$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa File: 0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa (raw, json) Hash identifier: 4HQFmpVU5xsonIu1N25SMQihQDQIshGPW64XlhwFetA= Subject key identifier: 2A:48:1E:60:C9:6A:81:6E:87:54:CD:48:4B:49:8F:2D:6A:0E:EC:79 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F43285849DD20B1313C432308E8F0FFC0 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa Signing time: Thu 15 May 2025 17:53:20 +0000 ROA not before: Thu 15 May 2025 17:53:20 +0000 ROA not after: Wed 13 Aug 2025 17:53:20 +0000 asID: 23316 IP address blocks: 68.170.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:20:b1:31:3c:43:23:08:e8:f0:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: May 15 17:53:20 2025 GMT Not After : Aug 13 17:53:20 2025 GMT Subject: CN=898e7915-e66a-4857-a7d0-692ae080ccfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:0f:ce:22:fb:d9:81:b8:88:ce:26:d5:93: a6:24:5d:51:bf:59:73:ac:09:d2:0c:13:df:6e:9c: 70:6c:c0:b0:91:01:95:12:92:7f:32:ed:07:0a:f9: 56:3b:9d:bf:2a:b2:97:6f:cf:63:62:54:4b:cd:ad: 88:eb:a1:67:f7:65:d1:44:e3:bc:c2:8d:0c:98:ab: 89:84:58:aa:a4:86:94:4c:26:96:22:ff:8c:e0:22: f3:51:c0:3d:4a:8c:ac:11:36:ed:9c:44:30:ea:78: 17:ec:fa:f8:06:8d:58:a7:89:f9:3a:24:83:d6:3e: bc:f1:02:b9:3e:6a:b0:bf:95:73:7a:73:f4:a4:40: 8e:3e:72:35:3a:90:3d:81:76:2f:4c:77:05:23:22: 41:be:17:c5:27:75:e8:d9:67:c2:10:af:85:88:eb: 9a:ca:1c:ce:ef:5e:03:f4:88:8b:fd:1b:77:35:88: b3:55:08:03:e1:87:f6:23:91:1b:ac:67:9d:09:9a: ef:0d:48:ca:07:5c:53:46:93:4b:cb:37:81:fe:d2: f9:66:16:69:23:35:b1:bd:ff:7e:28:3d:0b:35:95: ab:48:4f:32:22:00:79:dc:81:e3:13:43:16:c1:fa: d6:06:bf:0c:8e:c3:f6:bd:8c:b3:e2:55:c1:ad:c1: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:48:1E:60:C9:6A:81:6E:87:54:CD:48:4B:49:8F:2D:6A:0E:EC:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/0f3c0c37-c4b1-33fc-b3a0-d8f592ac27c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 68.170.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:09:35:83:bd:2f:b9:46:34:ac:14:63:4a:a5:99:70:e9:da: 74:0c:96:80:eb:d2:9c:0d:6e:5b:aa:b0:e9:d6:f5:81:f2:e2: fe:79:93:e0:19:6c:f4:7c:a3:37:f6:46:87:d8:3c:25:05:14: 7e:c8:c0:60:8a:b4:f6:e2:f8:ba:e8:d4:b2:b4:f7:96:5c:be: 8c:2f:da:68:7b:3a:00:9c:44:58:19:12:95:f8:f4:75:84:13: 8c:26:9f:5e:c7:91:9b:ad:e8:2b:d9:db:63:41:80:04:41:9b: 53:36:7a:80:a4:f7:d6:50:79:cc:83:bc:76:80:3e:a5:3f:a6: 05:f5:e4:ce:14:c9:da:82:a0:d6:89:77:00:c5:6e:d4:57:11: 47:c3:5a:5e:58:e0:9e:bd:98:70:7a:94:88:52:69:41:33:6c: d5:71:d1:ea:40:71:0d:d6:9f:2a:ae:4c:dd:95:02:77:75:7a: b9:11:8b:78:88:02:96:2f:4f:89:f2:fd:6a:6d:51:62:a3:4c: 12:64:88:0b:e8:a9:3d:fc:71:a2:73:87:80:f5:f8:28:7a:0c: 81:12:32:7a:6c:fd:54:2d:09:ce:0b:90:7e:15:f2:9d:4a:0b: 79:7d:a2:ee:e6:64:5c:b5:7a:66:37:ce:9e:d6:81:fc:35:17: 49:50:e4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEndILExPEMjCOjw/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MDUxNTE3NTMyMFoXDTI1MDgxMzE3NTMyMFowLzEtMCsGA1UEAxMk ODk4ZTc5MTUtZTY2YS00ODU3LWE3ZDAtNjkyYWUwODBjY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2EPziL72YG4iM4m1ZOmJF1Rv1lzrAnSDBPf bpxwbMCwkQGVEpJ/Mu0HCvlWO52/KrKXb89jYlRLza2I66Fn92XRROO8wo0MmKuJ hFiqpIaUTCaWIv+M4CLzUcA9SoysETbtnEQw6ngX7Pr4Bo1Yp4n5OiSD1j688QK5 Pmqwv5VzenP0pECOPnI1OpA9gXYvTHcFIyJBvhfFJ3Xo2WfCEK+FiOuayhzO714D 9IiL/Rt3NYizVQgD4Yf2I5EbrGedCZrvDUjKB1xTRpNLyzeB/tL5ZhZpIzWxvf9+ KD0LNZWrSE8yIgB53IHjE0MWwfrWBr8MjsP2vYyz4lXBrcFEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpIHmDJaoFuh1TNSEtJjy1qDux5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMGYzYzBjMzctYzRiMS0z M2ZjLWIzYTAtZDhmNTkyYWMyN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoJNYO9L7lGNKwUY0qlmXDp2nQMloDr0pwNbluqsOnW9YHy4v55k+AZ bPR8ozf2RofYPCUFFH7IwGCKtPbi+Lro1LK095Zcvowv2mh7OgCcRFgZEpX49HWE E4wmn17HkZut6CvZ22NBgARBm1M2eoCk99ZQecyDvHaAPqU/pgX15M4UydqCoNaJ dwDFbtRXEUfDWl5Y4J69mHB6lIhSaUEzbNVx0epAcQ3WnyquTN2VAnd1erkRi3iI ApYvT4ny/WptUWKjTBJkiAvoqT38caJzh4D1+Ch6DIESMnps/VQtCc4LkH4V8p1K C3l9ou7mZFy1emY3zp7Wgfw1F0lQ5Ck= -----END CERTIFICATE-----Generated at Tue Jun 17 04:02:50 2025 by rpki-client