$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa File: 11afab10-f59c-313b-b25b-4dc592a25c6e.roa (raw, json) Hash identifier: +bP6Dsrvt7zlHPp/nCtN3DTPG+JRUMo5O7e+Nb7qfjE= Subject key identifier: 2E:6D:63:3E:7B:81:AF:39:44:A2:3D:47:98:10:36:20:D9:77:8D:16 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858493B633C58AD52C3651265B770 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa Signing time: Tue 18 Mar 2025 19:26:28 +0000 ROA not before: Tue 18 Mar 2025 19:26:28 +0000 ROA not after: Mon 16 Jun 2025 19:26:28 +0000 asID: 30238 IP address blocks: 68.232.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:63:3c:58:ad:52:c3:65:12:65:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 18 19:26:28 2025 GMT Not After : Jun 16 19:26:28 2025 GMT Subject: CN=e3f7f3ff-02b1-4849-9ba9-996def978b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:7d:ac:dc:25:8a:9a:5e:a8:76:6d:a3:de: d0:38:8e:dc:b8:0c:3e:58:fd:6b:a6:28:ae:69:21: b5:d2:cc:eb:ac:40:21:33:50:1a:1a:de:b2:f5:e5: 03:fd:d8:6c:f9:4b:d5:81:73:e8:68:8d:aa:71:94: 7c:62:64:b5:e5:f4:70:4a:60:cd:0f:91:ec:57:21: ed:48:c8:ea:df:25:01:8c:d5:52:bb:32:69:4a:ee: 9b:db:8f:9f:3c:e5:07:c1:67:72:37:b1:61:23:e4: 5c:96:b4:9c:93:60:6c:14:44:5a:6b:30:95:ce:47: 63:8e:ad:f1:dd:75:b5:f2:e3:4f:48:d8:a1:d3:eb: e1:98:17:eb:be:73:92:ed:a7:4a:c1:cb:94:37:50: a8:b5:77:da:ae:b5:c9:82:68:3f:83:69:57:fc:dc: 5d:82:c4:47:2b:20:5d:03:39:05:a7:c0:ec:97:2d: c4:69:f8:ae:2d:28:e4:7d:db:b9:06:43:e6:39:97: 4c:b4:73:90:ec:64:02:10:d4:7b:ec:3d:44:f0:17: 1c:d9:d1:24:33:d5:5b:06:7f:84:c9:b4:01:1c:bc: b5:01:31:8a:fc:b7:43:ea:11:d8:50:ef:6a:69:f3: e8:09:e9:6b:d7:d5:8f:2b:d8:0e:72:6c:d1:84:2c: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6D:63:3E:7B:81:AF:39:44:A2:3D:47:98:10:36:20:D9:77:8D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4f:e4:ee:e5:08:38:ab:26:76:4f:7d:1f:5a:c0:5b:2b:a5: b7:6b:65:e5:08:16:25:02:be:3b:1b:df:69:07:75:e7:a0:69: 20:d8:c1:86:e1:d3:46:97:48:fe:20:d3:1c:e6:dd:c7:12:6c: b1:46:e7:a2:61:31:9f:32:8d:22:4c:f1:ea:5f:37:bd:56:7a: 46:cb:e6:d8:3c:e7:fe:97:62:7e:f1:a8:57:37:e3:50:34:08: 13:0b:9c:94:2c:ea:84:da:d9:15:c4:29:85:a8:20:e0:c6:e6: d5:5c:56:c1:67:fa:2c:92:85:1a:00:bc:64:63:8d:6a:84:d7: 85:b1:f6:d6:8b:78:60:1c:96:10:e1:b5:7b:9c:5b:70:52:99: 29:7e:fb:36:3a:8a:8e:4d:d8:16:67:fe:8c:b1:ee:56:3a:b4: 73:87:68:d4:f3:f7:1b:6a:c0:16:b6:95:c4:58:72:2a:cc:e2: 04:48:d5:a3:ce:e8:78:61:01:16:fc:42:21:b3:fb:2f:8d:e9: 65:68:f3:14:79:4b:3d:3b:1e:77:c9:e2:80:fb:64:1a:42:e9: 60:2d:7b:7e:07:0c:4b:84:9b:c2:33:92:ad:ec:4e:2e:ef:fc: c0:db:87:cd:09:19:c4:a7:7f:2f:1c:db:d0:52:43:99:97:1c: 9e:ff:5b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7YzxYrVLDZRJlt3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMxODE5MjYyOFoXDTI1MDYxNjE5MjYyOFowLzEtMCsGA1UEAxMk ZTNmN2YzZmYtMDJiMS00ODQ5LTliYTktOTk2ZGVmOTc4YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxh9rNwlippeqHZto97QOI7cuAw+WP1rpiiu aSG10szrrEAhM1AaGt6y9eUD/dhs+UvVgXPoaI2qcZR8YmS15fRwSmDND5HsVyHt SMjq3yUBjNVSuzJpSu6b24+fPOUHwWdyN7FhI+RclrSck2BsFERaazCVzkdjjq3x 3XW18uNPSNih0+vhmBfrvnOS7adKwcuUN1CotXfarrXJgmg/g2lX/NxdgsRHKyBd AzkFp8Dsly3EafiuLSjkfdu5BkPmOZdMtHOQ7GQCENR77D1E8Bcc2dEkM9VbBn+E ybQBHLy1ATGK/LdD6hHYUO9qafPoCelr19WPK9gOcmzRhCyHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5tYz57ga85RKI9R5gQNiDZd40WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTFhZmFiMTAtZjU5Yy0z MTNiLWIyNWItNGRjNTkyYTI1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5P5O7lCDirJnZPfR9awFsrpbdrZeUIFiUCvjsb32kHdeegaSDYwYbh 00aXSP4g0xzm3ccSbLFG56JhMZ8yjSJM8epfN71WekbL5tg85/6XYn7xqFc341A0 CBMLnJQs6oTa2RXEKYWoIODG5tVcVsFn+iyShRoAvGRjjWqE14Wx9taLeGAclhDh tXucW3BSmSl++zY6io5N2BZn/oyx7lY6tHOHaNTz9xtqwBa2lcRYcirM4gRI1aPO 6HhhARb8QiGz+y+N6WVo8xR5Sz07HnfJ4oD7ZBpC6WAte34HDEuEm8Izkq3sTi7v /MDbh80JGcSnfy8c29BSQ5mXHJ7/W+A= -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:08 2025 by rpki-client