$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa File: 0c0f1667-bdd4-3810-ab75-9771278ab789.roa (raw, json) Hash identifier: hRv0i5VkG1I5Gqiemf+C5xlKilGU7cWoyPMt/j5yM5Q= Subject key identifier: 76:DB:AE:34:90:B1:DB:7A:22:AB:13:56:19:DC:55:CF:C5:F6:DB:63 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849393E76459917EF5748669000 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 31898 IP address blocks: 68.64.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:76:45:99:17:ef:57:48:66:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=aa093093-733c-43eb-8e9a-34f5e1e22b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:01:2a:65:74:ce:8d:75:69:ac:73:5e:e0: 1f:bf:6b:01:96:c7:47:7c:f8:71:d0:36:0a:c3:c2: 99:58:02:c9:82:22:cb:77:63:28:16:95:c3:0e:14: 3c:88:ce:04:d0:a8:8e:59:a9:ed:88:90:db:0e:c0: 65:a2:43:22:b3:91:a4:b6:39:71:7d:19:93:11:e2: 14:bc:85:7b:f1:f4:75:c9:62:1f:bf:68:3c:44:61: cb:79:18:d2:7c:c5:90:8e:c9:a0:3a:89:cf:24:31: 54:13:2a:d4:d7:e8:78:c2:98:f1:8a:b1:4b:4f:20: 64:70:61:67:1a:fa:17:12:f3:12:0e:7b:22:96:43: 8a:f9:49:f7:63:15:e7:36:26:b9:3c:77:79:3c:d3: 84:7a:75:25:66:34:36:63:9c:75:d9:9e:5c:82:97: 24:18:62:ac:aa:2b:20:2e:51:3e:86:d4:f1:6c:74: 11:e0:66:e9:6d:ff:55:9d:15:d0:b6:3c:64:96:f1: ad:86:6b:d1:be:16:a9:9e:9d:7b:c8:6d:39:5d:d9: 5a:f4:33:fe:7d:a5:f2:5e:47:3e:f7:f7:12:10:69: 03:c2:f4:7a:66:a5:b1:3e:39:5e:5b:32:d7:6d:29: 02:92:12:c2:e4:f4:50:36:a4:e8:5e:4c:9a:c6:1d: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DB:AE:34:90:B1:DB:7A:22:AB:13:56:19:DC:55:CF:C5:F6:DB:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4b:d4:ee:fb:6a:bd:33:32:47:0a:ef:f5:b5:94:b9:f5:56: 67:c8:5e:be:2c:f6:28:ba:7c:63:fb:88:60:0b:07:1c:16:a2: 02:9d:69:9a:7a:36:40:9f:77:c1:0b:94:5b:ef:d6:b3:cf:b2: 6b:fb:7c:c7:91:f2:20:65:03:f2:0c:6f:a2:42:a5:ab:1a:fd: 7f:9c:8a:7f:b3:77:4a:cb:2a:b9:4c:2c:52:c3:7e:4c:5d:67: 0e:ae:e7:89:35:d7:69:8d:0c:1d:ee:76:91:6d:fb:f4:10:26: b0:ed:1a:5a:af:09:73:e3:89:fb:ce:71:17:01:06:06:aa:20: b2:0d:4d:35:45:79:04:ac:6f:e0:5a:10:9e:61:ac:ab:31:fa: 5f:33:60:e3:b4:82:ca:7f:e7:2d:11:6c:58:ee:d6:a4:cc:1e: c8:d0:76:d5:52:ac:7a:81:dc:36:5e:7a:b4:16:3a:0e:e0:0b: d3:ed:6b:1a:ec:cf:c0:9c:21:3e:65:07:f9:f1:83:27:f8:af: ac:bb:4e:5c:dd:41:ec:7e:a3:8d:16:a3:6a:94:9d:a5:c9:76: da:b0:75:7d:44:8e:1f:04:1a:0a:a2:54:c2:16:87:70:51:5e: 70:c8:79:bd:65:19:08:47:5f:1f:ff:cd:59:7e:84:18:83:49: 0b:72:f9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnZFmRfvV0hmkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk YWEwOTMwOTMtNzMzYy00M2ViLThlOWEtMzRmNWUxZTIyYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs94BKmV0zo11aaxzXuAfv2sBlsdHfPhx0DYK w8KZWALJgiLLd2MoFpXDDhQ8iM4E0KiOWantiJDbDsBlokMis5GktjlxfRmTEeIU vIV78fR1yWIfv2g8RGHLeRjSfMWQjsmgOonPJDFUEyrU1+h4wpjxirFLTyBkcGFn GvoXEvMSDnsilkOK+Un3YxXnNia5PHd5PNOEenUlZjQ2Y5x12Z5cgpckGGKsqisg LlE+htTxbHQR4Gbpbf9VnRXQtjxklvGthmvRvhapnp17yG05Xdla9DP+faXyXkc+ 9/cSEGkDwvR6ZqWxPjleWzLXbSkCkhLC5PRQNqToXkyaxh2U5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbbrjSQsdt6IqsTVhncVc/F9ttjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMGMwZjE2NjctYmRkNC0z ODEwLWFiNzUtOTc3MTI3OGFiNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5L1O77ar0zMkcK7/W1lLn1VmfIXr4s9ii6fGP7iGALBxwWogKdaZp6 NkCfd8ELlFvv1rPPsmv7fMeR8iBlA/IMb6JCpasa/X+cin+zd0rLKrlMLFLDfkxd Zw6u54k112mNDB3udpFt+/QQJrDtGlqvCXPjifvOcRcBBgaqILINTTVFeQSsb+Ba EJ5hrKsx+l8zYOO0gsp/5y0RbFju1qTMHsjQdtVSrHqB3DZeerQWOg7gC9Ptaxrs z8CcIT5lB/nxgyf4r6y7TlzdQex+o40Wo2qUnaXJdtqwdX1Ejh8EGgqiVMIWh3BR XnDIeb1lGQhHXx//zVl+hBiDSQty+fs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:08 2025 by rpki-client