$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: VwqLF+mj3BDxr3goz5nLvdqzacv+Qxe6eZ7LyZVVyHc= Subject key identifier: 81:4D:9D:83:9E:CA:95:B2:F8:8B:80:A8:4F:BB:41:01:C4:95:EE:D4 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858493C091C61EB66F996D747AF80 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1c:61:eb:66:f9:96:d7:47:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=24a94522-01fd-48f6-ba42-3e3e8af37c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:f6:1b:a9:b6:53:e7:0d:24:c9:4d:d6:1a: 93:d3:70:56:41:25:9e:88:63:1c:48:0e:1d:af:40: eb:9d:98:61:f7:62:09:65:92:7f:57:47:28:cd:d0: 3c:c6:e7:57:f2:b8:2b:cc:be:67:c4:38:bb:b2:bf: 57:48:3b:b4:3b:89:81:71:3a:14:61:97:e9:2b:59: 9f:ad:9a:41:95:97:33:dd:14:e1:87:95:89:af:0f: 49:14:f3:aa:51:b5:93:bb:c4:c2:12:e4:a7:ea:18: c0:61:0c:2a:54:6e:43:3c:cb:bf:20:c9:e0:8e:3d: 85:ef:3d:af:02:8d:7f:fc:40:53:b5:22:b7:0a:49: 41:20:be:41:e0:c8:fd:b8:42:24:39:58:c2:99:c1: 47:49:76:05:41:de:48:5f:24:1a:40:8a:bb:1b:a4: a1:32:46:64:34:71:fa:5b:fc:be:a5:1a:38:a8:1f: 37:ab:db:f2:cb:67:f8:14:55:25:e0:a2:9f:58:08: a3:16:3e:fc:79:76:52:c4:db:7c:c2:2c:f5:97:98: 45:b2:c4:4b:c2:44:81:71:fc:5f:bc:3f:04:92:b5: d4:92:db:9e:c9:80:3e:fc:88:19:0b:97:16:5e:be: ff:77:00:8f:48:24:d8:3b:01:46:fe:0f:85:d3:ab: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4D:9D:83:9E:CA:95:B2:F8:8B:80:A8:4F:BB:41:01:C4:95:EE:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e3:3f:ae:d1:8a:ae:d0:1e:5f:5a:85:53:00:1e:f3:32:6b: fd:35:23:b7:5e:b8:46:47:4e:4f:d2:e7:d1:20:a4:29:db:0a: dd:44:2b:5f:0a:1f:30:1d:48:e4:b9:d3:11:12:fb:6c:7a:c1: ab:0c:2f:ab:53:37:9b:16:be:3f:6f:7d:ea:ca:a0:59:ed:0e: 4f:bf:19:50:7f:4e:d3:bb:2c:7d:9d:c2:54:bd:a3:43:47:2d: 5a:57:e3:e1:60:40:08:7f:f8:10:09:37:fe:d6:fd:2b:bb:fa: 68:f5:8f:ae:25:68:05:d6:e2:15:08:8e:30:86:f1:52:ca:cc: d2:00:66:79:ec:b3:4b:7a:f3:4c:f6:cb:4b:35:d1:09:ff:97: 18:cc:02:10:29:d9:33:03:dc:bf:aa:77:55:b5:08:8f:0c:f4: 6b:f9:15:43:7e:62:c8:50:9e:a7:a5:6e:f7:fe:f5:47:3c:91: d7:ef:72:d7:dd:0c:ad:64:e7:13:bc:6d:ec:39:51:50:36:e2: 1f:a9:a8:b4:ba:a9:c9:4e:5a:11:4c:b1:a3:02:55:8b:1a:5f: 75:e1:52:a4:63:21:b0:1e:bf:dd:f9:2e:58:b0:7c:88:88:a0: 93:f0:1c:b1:f7:19:e6:ca:50:d1:12:e0:86:ae:83:70:23:df: 09:88:e2:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CRxh62b5ltdHr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjRhOTQ1MjItMDFmZC00OGY2LWJhNDItM2UzZThhZjM3YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJn2G6m2U+cNJMlN1hqT03BWQSWeiGMcSA4d r0DrnZhh92IJZZJ/V0cozdA8xudX8rgrzL5nxDi7sr9XSDu0O4mBcToUYZfpK1mf rZpBlZcz3RThh5WJrw9JFPOqUbWTu8TCEuSn6hjAYQwqVG5DPMu/IMngjj2F7z2v Ao1//EBTtSK3CklBIL5B4Mj9uEIkOVjCmcFHSXYFQd5IXyQaQIq7G6ShMkZkNHH6 W/y+pRo4qB83q9vyy2f4FFUl4KKfWAijFj78eXZSxNt8wiz1l5hFssRLwkSBcfxf vD8EkrXUktueyYA+/IgZC5cWXr7/dwCPSCTYOwFG/g+F06s7YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFNnYOeypWy+IuAqE+7QQHEle7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXjP67Riq7QHl9ahVMAHvMya/01I7deuEZHTk/S59EgpCnbCt1EK18K HzAdSOS50xES+2x6wasML6tTN5sWvj9vferKoFntDk+/GVB/TtO7LH2dwlS9o0NH LVpX4+FgQAh/+BAJN/7W/Su7+mj1j64laAXW4hUIjjCG8VLKzNIAZnnss0t680z2 y0s10Qn/lxjMAhAp2TMD3L+qd1W1CI8M9Gv5FUN+YshQnqelbvf+9Uc8kdfvctfd DK1k5xO8bew5UVA24h+pqLS6qclOWhFMsaMCVYsaX3XhUqRjIbAev935LliwfIiI oJPwHLH3GebKUNES4Iaug3Aj3wmI4uk= -----END CERTIFICATE-----Generated at Sat Apr 12 15:22:43 2025 by rpki-client