$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa File: 8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa (raw, json) Hash identifier: LxwB0nEn4r/qBW/SIWIr8TDps9SQU1hlW09HuOOkGCQ= Subject key identifier: 59:21:99:54:2F:8F:09:25:44:2A:FF:73:65:57:96:3D:66:92:24:86 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F43285849ADAD054B279ACECC3E766D00 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa Signing time: Mon 28 Apr 2025 17:57:17 +0000 ROA not before: Mon 28 Apr 2025 17:57:17 +0000 ROA not after: Sun 27 Jul 2025 17:57:17 +0000 asID: 5065 IP address blocks: 68.64.148.0/24 maxlen: 24 68.64.149.0/24 maxlen: 24 68.64.150.0/24 maxlen: 24 68.64.151.0/24 maxlen: 24 68.64.156.0/24 maxlen: 24 68.64.157.0/24 maxlen: 24 68.64.158.0/24 maxlen: 24 68.64.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:ad:05:4b:27:9a:ce:cc:3e:76:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Apr 28 17:57:17 2025 GMT Not After : Jul 27 17:57:17 2025 GMT Subject: CN=c6bb2a2f-c785-40c9-bcc7-336ce52ff6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:f0:14:b6:68:89:ac:37:b9:e0:d9:a1:dd: 4f:3d:7c:ad:86:df:7c:9b:24:51:ef:38:78:e8:45: 61:eb:5e:ad:07:da:8f:e9:40:90:2a:a4:c2:77:48: 5d:00:3e:20:5f:2c:52:8d:12:b8:1e:2a:25:cc:35: 55:c6:b8:cc:ae:42:0b:8e:b5:19:02:dc:58:86:70: c8:9b:26:26:b6:e1:43:dc:05:d0:fc:24:e4:a2:da: 26:2c:1f:e0:a9:0e:2e:2d:e7:42:ec:41:25:f8:65: c5:7b:92:dc:c8:50:42:e7:07:9b:a8:44:73:c1:62: e1:6a:f6:1d:24:a2:c3:22:10:a5:a0:ee:c1:f3:d4: a5:da:70:54:4b:e8:02:9c:5e:93:84:f4:b0:e6:34: c9:8d:56:14:87:f9:94:ad:05:66:67:61:d9:e7:d4: ff:4d:c2:41:47:fa:7b:93:40:be:dd:cb:33:43:63: 74:aa:96:e1:7d:13:0f:72:a4:e5:7d:b7:0a:05:76: a5:45:ec:58:ce:84:f8:95:3f:4c:99:a0:84:2c:d2: e9:ba:87:32:0a:0d:6e:36:05:b1:64:46:68:2a:fe: a8:35:e8:da:a3:95:37:e6:33:18:75:e0:fe:51:c5: 56:7d:7a:a0:0f:0c:0b:9f:7a:d4:d3:c2:c4:10:82: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:99:54:2F:8F:09:25:44:2A:FF:73:65:57:96:3D:66:92:24:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 68.64.148.0/22 68.64.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6b:22:e7:1a:c7:0d:27:da:96:5f:cd:b5:4a:53:ce:f0:39: 98:27:a9:3a:06:de:de:36:ae:72:02:61:00:76:ec:c9:bb:4b: 60:6c:f3:56:c5:9a:23:51:a4:8b:e5:29:31:60:59:1c:d1:f2: 2f:59:e3:43:c9:75:aa:b1:a7:62:bc:81:b1:ba:d5:48:0f:90: 14:95:4a:2c:9d:71:98:4f:8a:4f:bf:48:72:55:74:f8:e8:b1: 2b:2c:19:c1:12:34:f5:29:9d:4d:10:cc:c2:7e:40:94:8d:7f: 4d:48:02:d7:cc:d8:40:60:1a:03:c3:d8:88:5f:16:ad:0a:8e: af:23:5b:1a:ab:c7:58:a8:67:6b:e6:f7:01:30:dd:ec:56:0b: 2b:b5:cc:9c:a4:6d:65:85:3b:66:0a:98:7a:78:0f:11:39:f9: 6d:3d:e6:f5:73:91:50:3c:68:8a:3b:06:45:cc:d0:a3:c8:c4: 0b:46:06:f7:45:3d:81:61:fe:ee:86:a8:91:f7:ec:ba:96:33: e3:2b:eb:f3:10:a2:dc:35:13:2a:e3:94:c5:a6:4e:8f:ce:a4: 1d:aa:f9:ee:0e:eb:bc:7a:97:33:02:f1:c5:fd:25:07:9a:f1: 6f:4f:49:88:34:17:12:e0:24:90:9a:0e:ca:da:ec:ca:0b:5c: f8:09:da:2c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmtrQVLJ5rOzD52bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDQyODE3NTcxN1oXDTI1MDcyNzE3NTcxN1owLzEtMCsGA1UEAxMk YzZiYjJhMmYtYzc4NS00MGM5LWJjYzctMzM2Y2U1MmZmNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxTwFLZoiaw3ueDZod1PPXytht98myRR7zh4 6EVh616tB9qP6UCQKqTCd0hdAD4gXyxSjRK4HiolzDVVxrjMrkILjrUZAtxYhnDI myYmtuFD3AXQ/CTkotomLB/gqQ4uLedC7EEl+GXFe5LcyFBC5webqERzwWLhavYd JKLDIhCloO7B89Sl2nBUS+gCnF6ThPSw5jTJjVYUh/mUrQVmZ2HZ59T/TcJBR/p7 k0C+3cszQ2N0qpbhfRMPcqTlfbcKBXalRexYzoT4lT9MmaCELNLpuocyCg1uNgWx ZEZoKv6oNejao5U35jMYdeD+UcVWfXqgDwwLn3rU08LEEIKMYQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFkhmVQvjwklRCr/c2VXlj1mkiSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvODU1NmY5NmQtY2EwYi0z ZmE5LTkyNmMtYTk2OGFhYTQ0YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCRECUAwQC RECcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEBrIucaxw0n2pZfzbVKU87wOZgnqToG3t42rnICYQB27Mm7 S2Bs81bFmiNRpIvlKTFgWRzR8i9Z40PJdaqxp2K8gbG61UgPkBSVSiydcZhPik+/ SHJVdPjosSssGcESNPUpnU0QzMJ+QJSNf01IAtfM2EBgGgPD2IhfFq0Kjq8jWxqr x1ioZ2vm9wEw3exWCyu1zJykbWWFO2YKmHp4DxE5+W095vVzkVA8aIo7BkXM0KPI xAtGBvdFPYFh/u6GqJH37LqWM+Mr6/MQotw1EyrjlMWmTo/OpB2q+e4O67x6lzMC 8cX9JQea8W9PSYg0FxLgJJCaDsra7MoLXPgJ2iw= -----END CERTIFICATE-----Generated at Sun Jun 15 11:40:46 2025 by rpki-client