$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa File: 272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa (raw, json) Hash identifier: napamJqUSM/8BfM9tjJYT9fuVRUj6B8gkQ1J643EI64= Subject key identifier: 80:1C:A2:96:50:DE:65:3E:F6:87:03:A1:5A:5B:D4:FC:72:75:D3:A3 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858493C091C944B883B8AABED1460 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 14500 IP address blocks: 68.70.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1c:94:4b:88:3b:8a:ab:ed:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=d7743f88-02ff-4710-99e3-b701f1ec8a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:90:8d:35:d2:4d:46:bb:97:b1:22:e5:0c:e4: 1c:41:f9:2a:e3:05:3f:ee:be:a5:99:71:3c:9a:54: 52:e5:74:34:ee:ce:a1:78:e5:b4:bb:62:90:7c:2f: e1:19:f7:77:fa:26:e8:8e:d5:9a:f0:52:20:fe:f4: 1c:3a:7f:0d:c8:8a:d9:d1:3a:32:02:cb:4f:16:04: c2:5b:a1:2a:23:48:e2:b5:a7:43:18:3e:5c:13:e4: 1e:65:73:79:fd:95:36:fd:2f:14:3d:de:36:c4:fe: 24:7f:c1:fa:a7:37:90:0f:2c:e7:01:39:be:98:95: 14:80:a3:12:b0:7b:a3:05:6b:d8:4a:84:7e:0d:47: ea:aa:ff:a9:4d:41:e9:70:3e:b2:85:3e:0f:6f:d8: 45:06:aa:80:4b:bb:e1:26:d2:9a:b6:c2:32:87:bb: cc:48:7d:95:61:b9:ae:e4:b6:89:ca:96:c9:b7:fe: 09:61:fe:45:3b:40:ba:6a:4c:a6:be:cd:aa:4b:77: 46:f7:a5:fe:81:25:2b:05:1a:80:6b:0c:b0:fd:9d: f0:5f:1d:f5:87:a7:0f:c6:31:67:d8:ee:1d:22:c8: 1d:10:67:34:4e:10:4f:ab:bc:66:72:d1:eb:a2:36: e2:10:31:a2:70:1b:12:86:3c:3c:e9:eb:ea:0a:55: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:A2:96:50:DE:65:3E:F6:87:03:A1:5A:5B:D4:FC:72:75:D3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:18:32:67:05:72:e3:52:02:ce:19:10:a1:8d:7e:4d:61:ee: 24:a5:d0:4f:74:a9:f5:b5:da:04:28:86:69:f3:4f:0f:42:36: 4e:0b:9a:16:fb:69:ef:0b:3c:db:b2:a0:2a:28:7b:74:13:9a: 41:19:76:eb:40:9d:b5:8a:83:85:20:53:21:61:93:b5:fc:2e: 06:82:3f:4c:9b:f9:0f:32:92:ee:11:36:ac:4a:bf:7a:2b:38: 72:5e:30:5e:b1:2e:8d:7a:c8:45:78:06:48:65:e5:08:e4:2b: fe:0a:8b:56:96:3a:96:4c:6c:d2:46:95:1d:0e:2f:3d:04:59: ec:17:bb:70:76:b4:2d:38:08:59:f0:71:a7:78:76:8b:36:61: b3:76:4a:af:93:29:0b:1b:1c:8b:96:b2:04:24:49:0e:80:81: 60:1d:df:8c:6e:99:09:62:b7:31:a3:61:32:61:89:f9:6d:a8: ae:47:9c:3f:a4:0b:fa:c6:33:9b:f4:6d:84:28:22:dd:80:d1: c1:35:fe:fd:19:9f:0d:1c:af:a4:e8:9a:90:54:c8:96:f7:76: 02:47:22:d2:ca:b0:43:a4:39:e3:df:8b:c7:66:d4:c1:96:cd: a4:7f:ce:23:df:56:b2:d5:ed:e5:df:09:80:fa:e7:1b:27:dd: e0:d1:5a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CRyUS4g7iqvtFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDc3NDNmODgtMDJmZi00NzEwLTk5ZTMtYjcwMWYxZWM4YTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJCNNdJNRruXsSLlDOQcQfkq4wU/7r6lmXE8 mlRS5XQ07s6heOW0u2KQfC/hGfd3+ibojtWa8FIg/vQcOn8NyIrZ0ToyAstPFgTC W6EqI0jitadDGD5cE+QeZXN5/ZU2/S8UPd42xP4kf8H6pzeQDyznATm+mJUUgKMS sHujBWvYSoR+DUfqqv+pTUHpcD6yhT4Pb9hFBqqAS7vhJtKatsIyh7vMSH2VYbmu 5LaJypbJt/4JYf5FO0C6akymvs2qS3dG96X+gSUrBRqAawyw/Z3wXx31h6cPxjFn 2O4dIsgdEGc0ThBPq7xmctHrojbiEDGicBsShjw86evqClVMUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAcopZQ3mU+9ocDoVpb1PxyddOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjcyZTNkNzItZjQyYi0z OTRkLWEyYWMtNDhhYzNlMDUwYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoYMmcFcuNSAs4ZEKGNfk1h7iSl0E90qfW12gQohmnzTw9CNk4Lmhb7 ae8LPNuyoCooe3QTmkEZdutAnbWKg4UgUyFhk7X8LgaCP0yb+Q8yku4RNqxKv3or OHJeMF6xLo16yEV4Bkhl5QjkK/4Ki1aWOpZMbNJGlR0OLz0EWewXu3B2tC04CFnw cad4dos2YbN2Sq+TKQsbHIuWsgQkSQ6AgWAd34xumQlitzGjYTJhifltqK5HnD+k C/rGM5v0bYQoIt2A0cE1/v0Znw0cr6TompBUyJb3dgJHItLKsEOkOePfi8dm1MGW zaR/ziPfVrLV7eXfCYD65xsn3eDRWnY= -----END CERTIFICATE-----Generated at Sat Apr 12 14:58:40 2025 by rpki-client