$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa File: cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa (raw, json) Hash identifier: PUHTrtMlFxwnEa/7ssr9gSWcyCqHioXLvwWRPfrV0nc= Subject key identifier: 33:D9:24:A0:AC:BE:EF:F7:B4:36:8B:89:CE:DD:CC:15:80:61:92:E6 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584A07D5341025F2EC5B52101260 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 1239 IP address blocks: 68.24.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:34:10:25:f2:ec:5b:52:10:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=6fb380e0-1826-4353-98fa-4d98c50d4edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:75:98:4b:19:eb:9c:02:ac:18:6e:49:ff: 3f:33:b1:2f:f7:4c:58:b0:f3:49:28:5a:3f:58:da: a1:a0:56:0e:31:34:50:e6:6c:c2:66:b6:fa:61:24: f8:5b:c0:d8:27:02:51:ab:d6:40:28:18:e2:97:5d: 91:e2:6e:ba:a6:d9:ec:f7:da:30:25:8a:de:57:89: 90:76:97:60:18:d1:95:fc:70:1c:4a:b1:c1:91:1b: c9:eb:23:6c:56:19:23:6f:da:1f:5d:ce:a0:33:44: 3d:4d:38:df:53:52:ce:65:00:ed:06:de:1f:9e:bc: a9:8f:a3:4c:b3:92:41:07:9d:fa:b8:b9:ab:9d:5e: 72:42:70:4f:e2:50:a6:4b:bc:c8:52:cb:8a:f5:9f: 27:7a:8b:2d:63:7c:bb:6d:e7:53:cd:2b:13:4a:a6: 3f:bb:64:50:16:44:97:01:b0:83:5b:52:8d:f3:51: 57:08:23:d5:b6:d2:c3:b7:b6:0d:2a:02:1b:66:05: 0c:a9:19:3e:11:50:b0:ea:48:40:2a:41:c6:49:56: 23:da:97:fa:28:b5:c3:a8:9e:4f:6c:53:71:93:f9: 77:1d:66:6d:90:44:69:82:bb:3f:fb:01:87:37:79: 43:74:28:fb:45:f7:32:49:88:e1:9a:55:dc:82:0c: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D9:24:A0:AC:BE:EF:F7:B4:36:8B:89:CE:DD:CC:15:80:61:92:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 68.24.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:a4:24:bb:d1:7b:42:03:ed:7b:84:a8:f7:49:88:7c:27:90: 1c:56:e6:3a:0d:f1:e1:e8:4d:a7:72:46:2f:16:9a:1c:7f:69: 4c:7f:d7:25:91:47:52:c3:19:f1:2f:f5:73:51:d6:d7:b1:5f: 75:70:7a:c0:0f:61:76:d9:8a:5c:e2:17:c3:18:07:19:a3:f2: ea:55:7e:af:94:28:84:57:c2:e2:23:07:1b:5e:14:99:12:88: 9c:aa:d4:d6:72:ae:d6:4d:fa:16:2c:64:8b:e9:1a:ef:7e:70: ea:96:ac:25:c6:54:e7:98:d0:59:2d:39:09:76:ba:ca:b0:f0: a1:ee:67:89:76:3b:a7:31:8f:40:1b:42:d4:69:ad:a5:bf:57: f9:10:cf:d0:31:32:91:30:8e:55:53:ff:20:a5:85:0c:71:39: 08:aa:a4:1a:c6:99:26:9d:7d:9c:98:3a:d0:d9:e4:9e:34:c1: 25:00:cf:10:ef:1b:1a:e0:42:24:6e:25:5f:3d:6a:56:ac:a5: 07:c1:ef:ad:77:13:d4:e1:27:0d:57:39:38:c8:46:13:17:ea: f2:60:db:40:1b:70:ae:cd:df:c4:29:a2:dd:14:9e:c4:e1:33: 83:15:73:31:08:67:11:77:9d:3c:d2:58:a3:9d:a6:a9:bc:bb: ac:4c:75:31 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoH1TQQJfLsW1IQEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NmZiMzgwZTAtMTgyNi00MzUzLTk4ZmEtNGQ5OGM1MGQ0ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBF1mEsZ65wCrBhuSf8/M7Ev90xYsPNJKFo/ WNqhoFYOMTRQ5mzCZrb6YST4W8DYJwJRq9ZAKBjil12R4m66ptns99owJYreV4mQ dpdgGNGV/HAcSrHBkRvJ6yNsVhkjb9ofXc6gM0Q9TTjfU1LOZQDtBt4fnrypj6NM s5JBB536uLmrnV5yQnBP4lCmS7zIUsuK9Z8neostY3y7bedTzSsTSqY/u2RQFkSX AbCDW1KN81FXCCPVttLDt7YNKgIbZgUMqRk+EVCw6khAKkHGSVYj2pf6KLXDqJ5P bFNxk/l3HWZtkERpgrs/+wGHN3lDdCj7RfcySYjhmlXcggydiwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDPZJKCsvu/3tDaLic7dzBWAYZLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2IzZWM0YzAtNjZjMy0z NjI1LWFlM2EtMzZhMWFjMzU2Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDRBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAy6Qku9F7QgPte4So90mIfCeQHFbmOg3x4ehNp3JGLxaaHH9pTH/XJZFH UsMZ8S/1c1HW17FfdXB6wA9hdtmKXOIXwxgHGaPy6lV+r5QohFfC4iMHG14UmRKI nKrU1nKu1k36Fixki+ka735w6pasJcZU55jQWS05CXa6yrDwoe5niXY7pzGPQBtC 1Gmtpb9X+RDP0DEykTCOVVP/IKWFDHE5CKqkGsaZJp19nJg60NnknjTBJQDPEO8b GuBCJG4lXz1qVqylB8HvrXcT1OEnDVc5OMhGExfq8mDbQBtwrs3fxCmi3RSexOEz gxVzMQhnEXedPNJYo52mqby7rEx1MQ== -----END CERTIFICATE-----Generated at Sun Jun 15 23:52:05 2025 by rpki-client