$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa File: 68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa (raw, json) Hash identifier: amjiDvqEUNKXDtF4tgUst4l4iR1oT/xWN05pwCBSsSo= Subject key identifier: DF:EB:AB:00:43:97:6A:5B:BB:44:9B:CA:F4:1A:B3:63:5A:03:A3:77 Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Certificate serial: 010D0C9F43285848B8F0BD99C461D50AE720B384 Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 396032 IP address blocks: 64.38.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:bd:99:c4:61:d5:0a:e7:20:b3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=1ed3b038-b058-4345-be34-7c509c0b3e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:56:70:4a:b7:56:fe:f0:27:e6:ed:af:a0: a2:a4:21:45:5b:aa:07:6c:89:e7:81:09:a9:80:02: 69:2f:ec:1c:e0:2a:44:26:f3:df:53:03:dc:75:1d: de:52:e3:18:8d:83:d8:0f:29:35:3e:71:5f:81:76: 84:8c:7f:60:56:47:ae:bc:c7:a5:40:94:58:77:0c: 0c:41:1e:87:c2:91:07:7b:79:19:33:8a:ab:12:87: 4d:07:84:59:3d:d4:49:38:f3:f5:37:5b:99:37:0e: 0f:16:d1:6b:70:07:4e:5e:29:3f:09:c0:11:8a:29: 89:5a:df:b5:f1:78:54:be:d3:9b:29:ff:c1:fe:ef: 15:0a:ab:b5:e3:79:4a:7e:b6:00:84:ad:1a:80:11: 3c:19:93:24:38:1f:5a:6e:82:9a:a4:fd:83:87:de: a9:ac:53:fe:4a:92:bf:27:30:b9:3c:65:30:90:2a: e3:38:ac:ba:fa:f3:46:0d:78:60:ad:7b:a7:10:d9: ae:6a:e6:5d:ce:4d:48:da:ae:b8:14:6c:5b:1c:4c: 8f:e5:a7:e5:d7:42:eb:bc:98:9c:50:6b:e5:1f:2a: 54:57:14:7e:d1:5b:40:d8:41:20:cd:45:09:44:43: fb:f6:9f:18:4d:9c:df:6c:c0:d9:82:33:5e:d2:12: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:AB:00:43:97:6A:5B:BB:44:9B:CA:F4:1A:B3:63:5A:03:A3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl X509v3 Authority Key Identifier: keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer sbgp-ipAddrBlock: critical IPv4: 64.38.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b2:5e:36:e1:47:83:97:7c:78:d5:21:cc:6f:86:09:66:25: 7c:73:ea:4b:4a:53:c0:f5:d7:55:52:28:eb:47:64:f0:50:7e: e6:66:f2:ce:2e:ba:e6:ea:21:db:38:34:12:60:3e:35:bb:28: 9d:3c:b6:ef:70:99:ca:a9:6f:a7:90:e0:48:18:68:48:8a:69: 8c:0c:d3:94:e4:eb:20:7f:6d:62:ad:14:fc:8f:c7:21:68:6b: 17:95:ad:a2:7c:18:3b:01:47:79:f9:6a:1d:dc:67:1c:6e:ec: a7:5f:4e:64:c4:fa:c4:fd:05:ea:bb:7a:62:ca:34:ef:71:21: 8f:1c:d6:93:34:04:e9:94:09:89:b6:24:1c:e6:27:85:20:ae: 1e:ac:34:5d:78:23:99:9a:95:86:28:c4:a5:d4:ac:69:0e:f8: 68:d8:bb:5e:56:be:a5:7c:51:f2:2e:48:cc:43:46:21:b1:72: 54:ad:c4:fb:c7:05:17:60:fb:82:a1:d8:39:65:93:0b:fb:79: 23:d9:13:29:b5:bf:17:1d:f8:07:54:ec:0e:2e:6b:00:19:d8: 2f:2e:ab:5c:20:7a:cb:a3:2f:cc:d8:e9:5a:a0:be:47:04:f7: 40:3a:ae:7f:45:08:1e:dd:6b:2e:08:e6:31:67:5e:9a:c9:23: 19:2e:82:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48L2ZxGHVCucgs4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz YzE2MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MWVkM2IwMzgtYjA1OC00MzQ1LWJlMzQtN2M1MDljMGIzZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RBWcEq3Vv7wJ+btr6CipCFFW6oHbInngQmp gAJpL+wc4CpEJvPfUwPcdR3eUuMYjYPYDyk1PnFfgXaEjH9gVkeuvMelQJRYdwwM QR6HwpEHe3kZM4qrEodNB4RZPdRJOPP1N1uZNw4PFtFrcAdOXik/CcARiimJWt+1 8XhUvtObKf/B/u8VCqu143lKfrYAhK0agBE8GZMkOB9aboKapP2Dh96prFP+SpK/ JzC5PGUwkCrjOKy6+vNGDXhgrXunENmuauZdzk1I2q64FGxbHEyP5afl10LrvJic UGvlHypUVxR+0VtA2EEgzUUJREP79p8YTZzfbMDZgjNe0hLHWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/rqwBDl2pbu0SbyvQas2NaA6N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvNjhkYzY4YWUtYjZjNC0z NzAxLWEyYWQtNjIwOThiMWYxMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3 MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2 ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWyXjbhR4OXfHjVIcxvhglmJXxz6ktKU8D111VSKOtHZPBQfuZm8s4u uubqIds4NBJgPjW7KJ08tu9wmcqpb6eQ4EgYaEiKaYwM05Tk6yB/bWKtFPyPxyFo axeVraJ8GDsBR3n5ah3cZxxu7KdfTmTE+sT9Beq7emLKNO9xIY8c1pM0BOmUCYm2 JBzmJ4Ugrh6sNF14I5malYYoxKXUrGkO+GjYu15WvqV8UfIuSMxDRiGxclStxPvH BRdg+4Kh2Dllkwv7eSPZEym1vxcd+AdU7A4uawAZ2C8uq1wgesujL8zY6VqgvkcE 90A6rn9FCB7day4I5jFnXprJIxkugrw= -----END CERTIFICATE-----Generated at Mon Apr 7 09:22:55 2025 by rpki-client