$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa File: 64b554a5-9671-3d1f-95a8-c3d633997c7f.roa (raw, json) Hash identifier: C5uBJqzcxR4gb6bY5elFhZDsAd+baM69orfPagkuxh0= Subject key identifier: 04:CB:1B:DC:47:00:03:5E:DB:81:CA:C4:18:99:C3:D8:00:6C:BC:63 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584A07D52CE8EB40DB8540A38F9E Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 3356 IP address blocks: 68.67.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2c:e8:eb:40:db:85:40:a3:8f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=8be96ea9-6c96-4cf8-b34a-b4b0149840e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:e6:ff:1f:17:96:22:34:23:0d:1e:59:fb: 4c:b6:4c:a4:7c:5a:21:e3:f2:92:a3:4f:1c:6a:28: 11:46:33:ba:57:61:fd:e3:bf:53:c2:5f:a0:e4:2c: e7:b8:b0:be:9f:66:49:6b:7a:25:93:57:2c:89:1d: 06:d5:d7:d4:3e:4a:4c:05:79:7f:ae:2d:d5:0b:df: b3:c2:a6:6f:6c:39:4a:a3:a3:69:1a:fc:ac:07:1d: cf:25:95:3a:5e:38:41:16:6a:97:ca:52:16:4d:f7: f0:3f:f4:67:df:6d:57:3e:b6:c6:19:64:44:6b:d0: 98:bf:32:31:ce:5b:bf:59:b8:4f:5f:54:6d:52:23: ae:c2:fd:08:a1:58:dc:1c:e0:5d:d4:83:7e:1a:5c: 7e:a5:34:4f:55:a8:60:65:f4:37:64:27:54:7a:bd: 72:fe:2c:d5:0c:9a:81:71:31:9d:af:01:c0:23:73: 98:97:30:54:84:0b:97:40:59:4a:22:82:8d:c6:2b: f5:54:d5:40:2b:20:74:fa:97:b1:dc:75:3c:58:66: fd:cd:1e:31:9d:b8:2c:48:b8:bf:78:20:dc:4b:bd: 48:cd:9b:4d:3e:a0:e6:ce:13:61:a3:81:81:f4:3b: 40:a9:73:c5:ed:b0:48:03:8c:cb:c7:96:ce:28:29: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:1B:DC:47:00:03:5E:DB:81:CA:C4:18:99:C3:D8:00:6C:BC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/64b554a5-9671-3d1f-95a8-c3d633997c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f2:73:66:70:39:ac:0d:3a:dd:1c:9e:20:80:a3:64:47:20: 9a:e2:0d:a4:f7:3e:80:80:8c:77:41:67:f0:33:ee:0e:6e:a0: 05:fe:f2:24:a8:0a:8a:3b:b2:50:89:0b:2e:d1:a6:75:83:ad: 66:e4:91:b7:29:0b:26:3c:55:86:b0:f7:95:1e:67:2e:9d:85: 8e:c5:e9:61:fe:75:4a:7f:dd:fe:95:1f:e7:75:0f:30:78:56: 6e:4a:d4:ea:aa:4e:0f:45:86:3e:5e:0f:4d:b2:b6:0d:f0:c4: f8:ba:0d:2d:ff:f3:6c:4c:0b:ef:ab:67:38:85:9e:d5:a2:68: eb:5b:77:af:ad:3c:4c:ff:db:00:73:58:61:45:1d:09:03:55: fc:bc:90:be:1c:e8:90:98:35:26:4a:c1:97:a1:f6:dc:50:fa: f6:46:ae:24:48:69:3a:b4:24:d0:a8:20:1d:d2:e4:bb:c6:50: 5c:1b:6a:01:54:b1:96:d1:a0:ac:80:64:a5:b0:e6:c1:ff:83: 3d:64:69:cc:d9:c5:6c:17:27:0c:7f:d3:3d:d3:99:6a:7a:5c: c4:5e:94:a2:d2:78:1f:59:06:8a:cb:da:69:75:70:1f:82:67: 22:ec:28:12:47:da:c4:a4:92:39:35:88:a4:33:da:6a:d5:63: c3:f8:23:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1Szo60DbhUCjj54wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OGJlOTZlYTktNmM5Ni00Y2Y4LWIzNGEtYjRiMDE0OTg0MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutTm/x8XliI0Iw0eWftMtkykfFoh4/KSo08c aigRRjO6V2H9479Twl+g5CznuLC+n2ZJa3olk1csiR0G1dfUPkpMBXl/ri3VC9+z wqZvbDlKo6NpGvysBx3PJZU6XjhBFmqXylIWTffwP/Rn321XPrbGGWREa9CYvzIx zlu/WbhPX1RtUiOuwv0IoVjcHOBd1IN+Glx+pTRPVahgZfQ3ZCdUer1y/izVDJqB cTGdrwHAI3OYlzBUhAuXQFlKIoKNxiv1VNVAKyB0+pex3HU8WGb9zR4xnbgsSLi/ eCDcS71IzZtNPqDmzhNho4GB9DtAqXPF7bBIA4zLx5bOKCnUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATLG9xHAANe24HKxBiZw9gAbLxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNjRiNTU0YTUtOTY3MS0z ZDFmLTk1YTgtYzNkNjMzOTk3YzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDyc2ZwOawNOt0cniCAo2RHIJriDaT3PoCAjHdBZ/Az7g5uoAX+8iSo Coo7slCJCy7RpnWDrWbkkbcpCyY8VYaw95UeZy6dhY7F6WH+dUp/3f6VH+d1DzB4 Vm5K1OqqTg9Fhj5eD02ytg3wxPi6DS3/82xMC++rZziFntWiaOtbd6+tPEz/2wBz WGFFHQkDVfy8kL4c6JCYNSZKwZeh9txQ+vZGriRIaTq0JNCoIB3S5LvGUFwbagFU sZbRoKyAZKWw5sH/gz1kaczZxWwXJwx/0z3TmWp6XMRelKLSeB9ZBorL2ml1cB+C ZyLsKBJH2sSkkjk1iKQz2mrVY8P4I1w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:12 2025 by rpki-client