$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa File: ac931aa9-ba03-3746-9cf6-1c71e451632c.roa (raw, json) Hash identifier: g9Bc1I3Niv1VlFmXbjrVxfAktv2JgJoFHQmu3StOmds= Subject key identifier: CE:70:10:4E:E8:99:FB:58:F3:AE:78:EA:CB:81:DE:50:30:F7:9E:40 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849D7AFC631A3B0E72C02A33C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa Signing time: Tue 13 May 2025 19:06:47 +0000 ROA not before: Tue 13 May 2025 19:06:47 +0000 ROA not after: Mon 11 Aug 2025 19:06:47 +0000 asID: 13671 IP address blocks: 68.128.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:af:c6:31:a3:b0:e7:2c:02:a3:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 13 19:06:47 2025 GMT Not After : Aug 11 19:06:47 2025 GMT Subject: CN=58405887-ed77-4454-82f4-0258b3c154e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:b1:55:1c:f9:f9:c1:04:18:01:f5:d3:08: 8d:53:8f:4a:15:b3:e8:01:46:73:16:00:fa:39:97: b9:a2:47:27:1e:ff:34:19:af:13:f0:c7:7d:63:4f: 99:2f:76:76:a5:00:59:d8:24:d2:81:48:57:6c:0b: 62:99:45:c0:c9:7b:ac:84:03:91:79:8d:d5:97:c9: ff:44:e4:d5:b6:e6:5c:23:42:79:b6:14:cc:ca:f5: 30:af:c3:c8:08:5a:3b:0d:a5:a6:3a:e7:7c:fb:78: ea:36:53:8d:50:11:f3:97:c6:22:3c:0b:1e:49:01: 23:74:be:45:92:2f:b4:39:e7:e7:64:e3:6a:88:f6: ce:9a:38:a0:a2:04:4e:1d:f8:b0:17:4a:bb:7c:af: 72:5c:23:1a:80:27:05:af:eb:e6:bd:7b:9a:4d:78: 34:34:74:de:cf:93:fa:91:34:d1:22:13:c3:23:c6: 58:76:e0:17:34:cb:4a:b1:80:b9:c3:25:ee:93:fb: 0b:35:1e:ce:b6:fc:8b:95:61:e0:fb:75:b5:7f:ba: 5e:73:7d:7a:94:81:e8:cf:ba:03:94:83:20:55:64: 7d:7d:c5:40:13:1a:94:35:4f:35:22:e9:3c:78:eb: 03:41:96:69:81:13:d7:ed:ef:b0:a7:b1:69:eb:9b: 31:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:10:4E:E8:99:FB:58:F3:AE:78:EA:CB:81:DE:50:30:F7:9E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:f7:24:a8:e4:94:3f:18:13:ba:cb:83:37:96:bb:58:85:5f: c2:e2:53:92:55:8f:56:0f:1a:74:72:af:25:4d:90:c6:b7:28: 4a:50:a7:1e:f6:7d:83:04:85:90:50:ed:6b:b7:e4:92:60:68: 44:fe:0c:aa:38:b2:ab:55:2a:31:d5:9e:27:8c:a0:32:65:1f: 96:b2:29:51:42:ba:0e:fc:0a:c4:21:a0:fa:e1:5f:1c:be:2d: 2e:50:c4:fe:8b:31:20:af:76:f2:61:d8:e6:58:ba:48:29:be: 61:e2:a5:8d:8e:1b:74:71:dc:6d:73:e4:d9:9d:1d:44:b0:27: 2b:2a:5f:16:3c:f0:65:c0:a7:4b:04:f5:c5:73:26:69:e7:88: 41:ab:c3:af:74:a8:ad:f0:ad:7c:44:06:17:ca:a9:5f:8e:ea: 96:68:cd:32:9e:52:db:2e:e5:f6:58:94:90:d8:e7:15:a8:1b: c2:96:8a:3e:54:1f:11:36:f6:fa:c2:27:0a:db:30:98:a8:c5: ea:da:75:43:41:78:22:7f:6c:f9:56:b4:48:cb:40:01:ec:63: 71:1b:38:44:8d:d9:79:96:e3:36:9e:9d:6a:a6:93:7e:14:04: 42:b6:d3:d8:c2:41:bb:34:0a:ce:9b:cc:c1:20:e7:46:07:73: cd:1b:7e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnXr8Yxo7DnLAKjPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMzE5MDY0N1oXDTI1MDgxMTE5MDY0N1owLzEtMCsGA1UEAxMk NTg0MDU4ODctZWQ3Ny00NDU0LTgyZjQtMDI1OGIzYzE1NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7exVRz5+cEEGAH10wiNU49KFbPoAUZzFgD6 OZe5okcnHv80Ga8T8Md9Y0+ZL3Z2pQBZ2CTSgUhXbAtimUXAyXushAOReY3Vl8n/ ROTVtuZcI0J5thTMyvUwr8PICFo7DaWmOud8+3jqNlONUBHzl8YiPAseSQEjdL5F ki+0OefnZONqiPbOmjigogROHfiwF0q7fK9yXCMagCcFr+vmvXuaTXg0NHTez5P6 kTTRIhPDI8ZYduAXNMtKsYC5wyXuk/sLNR7OtvyLlWHg+3W1f7pec316lIHoz7oD lIMgVWR9fcVAExqUNU81Iuk8eOsDQZZpgRPX7e+wp7Fp65sxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5wEE7omftY86546suB3lAw955AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWM5MzFhYTktYmEwMy0z NzQ2LTljZjYtMWM3MWU0NTE2MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb3JKjklD8YE7rLgzeWu1iFX8LiU5JVj1YPGnRyryVNkMa3KEpQpx72 fYMEhZBQ7Wu35JJgaET+DKo4sqtVKjHVnieMoDJlH5ayKVFCug78CsQhoPrhXxy+ LS5QxP6LMSCvdvJh2OZYukgpvmHipY2OG3Rx3G1z5NmdHUSwJysqXxY88GXAp0sE 9cVzJmnniEGrw690qK3wrXxEBhfKqV+O6pZozTKeUtsu5fZYlJDY5xWoG8KWij5U HxE29vrCJwrbMJioxeradUNBeCJ/bPlWtEjLQAHsY3EbOESN2XmW4zaenWqmk34U BEK209jCQbs0Cs6bzMEg50YHc80bfpQ= -----END CERTIFICATE-----Generated at Tue Jun 17 16:18:41 2025 by rpki-client