df:d0:dc:ea:ad:88:4b:15:f7:0c:b2:4d:58:e4:5b: a3:0b:5a:45:7e:40:e2:1d:0d:76:86:38:25:42:d5: a9:5e:7b:18:e4:47:89:33:f4:e5:cc:c9:d7:7e:4c: dc:24:54:21:96:b9:a8:6e:f3:2b:28:0e:a8:85:c5: bd:38:95:be:99:5f:7e:a2:cb:8b:28:59:01:03:b1: c6:fa:66:f8:55:5e:aa:00:15:aa:96:c2:76:f7:39: 59:bf:da:d9:84:a5:e9:27:0e:e4:d2:3c:51:be:8b: ae:f2:c1:52:f8:d0:83:01:b6:95:fc:8b:29:42:9b: 15:21:91:ca:4f:ca:d9:55:ce:e6:23:f5:39:11:e2: cd:83:f8:44:3a:27:a1:d1:91:15:cc:12:0e:96:a9: b5:f1:70:bf:41:90:a9:2a:05:71:d5:22:93:58:97: 10:8e:3c:9c:bf:70:78:e9:e8:d4:18:ee:9f:75:8a: a5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B1:32:79:42:AB:10:71:02:87:D5:DA:BA:94:72:3D:AC:7B:3D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2f731e1a-a297-3001-80b1-7b6f87b77ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5b:de:ae:c4:41:8b:33:f0:17:fd:8a:20:a8:17:8f:08:31: bf:bb:4c:76:da:cc:56:5b:86:bd:24:82:f5:0a:e7:6f:72:fe: 0a:29:68:27:8c:48:9c:58:70:d7:d9:44:01:2d:9c:d1:ae:63: d9:f3:62:0b:7d:c4:41:59:ec:00:f7:79:11:df:ad:db:ff:0a: 1e:01:0c:4d:fa:8f:13:7d:a5:19:d9:c0:ce:a1:ea:c6:d9:0c: 39:d3:ac:6b:c1:72:a9:f3:8b:9c:70:13:12:61:18:58:48:93: f1:8b:6a:e6:a1:61:5f:89:7b:71:21:67:63:39:f4:f3:49:d3: 63:52:22:5a:16:2a:83:48:51:c5:eb:90:5e:b8:ed:2b:5f:c0: 4d:67:cc:37:0e:92:6d:70:65:82:96:af:cc:89:58:c5:c5:ed: ed:71:c4:2d:6e:2d:74:0f:82:38:a1:0d:44:94:df:9f:81:f6: 67:d5:65:f2:b3:3b:84:99:ff:4c:99:5c:cf:bc:1b:5b:fc:b9: 6c:dc:21:f5:72:ee:cb:18:cc:7c:55:61:18:aa:64:8c:2d:39: 4e:8d:25:8d:3c:d8:27:7b:6e:3e:1f:73:a6:db:1b:28:95:73: 36:ac:ab:51:76:d3:35:b0:ec:2d:fd:03:40:fd:0e:4c:20:b7: a9:5c:6c:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFstcmTENcVuqPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MjJmMTcwNzEtODA2ZC00ZmJmLWFmNTEtNmFkZTM0OTQyNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseyEvUTnGjfN45Abp2Nu69oMPWW+f4NHWDob Og+iIJ3NJLLg/S3MiPARpgs4QkAuz8H+xyrcwaoZoS+ZtV/IyApraXoqF+xnrPDf 0NzqrYhLFfcMsk1Y5FujC1pFfkDiHQ12hjglQtWpXnsY5EeJM/TlzMnXfkzcJFQh lrmobvMrKA6ohcW9OJW+mV9+osuLKFkBA7HG+mb4VV6qABWqlsJ29zlZv9rZhKXp Jw7k0jxRvouu8sFS+NCDAbaV/IspQpsVIZHKT8rZVc7mI/U5EeLNg/hEOieh0ZEV zBIOlqm18XC/QZCpKgVx1SKTWJcQjjycv3B46ejUGO6fdYqlDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKxMnlCqxBxAofV2rqUcj2sez1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMmY3MzFlMWEtYTI5Ny0z MDAxLTgwYjEtN2I2Zjg3Yjc3YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClb3q7EQYsz8Bf9iiCoF48IMb+7THbazFZbhr0kgvUK529y/gopaCeM SJxYcNfZRAEtnNGuY9nzYgt9xEFZ7AD3eRHfrdv/Ch4BDE36jxN9pRnZwM6h6sbZ DDnTrGvBcqnzi5xwExJhGFhIk/GLauahYV+Je3EhZ2M59PNJ02NSIloWKoNIUcXr kF647StfwE1nzDcOkm1wZYKWr8yJWMXF7e1xxC1uLXQPgjihDUSU35+B9mfVZfKz O4SZ/0yZXM+8G1v8uWzcIfVy7ssYzHxVYRiqZIwtOU6NJY082Cd7bj4fc6bbGyiV czasq1F20zWw7C39A0D9Dkwgt6lcbJA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:14 2025 by rpki-client