$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa File: 3b366366-9247-34f6-b683-bc009512f354.roa (raw, json) Hash identifier: 4l8e96xhGzDmgHZZWQrsQLWQj+fJyXfAZpdS5Aa4gjo= Subject key identifier: E5:27:1B:6C:9E:8E:F8:10:D1:68:B5:32:5E:AE:F5:4A:91:3D:F9:AA Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858493C091C793BB678302DF39800 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 14500 IP address blocks: 68.70.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1c:79:3b:b6:78:30:2d:f3:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=8e46a55e-5947-4776-9b45-84fbbd46e8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:08:d7:b2:c0:da:38:02:39:be:a6:dc:e1: 22:9e:8a:77:a2:8b:30:8b:a1:ed:e8:d3:08:42:14: 0e:fd:ba:e2:df:94:e3:73:42:c7:7a:41:c3:66:25: e6:96:62:ca:ad:38:1a:85:6b:b5:6b:9e:38:d3:f9: 68:bb:6f:38:5d:fe:9c:b8:02:42:c7:a8:f6:39:d7: a2:f9:ef:1a:23:e8:0b:47:26:f5:60:c0:e2:11:78: e1:24:a0:c3:dc:95:1c:70:67:7c:ba:4c:b9:44:79: 6b:e9:82:95:c2:50:bf:67:8e:92:38:36:66:0d:e0: 7f:af:f0:9a:a7:3c:fc:d2:78:84:4a:b9:e8:46:26: 03:8b:d7:ae:8c:67:2f:4e:b2:2e:25:71:0d:7e:1d: 24:1c:0b:ff:31:45:98:31:5a:69:d5:2b:96:3f:19: 23:5d:8a:00:d1:2f:6d:89:29:6e:a1:91:5a:db:d2: 30:e5:35:72:6f:b5:a7:8b:cf:0d:7e:bd:55:9f:7c: 90:e4:a9:2c:f7:44:e3:4f:db:f2:49:94:06:cb:9f: 7e:67:6d:6e:e7:9b:78:d5:13:7f:f0:e9:e4:eb:bb: 16:c1:2e:83:f3:f5:a5:85:6e:a0:2b:49:41:54:a7: da:19:76:50:d0:e8:72:ae:b5:f8:b5:0c:e5:38:17: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:27:1B:6C:9E:8E:F8:10:D1:68:B5:32:5E:AE:F5:4A:91:3D:F9:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:75:a1:85:3e:92:46:1e:f2:a0:a8:95:46:f3:b7:78:f1:88: cb:a6:bd:99:70:95:ea:42:be:58:5c:16:82:45:46:ae:03:97: 07:b4:da:96:69:3c:63:b6:bc:91:1e:bc:db:cb:e2:57:58:a2: f0:fa:16:16:ae:44:a4:75:59:6c:e8:b9:e4:4d:05:8c:23:5b: ed:02:d5:f6:34:5a:8a:d9:eb:36:59:ec:80:12:99:28:bd:87: 6e:89:27:ba:06:30:80:e0:d7:8e:51:b6:6d:3a:18:09:67:51: 18:9b:ad:d7:cc:40:6c:85:54:54:3c:5f:9d:58:e1:5e:df:e2: 6f:23:46:af:a1:34:18:80:96:2c:2b:de:53:1c:62:78:df:ab: d8:c3:e1:47:77:cf:38:fd:d5:9f:7e:1b:5b:d1:29:db:a7:b9: 81:e0:ac:6a:72:f4:19:9f:d6:78:53:fd:46:57:74:c5:be:f3: 78:a0:83:e6:22:82:e6:49:4c:1e:ae:59:0c:28:aa:de:80:55: ae:d7:72:df:3a:49:55:8d:95:c6:f4:6b:e2:37:a7:8a:c9:32: 8b:9d:1c:a8:c4:24:da:e9:99:dc:e2:2a:56:bc:31:4e:8c:76: 8d:4c:49:b5:69:ea:15:5f:3c:fd:79:81:70:d0:2a:af:c2:5c: 11:37:19:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CRx5O7Z4MC3zmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OGU0NmE1NWUtNTk0Ny00Nzc2LTliNDUtODRmYmJkNDZlOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuegI17LA2jgCOb6m3OEinop3ooswi6Ht6NMI QhQO/bri35Tjc0LHekHDZiXmlmLKrTgahWu1a5440/lou284Xf6cuAJCx6j2Odei +e8aI+gLRyb1YMDiEXjhJKDD3JUccGd8uky5RHlr6YKVwlC/Z46SODZmDeB/r/Ca pzz80niESrnoRiYDi9eujGcvTrIuJXENfh0kHAv/MUWYMVpp1SuWPxkjXYoA0S9t iSluoZFa29Iw5TVyb7Wni88Nfr1Vn3yQ5Kks90TjT9vySZQGy59+Z21u55t41RN/ 8Onk67sWwS6D8/WlhW6gK0lBVKfaGXZQ0OhyrrX4tQzlOBemNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUnG2yejvgQ0Wi1Ml6u9UqRPfmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvM2IzNjYzNjYtOTI0Ny0z NGY2LWI2ODMtYmMwMDk1MTJmMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF51oYU+kkYe8qColUbzt3jxiMumvZlwlepCvlhcFoJFRq4Dlwe02pZp PGO2vJEevNvL4ldYovD6FhauRKR1WWzoueRNBYwjW+0C1fY0WorZ6zZZ7IASmSi9 h26JJ7oGMIDg145Rtm06GAlnURibrdfMQGyFVFQ8X51Y4V7f4m8jRq+hNBiAliwr 3lMcYnjfq9jD4Ud3zzj91Z9+G1vRKdunuYHgrGpy9Bmf1nhT/UZXdMW+83igg+Yi guZJTB6uWQwoqt6AVa7Xct86SVWNlcb0a+I3p4rJMoudHKjEJNrpmdziKla8MU6M do1MSbVp6hVfPP15gXDQKq/CXBE3GXM= -----END CERTIFICATE-----Generated at Sat Apr 12 15:28:27 2025 by rpki-client