$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa File: 802e4f3e-477d-3343-b4df-4044a49cb54d.roa (raw, json) Hash identifier: o+9oEsiRFCL9ztTd/zStbyEJfPtbS35CXzfwuoYsd0s= Subject key identifier: 03:9E:A4:B2:DD:EB:F1:63:A7:6F:D9:3A:9A:D0:96:6B:27:B6:03:BF Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858493C091C4B1DD64B8FDC618B60 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 14500 IP address blocks: 68.70.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1c:4b:1d:d6:4b:8f:dc:61:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=70bd484b-ccff-4cc5-9a45-6d80c120186e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:f0:51:9f:79:2c:b7:7b:36:1c:fd:23:af: 59:b1:6b:00:0a:e7:5d:de:55:f3:f5:72:3e:47:95: 48:74:55:85:0c:05:6d:34:23:41:d7:da:83:1d:1b: 06:33:32:e1:c7:fe:90:08:89:d2:fb:cc:1f:2b:8c: 5f:ff:62:51:5c:9e:dd:a4:06:49:27:f5:fa:e9:6b: 13:e0:4c:ea:bd:09:43:b3:64:11:20:f2:da:5b:89: f7:8d:78:79:9f:70:14:b5:fc:93:56:14:5f:2a:ee: a9:f5:21:0d:a8:38:a5:dd:b0:c6:74:bd:46:42:8f: 8b:51:2e:d5:aa:b8:12:f1:10:9e:0e:f2:a7:d5:f4: 4b:4f:fc:71:69:f9:1c:39:86:34:d8:ee:9e:0d:57: e1:4e:0d:6b:ed:5b:7d:d2:9e:99:ea:b2:6f:80:07: 96:e2:8a:20:67:3e:0d:6c:03:40:e9:e8:50:f6:3f: 1c:5e:6a:1c:79:1f:80:bc:4e:66:ed:c7:62:14:80: c2:37:ff:6f:75:04:20:a3:35:ca:ec:24:a1:12:15: 8a:26:8f:d8:c8:26:1c:69:a1:7e:17:dd:5b:44:ff: 0c:5d:72:7e:66:bc:76:ce:d2:bf:af:be:55:86:a1: 93:06:27:53:83:82:3d:f9:42:df:ae:08:ba:c4:09: cb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:A4:B2:DD:EB:F1:63:A7:6F:D9:3A:9A:D0:96:6B:27:B6:03:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c7:10:0f:f4:f4:97:60:02:52:68:60:95:ac:8c:28:0d:a9: c8:11:b7:2f:2d:3e:9a:6d:e7:a8:4e:3e:27:91:32:e6:ce:65: 3e:b6:e9:64:bd:79:9d:e5:d6:f3:10:aa:b2:27:d5:92:e9:5c: c9:16:0f:05:7b:bd:8b:ca:a3:91:8f:4a:74:36:80:87:9c:a6: 5a:99:61:67:fb:39:22:de:e6:69:8c:97:76:8b:5e:64:b9:37: 3a:fb:ee:73:cf:9f:39:08:c0:f8:91:d3:ca:22:c8:3b:e6:20: 3a:74:83:db:f3:67:07:10:70:7a:06:6a:df:c0:93:af:8d:fe: da:53:b8:30:95:21:72:1c:6b:81:6f:4d:27:8c:5b:8a:2a:26: 79:d8:09:7b:71:f8:8f:5d:3f:46:d5:84:78:4a:ab:3a:98:f1: 92:21:6c:2e:93:96:bb:5f:24:e7:f3:f5:1e:56:90:ca:b1:05: a3:44:ff:5c:10:93:1e:08:28:d3:f2:b3:0e:93:2e:69:1f:c3: 29:41:d2:ac:6c:ea:04:c5:e5:ab:70:21:a1:63:50:96:a5:1a: d6:5b:ee:80:98:b1:83:28:25:c6:5e:ba:41:9b:f0:28:b4:f1: 8a:0f:f6:ff:e1:05:5f:87:11:ba:67:93:cf:74:6e:35:79:ac: 3e:e9:fe:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CRxLHdZLj9xhi2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NzBiZDQ4NGItY2NmZi00Y2M1LTlhNDUtNmQ4MGMxMjAxODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqfwUZ95LLd7Nhz9I69ZsWsACudd3lXz9XI+ R5VIdFWFDAVtNCNB19qDHRsGMzLhx/6QCInS+8wfK4xf/2JRXJ7dpAZJJ/X66WsT 4EzqvQlDs2QRIPLaW4n3jXh5n3AUtfyTVhRfKu6p9SENqDil3bDGdL1GQo+LUS7V qrgS8RCeDvKn1fRLT/xxafkcOYY02O6eDVfhTg1r7Vt90p6Z6rJvgAeW4oogZz4N bANA6ehQ9j8cXmoceR+AvE5m7cdiFIDCN/9vdQQgozXK7CShEhWKJo/YyCYcaaF+ F91bRP8MXXJ+Zrx2ztK/r75VhqGTBidTg4I9+ULfrgi6xAnLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOepLLd6/Fjp2/ZOprQlmsntgO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODAyZTRmM2UtNDc3ZC0z MzQzLWI0ZGYtNDA0NGE0OWNiNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7HEA/09JdgAlJoYJWsjCgNqcgRty8tPppt56hOPieRMubOZT626WS9 eZ3l1vMQqrIn1ZLpXMkWDwV7vYvKo5GPSnQ2gIecplqZYWf7OSLe5mmMl3aLXmS5 Nzr77nPPnzkIwPiR08oiyDvmIDp0g9vzZwcQcHoGat/Ak6+N/tpTuDCVIXIca4Fv TSeMW4oqJnnYCXtx+I9dP0bVhHhKqzqY8ZIhbC6TlrtfJOfz9R5WkMqxBaNE/1wQ kx4IKNPysw6TLmkfwylB0qxs6gTF5atwIaFjUJalGtZb7oCYsYMoJcZeukGb8Ci0 8YoP9v/hBV+HEbpnk890bjV5rD7p/uU= -----END CERTIFICATE-----Generated at Sat Apr 12 15:18:51 2025 by rpki-client