$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa File: fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa (raw, json) Hash identifier: ZqMAGqK0IpdPKbaqmcMg7YA32CNvxhzTCX8bAubBV4Q= Subject key identifier: D2:0F:49:79:36:98:87:A2:A2:AE:52:3B:E8:65:4D:F5:8B:90:B6:12 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584A2ABAE297C488FAD3078069C0 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 394285 IP address blocks: 68.68.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e2:97:c4:88:fa:d3:07:80:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=98c704b0-8035-40eb-b344-ab6d94b42c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:63:21:c8:d7:6a:78:6f:d7:99:bb:68:45: bc:55:2c:1b:72:c1:2a:58:32:7b:f3:b7:a8:68:33: 28:58:6c:da:3c:bd:c6:3d:60:c7:10:c4:bf:23:8b: 1a:36:fb:a3:57:b0:8b:d1:a6:7e:c5:9e:5d:5e:80: ab:59:c8:8a:fd:4f:60:36:4f:bc:3a:b5:5d:6f:a3: ee:ee:2e:95:30:47:2b:3e:03:58:99:7a:39:07:bb: 46:aa:6b:2e:32:8e:94:03:82:a2:02:28:b2:76:9d: 15:3a:da:4b:51:3a:ae:73:97:f8:48:e9:4d:10:ee: 0e:c7:67:0f:f9:f0:66:50:f1:46:6a:f2:1e:f1:9e: c3:ad:9a:de:ba:fe:c5:00:32:bf:d2:f3:86:2a:78: 77:63:5a:59:47:41:28:e0:65:8a:2e:71:ca:02:25: 12:73:af:b9:b9:f6:dd:56:35:92:90:51:dc:21:5c: d0:77:e6:cc:c1:2d:71:81:50:d6:56:31:27:c0:88: ac:27:f9:92:57:e8:94:33:e9:c8:cc:df:98:ab:1b: 72:50:f9:ce:7f:99:ea:cd:40:2e:54:63:c0:56:46: b2:22:96:79:89:70:29:0e:da:e3:dd:ba:a7:a1:8f: 42:4c:28:56:27:2d:b2:03:e9:b5:11:33:42:a9:42: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0F:49:79:36:98:87:A2:A2:AE:52:3B:E8:65:4D:F5:8B:90:B6:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a4:9a:a2:ba:7e:cd:3e:e9:8b:66:20:d8:fd:cb:58:08:f1: a4:4d:c1:4f:33:c1:4f:a6:01:de:74:c7:b5:b8:8a:25:0f:0e: d7:29:19:d0:58:8a:72:6c:ed:70:12:9a:f7:a6:81:a7:79:2e: 65:fd:bc:cb:4d:c7:e5:ae:3f:5e:14:c7:34:86:cc:62:c3:82: 3a:56:87:97:d7:f2:15:cb:96:54:d4:27:27:60:c5:f0:58:ca: 8b:b7:8f:46:df:44:ef:1a:4c:0b:bb:c5:01:18:b1:44:c6:0e: 16:8d:e0:fe:8b:d5:8e:a6:e1:1f:65:04:1f:f0:12:0a:70:7d: 54:b6:61:b7:20:4a:f5:49:6d:cf:42:e1:67:d3:99:a5:f9:ab: 37:79:f8:cc:37:77:06:67:ef:89:90:ab:98:1c:90:82:2e:1e: 31:71:a7:2a:ad:7c:2f:11:7f:0d:15:6f:0f:32:cf:87:2f:e8: a5:0d:1d:1d:d5:8b:d1:be:cd:d7:3a:6b:06:91:b2:9d:cd:45: 75:c9:8a:84:44:b8:d6:98:07:d6:59:1f:4b:72:d9:10:23:11: 39:6b:af:ce:b2:f2:dd:1b:8d:6d:41:7f:82:c9:c5:f5:52:d9: 67:85:cc:2d:6a:90:ce:fb:ec:69:db:ce:53:d0:7d:b5:2d:f6: 49:6b:70:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuKXxIj60weAacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OThjNzA0YjAtODAzNS00MGViLWIzNDQtYWI2ZDk0YjQyYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz1jIcjXanhv15m7aEW8VSwbcsEqWDJ787eo aDMoWGzaPL3GPWDHEMS/I4saNvujV7CL0aZ+xZ5dXoCrWciK/U9gNk+8OrVdb6Pu 7i6VMEcrPgNYmXo5B7tGqmsuMo6UA4KiAiiydp0VOtpLUTquc5f4SOlNEO4Ox2cP +fBmUPFGavIe8Z7DrZreuv7FADK/0vOGKnh3Y1pZR0Eo4GWKLnHKAiUSc6+5ufbd VjWSkFHcIVzQd+bMwS1xgVDWVjEnwIisJ/mSV+iUM+nIzN+YqxtyUPnOf5nqzUAu VGPAVkayIpZ5iXApDtrj3bqnoY9CTChWJy2yA+m1ETNCqUIr4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIPSXk2mIeioq5SO+hlTfWLkLYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZmRlMzQxMDctZjNiYi0z MDc2LWJjYWMtNGZiZmM4OGJjZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRESYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOkmqK6fs0+6YtmINj9y1gI8aRNwU8zwU+mAd50x7W4iiUPDtcpGdBY inJs7XASmvemgad5LmX9vMtNx+WuP14UxzSGzGLDgjpWh5fX8hXLllTUJydgxfBY you3j0bfRO8aTAu7xQEYsUTGDhaN4P6L1Y6m4R9lBB/wEgpwfVS2YbcgSvVJbc9C 4WfTmaX5qzd5+Mw3dwZn74mQq5gckIIuHjFxpyqtfC8Rfw0Vbw8yz4cv6KUNHR3V i9G+zdc6awaRsp3NRXXJioREuNaYB9ZZH0ty2RAjETlrr86y8t0bjW1Bf4LJxfVS 2WeFzC1qkM777GnbzlPQfbUt9klrcAk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:57:05 2025 by rpki-client