$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa File: 52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa (raw, json) Hash identifier: ZZFfoMH726uP+RWE9b82dvXEisWaLSeDp0AGWuH8JOY= Subject key identifier: D9:AE:98:B2:B6:B3:C2:0B:56:D7:09:20:4A:DB:9E:AB:45:A7:7A:1D Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F43285848D64105D3C07471B8046B25C0 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 834 IP address blocks: 68.67.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:05:d3:c0:74:71:b8:04:6b:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=f4f89b5a-258a-4f08-9451-628c0284b2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:00:12:e5:a1:c3:a1:09:48:da:31:b9:f5: 71:c7:20:59:79:c9:b3:4a:48:c7:a1:08:de:ed:13: 05:49:bd:2b:a2:83:07:f2:f7:a7:80:03:0f:56:4a: e1:d4:cd:7d:a7:d4:66:6d:8e:b0:38:03:8a:1b:5d: 85:02:98:10:cd:2b:c2:1a:89:ac:7a:3e:68:bd:47: d7:b6:7b:b3:fb:39:cb:7e:c3:af:81:a5:31:b2:ad: af:a3:e8:89:72:a8:a7:2c:79:5b:8b:41:12:9b:ea: 0d:57:50:1a:af:d5:25:d5:85:0b:77:18:2e:b4:17: b1:af:83:29:51:c5:0a:8a:2e:51:a3:12:32:b2:b9: a2:7d:c5:3c:35:e7:2e:8f:89:22:f2:e4:1e:1c:58: d5:24:a6:aa:fd:3b:5b:49:b1:39:9a:82:b0:fa:7b: 98:d8:87:2f:dc:b5:e4:63:3a:07:d8:30:5b:1b:c8: 82:7b:9e:55:9a:19:8d:13:21:a9:64:fb:de:91:fd: c8:f8:75:8f:f3:64:eb:e9:01:03:74:ea:75:f4:f2: 7b:e3:09:5a:1d:8d:50:7c:f5:2d:72:d1:87:57:43: 5f:d8:71:42:27:e1:33:dc:01:bc:f3:b2:37:8f:96: 80:a5:35:a1:47:8e:d6:d1:de:1b:38:7d:7c:04:56: ff:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AE:98:B2:B6:B3:C2:0B:56:D7:09:20:4A:DB:9E:AB:45:A7:7A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:82:21:90:ca:eb:8e:70:4b:77:ce:82:b5:4f:60:da:e4:d0: a4:48:f7:7d:d4:37:72:4d:d5:1a:40:d2:0a:80:6a:8b:30:7a: ab:b8:3a:86:04:b9:ad:66:75:87:a0:b1:77:91:90:cb:8d:b7: 8e:ef:48:ba:de:be:1e:44:c8:b8:cf:73:db:7b:a2:b4:72:cf: 35:67:0f:53:dd:34:6f:f5:91:48:68:7a:b4:2f:ac:68:3e:51: 8b:62:f1:76:c3:1d:12:bd:2a:9e:61:b6:74:f9:a9:08:ce:e6: 48:45:cc:81:80:f2:92:ef:c4:f8:24:1a:e3:db:e0:b6:35:81: 20:7e:e6:d8:2b:12:93:9c:c5:01:5c:36:4d:3b:61:6e:80:90: a2:1f:d4:d2:f8:28:16:d9:56:d0:4b:f2:52:3c:d1:74:33:3c: 69:43:e3:5e:2f:41:91:0f:3d:66:89:f2:7b:d9:3f:37:25:3c: 6c:22:8b:79:a2:fb:2e:f0:e5:d4:98:99:47:fe:09:54:a9:1c: df:73:0d:43:a1:2c:16:2b:be:2a:67:15:8f:82:08:60:f4:3d: df:a1:5b:3f:3f:57:94:1b:40:7b:28:1d:14:7f:2c:97:db:9f: 45:90:8a:94:33:88:33:1a:3b:c3:8a:c9:c4:dd:bb:30:35:a1: a2:0c:d3:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQXTwHRxuARrJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjRmODliNWEtMjU4YS00ZjA4LTk0NTEtNjI4YzAyODRiMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OgAEuWhw6EJSNoxufVxxyBZecmzSkjHoQje 7RMFSb0rooMH8vengAMPVkrh1M19p9RmbY6wOAOKG12FApgQzSvCGomsej5ovUfX tnuz+znLfsOvgaUxsq2vo+iJcqinLHlbi0ESm+oNV1Aar9Ul1YULdxgutBexr4Mp UcUKii5RoxIysrmifcU8Necuj4ki8uQeHFjVJKaq/TtbSbE5moKw+nuY2Icv3LXk YzoH2DBbG8iCe55VmhmNEyGpZPvekf3I+HWP82Tr6QEDdOp19PJ74wlaHY1QfPUt ctGHV0Nf2HFCJ+Ez3AG887I3j5aApTWhR47W0d4bOH18BFb/xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmumLK2s8ILVtcJIErbnqtFp3odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNTJjZmU3MmUtM2QyNy0z MjU4LWJlZmYtZTgwZGIzYTJlNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuCIZDK645wS3fOgrVPYNrk0KRI933UN3JN1RpA0gqAaoswequ4OoYE ua1mdYegsXeRkMuNt47vSLrevh5EyLjPc9t7orRyzzVnD1PdNG/1kUhoerQvrGg+ UYti8XbDHRK9Kp5htnT5qQjO5khFzIGA8pLvxPgkGuPb4LY1gSB+5tgrEpOcxQFc Nk07YW6AkKIf1NL4KBbZVtBL8lI80XQzPGlD414vQZEPPWaJ8nvZPzclPGwii3mi +y7w5dSYmUf+CVSpHN9zDUOhLBYrvipnFY+CCGD0Pd+hWz8/V5QbQHsoHRR/LJfb n0WQipQziDMaO8OKycTduzA1oaIM00k= -----END CERTIFICATE-----Generated at Fri Apr 4 20:52:24 2025 by rpki-client