$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa File: 676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa (raw, json) Hash identifier: ax6rv0ROyi05cCCxNrdPE+F8Oh0s6RMKwJtf67IBhlk= Subject key identifier: 1E:94:FE:DA:03:EC:BD:F1:F6:A8:B0:2A:A6:AA:2A:1C:ED:0C:D1:A8 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1CC39FA032B5632570580 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 14065 IP address blocks: 68.168.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:cc:39:fa:03:2b:56:32:57:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=bdeb09ff-d854-4d77-986c-912a57012f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:7e:28:ea:d7:15:47:96:e8:68:19:66:4c: b6:03:2e:2c:8b:46:60:bc:d6:44:35:8f:55:4e:52: 20:36:fd:4f:68:3c:34:8d:9c:98:87:7c:69:19:3a: 2c:ff:53:09:12:82:ac:d1:8e:f7:01:42:49:e0:4d: 0f:d6:a9:03:2a:d4:03:01:fa:7c:a1:af:24:5b:94: 32:39:c4:b6:a3:b1:0a:18:62:96:65:2b:82:f2:89: 56:d5:4e:04:f6:63:4e:b9:9d:72:e3:5e:ad:ec:05: 57:ef:c1:7a:0f:4c:cf:eb:d3:a2:35:60:21:1d:f6: 3e:57:a6:a1:29:21:c0:92:61:67:09:56:41:89:ca: b9:f0:a7:18:50:77:e0:1e:ba:26:ba:f1:a1:87:03: cd:41:82:50:0c:6e:ff:c5:57:a6:10:92:36:22:b3: 95:0d:26:41:c4:57:1f:69:ce:c3:53:18:90:cb:a6: 64:2c:cb:e6:5d:b0:fb:f1:1d:9b:13:e4:14:4d:c0: a6:ec:fb:68:6b:da:8e:9e:e0:ca:39:cc:b7:76:00: 5e:6f:a0:35:10:32:5c:7b:e9:d4:cc:37:a5:be:a9: ea:7d:5d:76:f8:cb:f4:75:2b:0d:5f:ea:78:84:fd: 75:26:6f:2d:de:17:ef:d1:32:fc:24:53:75:ea:c1: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:FE:DA:03:EC:BD:F1:F6:A8:B0:2A:A6:AA:2A:1C:ED:0C:D1:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 68.168.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dc:f6:0f:b5:57:03:2e:ed:ab:f8:13:b6:c0:7a:d6:75:ed: a0:17:52:c1:8b:16:3a:f9:ad:c4:64:d3:32:aa:91:3c:d7:4d: b9:59:a7:4f:92:d6:17:d8:4f:10:cc:ac:7a:c9:1f:35:61:c5: df:d6:31:63:3a:bc:16:f2:12:2e:24:d1:13:11:c8:23:f2:05: f6:dc:be:02:fa:87:79:17:54:c9:8a:e9:82:1b:dd:62:a8:02: e1:2e:28:20:b4:ef:a0:cb:15:84:1d:46:d8:fe:16:ef:5f:14: ab:6f:67:ff:42:89:ca:d5:7c:ec:81:98:fe:36:e4:1d:52:93: 3b:0b:36:f6:c0:e7:87:a7:be:18:ce:cd:c4:c9:4f:15:c5:bd: 78:89:35:49:78:54:08:75:2b:30:1a:88:bc:e6:5d:64:39:42: 37:af:52:23:51:b3:9b:fc:e2:17:b7:71:4c:75:17:a9:ec:d3: 76:96:e2:d6:e1:5a:54:5f:12:e8:e7:c3:29:bc:28:54:c0:21: d3:b9:f7:7c:57:3c:15:e7:dc:87:4c:e7:be:d5:28:e1:d2:56: bc:25:7a:f1:f1:81:62:b0:f5:35:a3:1d:b4:39:f4:84:1e:dd: 16:4d:03:47:3f:67:9d:9c:fd:d6:05:97:09:20:3b:27:74:e0: d8:e5:06:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0cw5+gMrVjJXBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YmRlYjA5ZmYtZDg1NC00ZDc3LTk4NmMtOTEyYTU3MDEyZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovJ+KOrXFUeW6GgZZky2Ay4si0ZgvNZENY9V TlIgNv1PaDw0jZyYh3xpGTos/1MJEoKs0Y73AUJJ4E0P1qkDKtQDAfp8oa8kW5Qy OcS2o7EKGGKWZSuC8olW1U4E9mNOuZ1y416t7AVX78F6D0zP69OiNWAhHfY+V6ah KSHAkmFnCVZBicq58KcYUHfgHromuvGhhwPNQYJQDG7/xVemEJI2IrOVDSZBxFcf ac7DUxiQy6ZkLMvmXbD78R2bE+QUTcCm7Ptoa9qOnuDKOcy3dgBeb6A1EDJce+nU zDelvqnqfV12+Mv0dSsNX+p4hP11Jm8t3hfv0TL8JFN16sHn0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6U/toD7L3x9qiwKqaqKhztDNGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjc2OTkxYTctZDJiNi0z ZDRmLWJjNjgtNWRkMmRlZDA2NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjc9g+1VwMu7av4E7bAetZ17aAXUsGLFjr5rcRk0zKqkTzXTblZp0+S 1hfYTxDMrHrJHzVhxd/WMWM6vBbyEi4k0RMRyCPyBfbcvgL6h3kXVMmK6YIb3WKo AuEuKCC076DLFYQdRtj+Fu9fFKtvZ/9CicrVfOyBmP425B1SkzsLNvbA54envhjO zcTJTxXFvXiJNUl4VAh1KzAaiLzmXWQ5QjevUiNRs5v84he3cUx1F6ns03aW4tbh WlRfEujnwym8KFTAIdO593xXPBXn3IdM577VKOHSVrwlevHxgWKw9TWjHbQ59IQe 3RZNA0c/Z52c/dYFlwkgOyd04NjlBtA= -----END CERTIFICATE-----Generated at Tue Apr 29 01:58:29 2025 by rpki-client