$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa File: d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json) Hash identifier: OLzF9gylt1njrxYLUmi2sZYTBIKI6QCG7a5dYz/jKNE= Subject key identifier: 10:2F:B1:24:C0:D5:CA:05:6E:5B:5C:62:08:52:B6:92:2C:08:94:A5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA85380221C28227E7FD9780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 68.131.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:38:02:21:c2:82:27:e7:fd:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=70e1e1ed-4aab-4ccc-800b-35cc095f7415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:38:c9:c4:7a:0b:56:69:6d:6b:77:a1:06: 77:dd:a2:3e:5c:f2:32:8a:15:8e:e9:b6:af:a3:66: f7:62:49:1d:55:e6:aa:b6:64:94:56:0c:19:74:b8: 1b:29:f8:4e:7e:c8:0d:2d:51:53:73:be:5e:f1:a5: f8:0a:9b:00:57:d2:c2:68:64:a6:81:1b:f9:60:8a: 48:55:f5:99:08:db:36:2f:98:46:2d:a8:cf:7a:48: ad:ed:be:6b:27:fc:28:fe:da:5e:c0:52:90:3c:93: 44:51:34:6c:ae:e1:a3:0e:0f:7e:0e:4a:fd:cd:06: 1c:07:77:54:87:11:51:b6:80:9b:72:18:dc:f0:7b: 1c:24:c0:f4:a2:ea:ab:ee:9c:bd:f0:1b:9c:cc:d3: a6:ac:3c:d1:8e:90:90:50:2a:ed:56:d6:54:78:32: c2:6f:47:a1:3b:4a:44:f9:55:68:e0:ce:c6:60:d2: e2:c4:bd:97:46:28:d0:6c:37:a5:db:a0:91:ed:39: 87:e7:c6:1f:02:34:9c:06:37:d7:98:bf:c6:4e:57: e0:97:f4:c0:4e:21:ab:d5:bb:56:b8:4b:d5:a5:2b: d4:b8:8b:6d:07:4c:a3:50:1c:44:6d:bd:2a:2b:24: 3a:54:2d:93:f1:8c:99:ca:18:36:6c:31:61:24:d7: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2F:B1:24:C0:D5:CA:05:6E:5B:5C:62:08:52:B6:92:2C:08:94:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.131.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:85:0d:61:c8:3a:e5:33:fa:07:4c:a1:24:39:ee:50:5c:f4: 1e:fc:86:52:f0:ba:79:2c:0a:cf:a2:3e:d4:cf:91:95:01:70: 03:ab:f0:49:90:66:82:eb:65:20:cc:5a:ac:21:50:ba:a4:63: 72:e0:ea:b8:27:51:23:c0:78:bb:2a:75:1c:4a:ee:e7:6a:37: f5:ce:9f:a6:ec:55:82:43:8f:4f:d3:1d:86:19:4f:87:62:69: 41:50:ab:65:c7:42:db:19:72:75:1a:01:e7:a4:9d:6f:9f:7e: 6f:ba:ea:fb:0d:4f:a1:a0:08:07:e2:63:d6:3c:5b:84:71:fe: a2:27:65:f9:2b:b0:ec:23:13:57:10:59:6f:53:f1:bd:f8:17: f9:f2:57:99:6d:b3:98:52:b4:c9:2f:47:73:52:b9:00:f4:39: 87:ca:ab:a5:c5:b0:26:e7:a1:dd:51:f6:41:cb:a1:8a:15:12: 1e:59:be:4e:29:d4:22:05:c1:12:92:40:20:af:13:6a:fd:d4: c1:d0:e2:76:01:90:71:7e:99:82:01:7e:1e:c7:8c:43:cb:84: bb:c0:b7:d1:e0:58:42:79:66:18:d8:c9:f6:9e:8c:32:2b:fb: 88:c7:ae:a7:82:f1:98:77:2c:9d:2a:fa:25:2e:1c:6e:33:f5: 7b:73:d0:e2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnqhTgCIcKCJ+f9l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NzBlMWUxZWQtNGFhYi00Y2NjLTgwMGItMzVjYzA5NWY3NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX44ycR6C1ZpbWt3oQZ33aI+XPIyihWO6bav o2b3YkkdVeaqtmSUVgwZdLgbKfhOfsgNLVFTc75e8aX4CpsAV9LCaGSmgRv5YIpI VfWZCNs2L5hGLajPekit7b5rJ/wo/tpewFKQPJNEUTRsruGjDg9+Dkr9zQYcB3dU hxFRtoCbchjc8HscJMD0ouqr7py98BuczNOmrDzRjpCQUCrtVtZUeDLCb0ehO0pE +VVo4M7GYNLixL2XRijQbDel26CR7TmH58YfAjScBjfXmL/GTlfgl/TATiGr1btW uEvVpSvUuIttB0yjUBxEbb0qKyQ6VC2T8YyZyhg2bDFhJNcfUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBAvsSTA1coFbltcYghStpIsCJSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUyMWY3MzQtZGIwNi0z MTliLTg2ZjYtN2U1YWE0M2YyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYIUNYcg65TP6B0yhJDnuUFz0HvyGUvC6eSwKz6I+1M+RlQFwA6vwSZBm gutlIMxarCFQuqRjcuDquCdRI8B4uyp1HEru52o39c6fpuxVgkOPT9MdhhlPh2Jp QVCrZcdC2xlydRoB56Sdb59+b7rq+w1PoaAIB+Jj1jxbhHH+oidl+Suw7CMTVxBZ b1PxvfgX+fJXmW2zmFK0yS9Hc1K5APQ5h8qrpcWwJueh3VH2QcuhihUSHlm+TinU IgXBEpJAIK8Tav3UwdDidgGQcX6ZggF+HseMQ8uEu8C30eBYQnlmGNjJ9p6MMiv7 iMeup4LxmHcsnSr6JS4cbjP1e3PQ4g== -----END CERTIFICATE-----Generated at Mon Jun 16 06:24:40 2025 by rpki-client