$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa File: 8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa (raw, json) Hash identifier: fwm0xuuxXiRsE9IXY/hGg66g9essBg+Ii69g+zsKyMY= Subject key identifier: E3:A9:97:B3:83:3C:A1:1F:5B:A9:C4:D0:AD:12:CC:82:82:F0:E2:F1 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584A10353F94C9139C53EFDCA3A0 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 399045 IP address blocks: 68.69.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3f:94:c9:13:9c:53:ef:dc:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=ef93dd0b-8add-4998-ab74-203898afdfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:89:a5:87:f5:95:97:d4:10:de:0f:bd:2f: cc:25:b1:14:37:e5:b6:0c:f9:de:d9:18:2e:fe:be: 0c:fb:f0:af:99:ae:2a:2b:cb:eb:09:04:f7:1c:af: 40:dd:7d:bf:76:f0:a8:12:75:f1:0f:cf:df:ca:41: 25:29:96:27:55:19:58:2c:ec:e0:dd:0e:6c:55:d5: 37:29:0a:58:5a:51:f8:17:0f:74:2e:1e:aa:93:67: 0f:9b:45:f6:c3:1c:a0:70:b0:60:14:13:3f:8b:00: 3f:e0:78:77:f5:ca:c2:0c:06:82:a6:69:6a:03:d3: 7d:2f:2c:d2:ea:ca:15:a3:c6:4c:14:a9:35:6e:e6: 7e:e7:30:55:59:ff:69:ca:a0:bc:3c:13:b6:8c:91: be:22:b6:60:3a:01:57:45:eb:09:2d:26:97:ec:55: 58:6f:7b:a4:08:ba:12:54:61:35:90:48:c8:03:d2: af:01:2c:f3:21:60:a7:46:aa:cd:84:cd:81:12:e9: 76:71:05:d5:9e:0b:4c:e6:07:ce:ea:ad:3d:0e:07: de:17:db:37:4a:cb:10:f7:85:7a:44:0e:dc:c4:05: 84:3b:e6:60:f8:15:cd:ea:9b:e0:9c:40:e0:48:46: 94:78:8d:51:f7:f4:06:56:59:c1:92:7e:c0:19:19: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A9:97:B3:83:3C:A1:1F:5B:A9:C4:D0:AD:12:CC:82:82:F0:E2:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8f7fcbd7-9732-31e2-b260-01bdde3944f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 68.69.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:10:a7:36:0b:47:ce:b4:63:93:0e:26:80:d9:d9:43:22:18: 99:72:a8:26:c9:80:4b:1f:39:62:9e:59:59:53:99:88:51:f0: 66:00:72:10:4d:e3:e5:a2:d6:5d:db:7c:eb:e5:f2:a0:a0:13: c5:19:0a:41:84:61:70:12:f5:b3:c2:ea:ef:3a:ec:e6:0e:eb: 55:60:78:b5:a7:0a:ec:8f:30:45:9c:2e:34:e4:9c:30:2a:41: b8:f8:fa:12:a2:a9:17:9b:e9:d9:7a:f7:37:fd:17:48:c7:56: 5b:8e:dd:fe:08:dd:6d:fa:da:87:1c:18:79:27:b5:96:8a:5e: b5:a8:39:10:87:93:68:f9:a6:41:3d:65:86:3f:89:d5:1e:4e: ff:3c:af:b8:3f:b3:a3:d6:43:ba:f9:b9:ec:0e:85:60:bb:aa: 33:f7:28:f0:1d:2b:de:83:c4:eb:6c:11:85:37:fd:0f:fc:06: b2:94:72:3c:48:f1:37:bf:ab:78:c3:bd:ca:b0:40:08:b9:a3: 87:0a:62:4f:b2:e3:21:82:dd:ec:30:2a:c1:b2:36:2e:1e:71: 89:8d:46:cf:13:03:96:79:8d:7b:b5:6f:c4:2e:fe:29:01:af: 95:45:c0:4b:a5:3a:88:db:19:50:35:9f:2d:5c:7c:5d:62:8c: aa:60:ff:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNT+UyROcU+/co6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZWY5M2RkMGItOGFkZC00OTk4LWFiNzQtMjAzODk4YWZkZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoqJpYf1lZfUEN4PvS/MJbEUN+W2DPne2Rgu /r4M+/Cvma4qK8vrCQT3HK9A3X2/dvCoEnXxD8/fykElKZYnVRlYLOzg3Q5sVdU3 KQpYWlH4Fw90Lh6qk2cPm0X2wxygcLBgFBM/iwA/4Hh39crCDAaCpmlqA9N9LyzS 6soVo8ZMFKk1buZ+5zBVWf9pyqC8PBO2jJG+IrZgOgFXResJLSaX7FVYb3ukCLoS VGE1kEjIA9KvASzzIWCnRqrNhM2BEul2cQXVngtM5gfO6q09DgfeF9s3SssQ94V6 RA7cxAWEO+Zg+BXN6pvgnEDgSEaUeI1R9/QGVlnBkn7AGRnbtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOpl7ODPKEfW6nE0K0SzIKC8OLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvOGY3ZmNiZDctOTczMi0z MWUyLWIyNjAtMDFiZGRlMzk0NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0QpzYLR860Y5MOJoDZ2UMiGJlyqCbJgEsfOWKeWVlTmYhR8GYAchBN 4+Wi1l3bfOvl8qCgE8UZCkGEYXAS9bPC6u867OYO61VgeLWnCuyPMEWcLjTknDAq Qbj4+hKiqReb6dl69zf9F0jHVluO3f4I3W362occGHkntZaKXrWoORCHk2j5pkE9 ZYY/idUeTv88r7g/s6PWQ7r5uewOhWC7qjP3KPAdK96DxOtsEYU3/Q/8BrKUcjxI 8Te/q3jDvcqwQAi5o4cKYk+y4yGC3ewwKsGyNi4ecYmNRs8TA5Z5jXu1b8Qu/ikB r5VFwEulOojbGVA1ny1cfF1ijKpg/8k= -----END CERTIFICATE-----Generated at Sun Jun 15 19:09:28 2025 by rpki-client