$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa File: b00b53ed-db98-3d02-883b-21a1dc38e020.roa (raw, json) Hash identifier: QXc7N8qZAJ/v/6EzALnFNDCqnIl/rpk0rZiLw1h2vUM= Subject key identifier: 13:61:23:18:78:43:EF:22:3C:B4:F4:FA:84:E9:E7:F6:67:DA:C4:1D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858492CAE98666D15D25421BCD300 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 30238 IP address blocks: 68.232.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:98:66:6d:15:d2:54:21:bc:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4774b6b2-d8f8-408a-8124-ed6362bc792d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:e0:84:09:fd:51:d1:9c:18:81:81:9a:e1: 6a:9e:da:14:e0:83:a2:7b:ca:fd:90:47:57:64:37: 36:9b:f5:03:9d:41:33:e6:5e:ee:ce:44:3a:d4:1b: bc:23:92:be:9c:c5:c6:67:80:2a:62:37:dd:c0:5d: 70:d1:e8:89:8b:12:66:d3:40:72:7d:ec:07:90:9e: 8d:d0:9c:1b:32:15:c2:05:ec:48:54:65:a0:5d:34: 0c:ce:30:88:02:df:87:db:5e:8d:55:33:3e:5f:ea: 71:72:98:18:b5:9d:ec:12:a1:52:4d:8f:6d:19:49: f7:55:d5:0f:70:da:0f:35:6b:82:c2:c9:9b:1a:c9: 58:50:13:b3:bd:96:53:93:3f:d1:71:32:f1:25:b7: 5e:9a:24:8f:df:49:c9:63:1b:bb:1f:17:34:03:77: 57:92:64:1b:31:54:e8:30:e0:67:bb:da:3f:f2:b5: 49:1d:a3:07:c7:54:58:47:c3:88:82:e2:e5:7e:03: 68:3d:a9:57:55:01:f6:72:81:82:5a:cb:50:4d:25: ac:f7:2a:de:bb:ad:26:75:4b:ef:9f:fc:0c:98:5e: 74:bc:63:89:15:fc:46:e8:64:86:4e:d2:d0:ea:3c: c8:02:96:90:b7:91:15:69:66:48:ea:52:6d:d0:b3: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:61:23:18:78:43:EF:22:3C:B4:F4:FA:84:E9:E7:F6:67:DA:C4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:75:26:2e:fe:8d:02:b7:40:fc:a6:90:d6:8e:ce:80:0b:b2: a8:61:4a:c0:07:35:1b:bd:2d:f1:de:ba:4a:81:60:ff:64:ee: 38:7a:fe:14:f2:4e:ba:32:94:b8:a2:99:a7:ba:99:87:36:e4: 79:76:9d:52:35:8c:3a:e4:0a:8c:6a:06:08:4b:1e:80:41:86: 76:e3:7f:b6:7c:2f:e7:25:99:ea:60:be:c5:70:1a:d8:16:1f: 5b:5e:88:ab:af:d3:ed:ef:56:a4:21:1d:9f:a9:0d:94:cd:b2: d0:77:4e:18:db:0a:4a:5d:77:bc:86:ce:ee:db:30:6f:27:5e: a2:c6:55:a5:3a:eb:ad:31:50:b0:5b:5f:b1:37:00:a5:52:05: d0:9c:6f:8d:ea:5f:eb:5d:e5:34:7b:f9:04:13:e0:db:f2:6d: b6:c0:90:ab:9c:50:7d:02:ba:0e:0b:51:92:93:31:60:cf:51: 33:41:41:f7:2c:fa:da:dc:74:6a:26:70:26:47:ec:03:f7:40: f8:5f:03:a3:f5:25:f0:39:2a:6e:4b:d7:4a:fc:0b:23:cd:e8: 77:63:50:61:8d:54:1e:81:47:29:55:67:da:96:1c:ff:e9:f4: e6:38:d3:bc:e1:35:12:09:34:85:b6:e5:ad:d1:1d:7e:41:b8: 94:63:50:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrphmbRXSVCG80wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDc3NGI2YjItZDhmOC00MDhhLTgxMjQtZWQ2MzYyYmM3OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5TghAn9UdGcGIGBmuFqntoU4IOie8r9kEdX ZDc2m/UDnUEz5l7uzkQ61Bu8I5K+nMXGZ4AqYjfdwF1w0eiJixJm00ByfewHkJ6N 0JwbMhXCBexIVGWgXTQMzjCIAt+H216NVTM+X+pxcpgYtZ3sEqFSTY9tGUn3VdUP cNoPNWuCwsmbGslYUBOzvZZTkz/RcTLxJbdemiSP30nJYxu7Hxc0A3dXkmQbMVTo MOBnu9o/8rVJHaMHx1RYR8OIguLlfgNoPalXVQH2coGCWstQTSWs9yreu60mdUvv n/wMmF50vGOJFfxG6GSGTtLQ6jzIApaQt5EVaWZI6lJt0LO+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNhIxh4Q+8iPLT0+oTp5/Zn2sQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjAwYjUzZWQtZGI5OC0z ZDAyLTg4M2ItMjFhMWRjMzhlMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF51Ji7+jQK3QPymkNaOzoALsqhhSsAHNRu9LfHeukqBYP9k7jh6/hTy TroylLiimae6mYc25Hl2nVI1jDrkCoxqBghLHoBBhnbjf7Z8L+clmepgvsVwGtgW H1teiKuv0+3vVqQhHZ+pDZTNstB3ThjbCkpdd7yGzu7bMG8nXqLGVaU6660xULBb X7E3AKVSBdCcb43qX+td5TR7+QQT4NvybbbAkKucUH0Cug4LUZKTMWDPUTNBQfcs +trcdGomcCZH7AP3QPhfA6P1JfA5Km5L10r8CyPN6HdjUGGNVB6BRylVZ9qWHP/p 9OY407zhNRIJNIW25a3RHX5BuJRjUEM= -----END CERTIFICATE-----Generated at Sat Apr 12 01:36:27 2025 by rpki-client