$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa File: 3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa (raw, json) Hash identifier: tKJx4Mj7GDMVfuBAYarw05ftQ6wBFlytJMJaax/QyWk= Subject key identifier: DF:27:E2:F9:FD:43:6E:A1:C7:67:5F:6A:36:53:DC:C3:A8:6F:65:FC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BCBD2B22F75B1F7C8FC80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 68.232.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cb:d2:b2:2f:75:b1:f7:c8:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=aa3805b5-f4d4-49f4-8138-fff1c18cf39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:8a:65:86:ea:a4:71:89:48:35:e8:a9:35: bb:c0:38:2e:34:55:2e:6b:01:55:ec:6d:7a:62:0c: db:65:a7:e5:14:20:a8:3a:4c:a7:44:fd:c6:23:bb: 1b:20:45:c3:83:80:2a:cc:1a:b4:8e:28:89:2d:9b: a0:1c:56:c4:5c:82:54:71:69:d0:a1:ee:2d:3e:fe: ce:ea:8d:b0:58:bd:a5:d5:dc:91:4e:3c:73:86:d4: 7a:54:5c:48:29:05:61:79:01:7e:de:54:88:48:36: ab:cf:7f:08:1b:01:8b:88:44:f2:f5:82:2f:5d:cb: 64:67:c9:b9:99:0b:bc:cc:54:4d:fc:48:15:83:5d: 2d:ec:df:ce:53:c5:4c:c3:c7:61:35:20:1a:ef:19: 0d:1b:a1:12:2c:47:eb:b4:ad:85:51:37:61:69:c3: 57:c9:ec:26:64:92:9d:2d:fc:a4:c5:95:f1:02:4c: 06:dc:06:fc:29:c6:bb:c7:92:2b:3e:bb:df:d4:aa: 95:59:b1:64:3a:90:08:f5:5f:64:05:13:af:38:48: 35:bf:72:4b:17:41:61:b1:bf:8b:f3:0f:48:27:8e: 63:19:91:c4:93:84:5e:3f:5e:e4:d3:11:e8:f9:ee: 71:a7:6a:b5:7b:93:00:10:c7:ed:51:31:63:60:cb: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:E2:F9:FD:43:6E:A1:C7:67:5F:6A:36:53:DC:C3:A8:6F:65:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:68:5f:ee:68:5d:0a:71:5f:73:c4:10:7d:a3:f0:98:06:fc: fd:06:42:79:ef:b0:3b:b5:3a:85:03:53:91:6b:26:25:38:26: 79:8a:92:c3:7e:6d:9f:62:63:27:c9:4e:6a:31:45:76:c4:31: 7a:83:0f:d5:5b:34:38:fa:34:18:01:39:57:06:8e:37:c6:77: a2:10:cc:a6:0e:a6:7e:ce:3b:9b:9b:5d:a7:ed:04:d8:d8:cd: 83:cb:65:7a:0e:4d:e3:71:05:4b:66:ab:95:1c:47:ad:04:03: 0b:79:bb:4d:2e:c5:4b:55:02:07:96:b1:a9:40:ff:b7:ae:f9: 40:32:aa:b4:a9:5f:c0:1b:cf:ff:55:d9:76:ad:e6:a8:04:74: 11:49:17:68:d0:e1:96:8a:36:a6:0d:d6:92:e0:29:2c:77:ac: 0e:a4:23:09:60:46:d4:2f:05:46:39:23:3b:16:aa:fd:10:a6: 3b:3e:20:99:2c:ae:b3:a9:58:1c:87:ee:56:7b:3b:8d:24:f7: 9c:3b:c6:48:3b:7a:ea:a8:e3:88:74:83:c0:62:12:bc:f9:1e: 45:63:b5:10:48:ab:0f:06:34:de:38:eb:06:b2:85:b2:4c:36: 72:5d:0e:6f:f2:52:e9:43:34:d1:e7:9d:8e:12:e4:1c:2b:e2: cb:2b:4c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8vSsi91sffI/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YWEzODA1YjUtZjRkNC00OWY0LTgxMzgtZmZmMWMxOGNmMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt+KZYbqpHGJSDXoqTW7wDguNFUuawFV7G16 YgzbZaflFCCoOkynRP3GI7sbIEXDg4AqzBq0jiiJLZugHFbEXIJUcWnQoe4tPv7O 6o2wWL2l1dyRTjxzhtR6VFxIKQVheQF+3lSISDarz38IGwGLiETy9YIvXctkZ8m5 mQu8zFRN/EgVg10t7N/OU8VMw8dhNSAa7xkNG6ESLEfrtK2FUTdhacNXyewmZJKd LfykxZXxAkwG3Ab8Kca7x5IrPrvf1KqVWbFkOpAI9V9kBROvOEg1v3JLF0Fhsb+L 8w9IJ45jGZHEk4ReP17k0xHo+e5xp2q1e5MAEMftUTFjYMu7+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8n4vn9Q26hx2dfajZT3MOob2X8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2EzODk2NmUtMGJlNS0z Y2MzLTlhYTItNGNiMDg4M2JiYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1oX+5oXQpxX3PEEH2j8JgG/P0GQnnvsDu1OoUDU5FrJiU4JnmKksN+ bZ9iYyfJTmoxRXbEMXqDD9VbNDj6NBgBOVcGjjfGd6IQzKYOpn7OO5ubXaftBNjY zYPLZXoOTeNxBUtmq5UcR60EAwt5u00uxUtVAgeWsalA/7eu+UAyqrSpX8Abz/9V 2Xat5qgEdBFJF2jQ4ZaKNqYN1pLgKSx3rA6kIwlgRtQvBUY5IzsWqv0Qpjs+IJks rrOpWByH7lZ7O40k95w7xkg7euqo44h0g8BiErz5HkVjtRBIqw8GNN446wayhbJM NnJdDm/yUulDNNHnnY4S5Bwr4ssrTGI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:36:43 2025 by rpki-client