$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa File: babed18c-2177-38a5-9603-73cb0b55a6ec.roa (raw, json) Hash identifier: TNRUYgVHP6MshZETknHlN1r4cfTh76SkebJz9cnkph0= Subject key identifier: B6:58:0A:F6:6E:82:83:FF:84:B1:04:AF:28:1D:F7:F9:43:4A:2A:71 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F43285849D16508CE38BC2228CE6C2CA0 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 11650 IP address blocks: 68.235.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:08:ce:38:bc:22:28:ce:6c:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=0592c062-e5cc-4403-8185-a75b3460fd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3f:4e:e1:95:85:75:91:c1:e6:29:ae:0e:d8: 03:a4:91:4c:8d:b1:12:e3:3d:ab:eb:39:b3:5f:18: 0a:4b:8d:e0:70:bd:99:63:70:19:ef:3c:b5:86:60: 4c:80:15:06:68:9c:51:65:c0:13:0d:2a:f8:f0:a1: c7:5d:34:6c:2d:cf:df:64:e8:31:44:4a:cc:e8:81: 44:0b:fb:0b:bb:65:fa:9b:15:03:34:11:b8:c6:77: 5f:26:3e:2a:5a:03:b4:fc:bc:d6:1c:a5:44:78:f0: 2d:e6:26:a0:fa:ed:e8:e4:d8:87:e9:7c:e5:e6:4c: 88:5b:60:e5:b1:79:c9:ff:77:1e:6c:05:95:d3:28: b1:95:0e:31:e5:5b:83:be:df:39:4a:b6:03:a4:36: 65:f5:ef:e5:b5:46:e8:4b:69:23:41:ee:08:a7:e2: 92:3e:67:ab:ec:9f:58:77:30:88:fb:63:66:9b:46: 61:81:28:27:9f:57:25:f8:6c:23:df:93:b9:a0:39: 85:56:ec:ac:10:91:12:3c:e3:a3:af:57:9f:69:f4: 76:d2:14:c2:fd:cd:41:b7:11:f0:7a:49:f1:5e:be: 68:f7:a4:13:be:da:76:25:9b:d8:e2:c5:fc:58:33: f3:a2:7a:82:53:98:76:1b:44:f6:ae:94:a8:c5:c5: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:58:0A:F6:6E:82:83:FF:84:B1:04:AF:28:1D:F7:F9:43:4A:2A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 68.235.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:33:e1:5b:de:28:9c:35:d2:7d:fd:bd:5f:40:2c:4b:a4:5a: e2:08:31:02:cf:02:eb:ea:07:89:01:fb:b6:04:f0:16:bb:9a: 85:c4:2c:50:2c:2f:e2:b8:d2:62:f7:6e:9f:dd:a6:66:ed:41: fa:81:a0:c0:34:65:24:25:89:e5:45:1a:44:9b:ca:59:09:18: 27:de:e0:c4:ae:4f:88:bb:78:3e:2e:fe:fa:84:71:34:48:4d: b4:9e:07:ec:d2:e8:a9:13:33:52:8c:e7:5b:c1:8d:aa:00:f9: 1f:6a:b0:5f:d5:bf:83:07:eb:c8:ae:08:a6:b8:f0:86:97:c9: 64:b7:26:be:2a:56:d6:ba:7f:bb:e3:3e:55:f9:dc:ef:19:bf: f8:06:91:48:44:81:ac:61:12:33:b1:fe:06:af:fd:20:9a:b1: f8:63:9d:ba:6a:4d:97:45:fd:fc:0f:f6:c3:63:87:67:a0:a1: 6e:29:d2:29:6e:d2:b3:69:d1:fc:8f:3e:ca:db:d4:79:37:de: 7c:23:2d:53:c1:c0:c9:ca:a2:dd:21:5d:ff:d1:dd:bb:f8:4f: 69:bc:35:12:2c:cd:69:e8:17:1b:08:fa:fc:ac:44:cf:03:fa: d5:a2:91:e7:60:bc:b1:65:9a:3f:11:41:7d:21:77:6d:a2:9d: 67:c6:da:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQjOOLwiKM5sLKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MDU5MmMwNjItZTVjYy00NDAzLTgxODUtYTc1YjM0NjBmZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj9O4ZWFdZHB5imuDtgDpJFMjbES4z2r6zmz XxgKS43gcL2ZY3AZ7zy1hmBMgBUGaJxRZcATDSr48KHHXTRsLc/fZOgxRErM6IFE C/sLu2X6mxUDNBG4xndfJj4qWgO0/LzWHKVEePAt5iag+u3o5NiH6Xzl5kyIW2Dl sXnJ/3cebAWV0yixlQ4x5VuDvt85SrYDpDZl9e/ltUboS2kjQe4Ip+KSPmer7J9Y dzCI+2Nmm0ZhgSgnn1cl+Gwj35O5oDmFVuysEJESPOOjr1efafR20hTC/c1BtxHw eknxXr5o96QTvtp2JZvY4sX8WDPzonqCU5h2G0T2rpSoxcU7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZYCvZugoP/hLEErygd9/lDSipxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYmFiZWQxOGMtMjE3Ny0z OGE1LTk2MDMtNzNjYjBiNTVhNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgz4VveKJw10n39vV9ALEukWuIIMQLPAuvqB4kB+7YE8Ba7moXELFAs L+K40mL3bp/dpmbtQfqBoMA0ZSQlieVFGkSbylkJGCfe4MSuT4i7eD4u/vqEcTRI TbSeB+zS6KkTM1KM51vBjaoA+R9qsF/Vv4MH68iuCKa48IaXyWS3Jr4qVta6f7vj PlX53O8Zv/gGkUhEgaxhEjOx/gav/SCasfhjnbpqTZdF/fwP9sNjh2egoW4p0ilu 0rNp0fyPPsrb1Hk33nwjLVPBwMnKot0hXf/R3bv4T2m8NRIszWnoFxsI+vysRM8D +tWikedgvLFlmj8RQX0hd22inWfG2lU= -----END CERTIFICATE-----Generated at Mon Jun 16 15:46:59 2025 by rpki-client