$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/57d9da10-b8b7-3e33-a25a-512373867160.roa File: 57d9da10-b8b7-3e33-a25a-512373867160.roa (raw, json) Hash identifier: CXNenTkJbCUBrkK+sevDYSQrEIwkN07EDMo6XXOJWQ8= Subject key identifier: 75:6E:13:21:FB:81:32:B9:86:6D:A2:36:0F:14:E6:AE:64:EA:D8:F9 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F43285849350E9B662AC3784CCF439040 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/57d9da10-b8b7-3e33-a25a-512373867160.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 834 IP address blocks: 68.67.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9b:66:2a:c3:78:4c:cf:43:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=d867f808-fb1c-4b3f-92b4-5bb4f52b9208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:6b:31:68:c9:2a:98:19:6e:f7:7b:2c:63: a0:83:3b:0b:4e:20:4c:c8:6b:de:ea:d9:5a:4a:df: 95:94:54:bb:9e:75:3d:35:ce:23:a5:c8:8b:fe:23: 17:e9:e2:23:96:ee:7c:26:4e:f1:48:19:d5:ef:7b: 37:fd:f1:45:38:65:29:bf:7c:cc:0b:00:23:7d:31: fc:b3:d7:e4:6e:dc:b6:32:17:2f:67:04:8a:71:0b: a4:ab:9c:60:bc:dc:29:7d:b0:60:a3:40:a1:a2:6d: 33:a8:79:dd:81:eb:66:c3:c0:2c:38:f1:82:67:5f: 32:37:47:f4:29:94:5d:f1:78:4b:49:df:21:ab:76: 51:bb:87:e2:f6:c6:43:dc:c2:a8:59:f6:9d:dd:25: e2:7c:0e:e3:22:fc:1d:b5:c9:c1:97:d7:3b:3f:2a: 5f:79:6f:39:e6:3f:b1:ef:56:98:72:37:f1:29:2f: 0b:6d:d3:1d:d0:c2:a7:d8:d3:0e:63:27:f1:16:7a: 80:e4:2e:94:21:4d:5c:99:7a:09:18:6a:3d:0c:c3: 04:03:c3:86:48:5b:9f:5c:af:2b:a3:cd:c3:99:2a: 2c:5f:18:50:c5:2f:60:bd:b9:ed:01:18:9c:50:ea: f8:77:39:06:0a:50:ea:77:d4:25:1b:59:ab:41:9e: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6E:13:21:FB:81:32:B9:86:6D:A2:36:0F:14:E6:AE:64:EA:D8:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/57d9da10-b8b7-3e33-a25a-512373867160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:59:35:52:35:50:e0:c4:3e:85:da:f8:6d:b7:03:61:53:fe: 18:e7:bc:26:a5:6f:95:54:f3:78:0d:64:f7:37:9d:e6:07:b1: ea:73:f5:cc:e2:2b:e8:e9:56:76:48:99:c1:fd:64:a1:20:5d: a9:e3:45:e7:ea:5c:16:c9:37:83:91:e5:61:a1:eb:0a:e4:d7: db:96:67:6c:0a:75:ca:2d:92:51:dd:e4:23:e6:a6:19:81:b6: 90:0d:a2:15:de:10:49:92:81:31:2e:23:2d:c7:f7:c4:ba:17: d1:d8:65:4c:a7:61:4d:da:39:41:d8:59:29:9d:e4:66:c2:d6: 11:92:17:5a:64:a6:42:ae:82:7c:9c:79:6b:04:04:68:d7:ed: 46:7a:ea:38:98:06:a5:0e:fe:b3:df:67:07:b1:8c:8d:99:cb: 50:3a:ca:27:b6:16:d4:57:41:f0:1d:ff:6c:74:c8:77:1d:0e: e4:92:f7:34:cb:3d:89:bd:73:ee:54:51:df:08:a3:a0:76:90: 6e:0d:75:70:1e:7d:2d:a9:9b:02:a5:34:b2:2e:e4:81:1f:2c: 86:fc:ce:b4:eb:b8:cc:50:74:b5:37:42:7d:e5:85:86:bc:f3: 5c:36:d3:ba:56:5b:c5:56:66:5c:2f:ac:ef:7c:24:54:e1:de: 2e:f7:9d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DptmKsN4TM9DkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDg2N2Y4MDgtZmIxYy00YjNmLTkyYjQtNWJiNGY1MmI5MjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoxrMWjJKpgZbvd7LGOggzsLTiBMyGve6tla St+VlFS7nnU9Nc4jpciL/iMX6eIjlu58Jk7xSBnV73s3/fFFOGUpv3zMCwAjfTH8 s9fkbty2MhcvZwSKcQukq5xgvNwpfbBgo0Chom0zqHndgetmw8AsOPGCZ18yN0f0 KZRd8XhLSd8hq3ZRu4fi9sZD3MKoWfad3SXifA7jIvwdtcnBl9c7PypfeW855j+x 71aYcjfxKS8LbdMd0MKn2NMOYyfxFnqA5C6UIU1cmXoJGGo9DMMEA8OGSFufXK8r o83DmSosXxhQxS9gvbntARicUOr4dzkGClDqd9QlG1mrQZ4E1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVuEyH7gTK5hm2iNg8U5q5k6tj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNTdkOWRhMTAtYjhiNy0z ZTMzLWEyNWEtNTEyMzczODY3MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJZNVI1UODEPoXa+G23A2FT/hjnvCalb5VU83gNZPc3neYHsepz9czi K+jpVnZImcH9ZKEgXanjRefqXBbJN4OR5WGh6wrk19uWZ2wKdcotklHd5CPmphmB tpANohXeEEmSgTEuIy3H98S6F9HYZUynYU3aOUHYWSmd5GbC1hGSF1pkpkKugnyc eWsEBGjX7UZ66jiYBqUO/rPfZwexjI2Zy1A6yie2FtRXQfAd/2x0yHcdDuSS9zTL PYm9c+5UUd8Io6B2kG4NdXAefS2pmwKlNLIu5IEfLIb8zrTruMxQdLU3Qn3lhYa8 81w207pWW8VWZlwvrO98JFTh3i73nd0= -----END CERTIFICATE-----Generated at Fri Apr 4 20:57:35 2025 by rpki-client