$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa File: 417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa (raw, json) Hash identifier: OWRzai/aa5kmbVLZR4KLbRM+yiqdydh/bZwmCMb3qmU= Subject key identifier: 8D:3A:0A:82:1C:4B:90:A2:9A:D8:F0:20:54:51:98:BD:0B:D4:97:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C244DD4F6CB82E811511FC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 68.238.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:4d:d4:f6:cb:82:e8:11:51:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=b7ef0f67-4cbd-4d57-9f4c-d4f45d661068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:57:c3:b5:d4:20:9b:15:cf:d5:58:42:ba: 47:14:11:3d:06:96:3f:96:4b:84:79:83:dd:8b:44: 42:ce:c0:ec:db:89:3d:d9:88:73:25:33:b6:15:dd: 04:41:8d:fb:90:57:14:f5:08:a5:cc:ad:22:88:26: 8d:49:46:f6:e4:5d:fc:f1:ae:1b:f4:4d:b6:db:75: 3b:a6:66:22:56:97:60:ef:83:4b:cc:c9:d0:d9:e4: d1:e0:36:0e:9a:05:57:99:8b:93:b9:6b:94:46:97: b5:b8:70:61:ad:df:e5:69:c3:55:c2:c6:5a:de:9c: be:cf:37:ca:15:78:f7:29:13:bc:94:6e:7b:ea:34: 78:c3:ee:61:6e:30:ac:c9:4b:cd:47:19:d6:95:9b: b3:3a:48:bb:a1:b5:32:45:80:87:be:a5:b3:07:54: 07:e8:80:bc:b2:cc:e3:9c:53:cb:c0:ae:a0:e5:b3: 0f:e3:5e:55:89:28:2f:75:e6:16:57:79:72:be:34: 45:52:d4:01:a2:7a:01:8b:ac:06:7b:4d:cc:d3:88: 10:46:d2:74:65:3e:3f:84:52:8b:33:3b:ff:0c:06: 6b:65:7d:af:fc:eb:5b:e5:93:37:f6:ae:82:2f:0b: 0f:d4:b9:78:47:03:71:fa:fc:f4:0e:49:3c:f7:c4: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3A:0A:82:1C:4B:90:A2:9A:D8:F0:20:54:51:98:BD:0B:D4:97:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:72:64:4f:08:9a:37:99:d0:82:91:cc:72:83:2c:80:e9:3e: 32:60:4e:84:6f:bf:1c:f1:10:4c:24:6d:57:00:f4:88:86:c2: b7:b8:c9:9c:2f:18:47:35:c8:74:18:e9:2a:f9:01:cb:f0:dd: f7:6c:c0:84:f5:78:13:6a:c3:91:64:f4:33:9c:34:3e:b5:a5: db:cd:d3:99:ec:01:c6:98:63:37:be:df:d0:9a:d0:84:b7:ee: 0d:67:d7:fb:18:07:5e:cd:18:0e:b6:5d:48:57:38:c3:61:61: c4:18:d1:b7:08:b4:82:c2:b0:f8:e9:41:2b:a9:46:44:f9:06: 52:5c:1c:76:08:2a:b3:73:bd:e0:a4:f2:85:dd:c8:db:7e:ce: a7:43:31:f6:90:f2:39:8e:c4:e2:96:cb:e8:3f:a2:34:48:f0: 73:bb:b6:03:40:96:0f:81:9a:c9:ec:38:34:fb:01:80:cc:54: e5:68:11:36:93:b4:61:e7:51:d0:f5:e0:59:4d:fc:8c:f9:b3: 7a:10:f5:28:2f:93:17:10:4c:f5:17:ae:e6:b3:6a:25:7f:37: 0b:27:b5:7e:f3:0a:6a:ca:76:ee:9d:62:9b:60:49:ad:45:0e: d9:f0:d8:64:ac:cc:50:05:2e:a8:bb:3c:36:c8:1b:0a:00:ff: 69:be:b3:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJE3U9suC6BFRH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YjdlZjBmNjctNGNiZC00ZDU3LTlmNGMtZDRmNDVkNjYxMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsNXw7XUIJsVz9VYQrpHFBE9BpY/lkuEeYPd i0RCzsDs24k92YhzJTO2Fd0EQY37kFcU9QilzK0iiCaNSUb25F388a4b9E2223U7 pmYiVpdg74NLzMnQ2eTR4DYOmgVXmYuTuWuURpe1uHBhrd/lacNVwsZa3py+zzfK FXj3KRO8lG576jR4w+5hbjCsyUvNRxnWlZuzOki7obUyRYCHvqWzB1QH6IC8sszj nFPLwK6g5bMP415ViSgvdeYWV3lyvjRFUtQBonoBi6wGe03M04gQRtJ0ZT4/hFKL Mzv/DAZrZX2v/Otb5ZM39q6CLwsP1Ll4RwNx+vz0Dkk898S4VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI06CoIcS5CimtjwIFRRmL0L1JewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDE3YTliNGEtOGUxZi0z MDM0LWFiMzctNWYyNGNmMWIyNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKByZE8ImjeZ0IKRzHKDLIDpPjJgToRvvxzxEEwkbVcA9IiGwre4yZwv GEc1yHQY6Sr5Acvw3fdswIT1eBNqw5Fk9DOcND61pdvN05nsAcaYYze+39Ca0IS3 7g1n1/sYB17NGA62XUhXOMNhYcQY0bcItILCsPjpQSupRkT5BlJcHHYIKrNzveCk 8oXdyNt+zqdDMfaQ8jmOxOKWy+g/ojRI8HO7tgNAlg+BmsnsODT7AYDMVOVoETaT tGHnUdD14FlN/Iz5s3oQ9SgvkxcQTPUXruazaiV/NwsntX7zCmrKdu6dYptgSa1F Dtnw2GSszFAFLqi7PDbIGwoA/2m+swo= -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:31 2025 by rpki-client