$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa File: d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json) Hash identifier: JXHWIN2YedQ8Iiii9l0Nz+2hNwYPqW3XuC6Fzc+7Jg4= Subject key identifier: CB:00:7D:BD:44:4A:B2:D5:D2:30:27:56:D2:12:91:1D:A2:40:5A:27 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858490B4C31C1EBA9FE17A3CEE500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 701 IP address blocks: 68.131.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:31:c1:eb:a9:fe:17:a3:ce:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=10a4e8a0-5fbd-4649-85da-c9a8b9f8848b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:4d:25:32:fa:f9:06:79:2a:2f:40:eb:fe: 70:40:9d:6e:e9:92:e3:c2:ae:f8:eb:69:38:b7:de: 41:de:01:c0:5a:f6:c0:04:57:e1:60:a4:b5:83:2a: 7e:c2:51:b4:dd:ce:0f:53:7e:a5:eb:d8:f9:f4:fb: f1:55:9f:3a:a4:a3:5c:4d:1c:3b:dc:7c:00:7a:3e: 6f:ef:e0:66:64:53:d2:46:6d:ac:32:92:f2:05:46: 49:40:9f:61:04:8f:d0:00:3c:85:32:dd:f8:0c:57: 92:96:df:40:81:1c:6c:5c:f0:f2:5e:7d:66:7f:88: 01:b8:4d:b4:c1:96:fd:51:c1:2b:41:df:3d:3d:0d: af:4c:36:c5:eb:7a:8d:7b:9f:09:5c:66:8c:dd:10: 54:39:5d:df:db:35:46:2b:9d:4e:70:da:96:88:41: 83:40:d0:24:b0:84:73:8d:eb:3d:82:34:fc:ce:e6: a3:25:c8:35:81:d7:c1:4a:93:3d:9b:f6:fb:49:25: 05:ca:2c:66:b7:ec:d6:58:8d:61:cc:50:52:57:06: 28:58:42:71:d3:61:4d:ee:7e:f9:a9:4b:69:b3:76: 2e:5e:37:31:24:1b:10:ff:eb:82:b6:64:7e:2f:aa: 0f:6e:1a:21:0d:8c:6a:83:6e:5b:69:48:ef:86:bb: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:00:7D:BD:44:4A:B2:D5:D2:30:27:56:D2:12:91:1D:A2:40:5A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.131.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:bc:44:ed:d5:c5:b9:c4:1b:ab:5d:05:d9:a5:d5:7a:f2:55: 6c:59:e1:74:7d:02:5c:28:21:aa:2b:b0:42:42:f5:4f:60:95: aa:0a:6a:72:53:58:e8:cf:b4:6d:dc:82:56:eb:3a:ba:ef:eb: a1:e8:d1:98:e9:4c:dd:c3:51:15:c8:09:1b:97:fa:7c:e9:e0: d8:24:f9:b9:31:e5:b4:17:31:51:77:fc:75:cb:91:39:fb:82: e9:1e:a9:28:05:f2:84:01:a8:6a:12:de:7c:80:c3:09:05:62: 3c:a0:f3:ee:06:c7:60:cb:4f:de:29:e3:e3:2a:4a:f4:b6:0d: 9e:d5:82:38:8b:6a:be:ea:82:47:76:62:03:9c:65:c0:54:d5: 95:31:5f:d8:b7:2a:3f:06:1b:23:85:c8:c5:6c:d3:de:38:ac: 9d:33:14:04:d3:a3:60:8c:bf:28:61:d4:a5:d9:bb:a3:d4:47: 19:e3:a8:d1:0d:38:7a:31:9a:19:cd:37:02:a4:3c:bc:45:69: 77:75:1b:93:71:62:95:dc:0e:03:b2:64:d1:a9:38:45:fa:d7: 66:dd:2b:17:ad:48:b8:42:3e:ad:da:b1:c1:0a:c6:70:83:eb: e5:a9:d1:b9:ff:16:66:e6:e7:7d:f3:b8:ef:d2:db:ce:bb:e0: 7b:e9:9d:41 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkLTDHB66n+F6PO5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MTBhNGU4YTAtNWZiZC00NjQ5LTg1ZGEtYzlhOGI5Zjg4NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BxNJTL6+QZ5Ki9A6/5wQJ1u6ZLjwq7462k4 t95B3gHAWvbABFfhYKS1gyp+wlG03c4PU36l69j59PvxVZ86pKNcTRw73HwAej5v 7+BmZFPSRm2sMpLyBUZJQJ9hBI/QADyFMt34DFeSlt9AgRxsXPDyXn1mf4gBuE20 wZb9UcErQd89PQ2vTDbF63qNe58JXGaM3RBUOV3f2zVGK51OcNqWiEGDQNAksIRz jes9gjT8zuajJcg1gdfBSpM9m/b7SSUFyixmt+zWWI1hzFBSVwYoWEJx02FN7n75 qUtps3YuXjcxJBsQ/+uCtmR+L6oPbhohDYxqg25baUjvhruwXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMsAfb1ESrLV0jAnVtISkR2iQFonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUyMWY3MzQtZGIwNi0z MTliLTg2ZjYtN2U1YWE0M2YyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAE7xE7dXFucQbq10F2aXVevJVbFnhdH0CXCghqiuwQkL1T2CVqgpqclNY 6M+0bdyCVus6uu/roejRmOlM3cNRFcgJG5f6fOng2CT5uTHltBcxUXf8dcuROfuC 6R6pKAXyhAGoahLefIDDCQViPKDz7gbHYMtP3inj4ypK9LYNntWCOItqvuqCR3Zi A5xlwFTVlTFf2LcqPwYbI4XIxWzT3jisnTMUBNOjYIy/KGHUpdm7o9RHGeOo0Q04 ejGaGc03AqQ8vEVpd3Ubk3FildwOA7Jk0ak4RfrXZt0rF61IuEI+rdqxwQrGcIPr 5anRuf8WZubnffO479Lbzrvge+mdQQ== -----END CERTIFICATE-----Generated at Sun Apr 27 14:15:50 2025 by rpki-client