$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa File: dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa (raw, json) Hash identifier: M6l/zBy+yUfa/Ugl4ufzZnVXg53W+OYqtB1x1GyZS/4= Subject key identifier: 82:FF:BE:1E:C3:C5:E8:4A:4B:54:4C:B0:FC:E1:31:C2:89:F2:74:54 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA8537E4522565AF57EAF200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 68.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:37:e4:52:25:65:af:57:ea:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=fdae2c7c-3057-489c-a025-948a0d5740a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:79:71:bb:53:aa:20:ef:dd:62:c6:38:24: 2d:6f:88:52:29:e3:3e:7c:5d:b4:7e:c5:95:e7:92: 95:6b:59:f8:47:90:06:3a:df:d5:59:f6:76:70:b6: 37:93:ad:e2:c6:a1:cb:1b:ea:67:65:bb:9c:c9:6e: e1:66:22:a2:cd:ef:e9:43:63:a3:00:ed:90:fb:5a: 61:c1:00:6f:c7:39:e1:13:a8:12:b8:e3:84:c1:69: 30:23:21:0b:0a:05:04:2e:f6:10:04:59:db:6b:8d: c1:a4:31:3e:36:33:19:9a:1e:18:00:97:0d:10:5a: 9f:5b:78:c8:70:f4:be:fd:0c:eb:0e:3e:53:71:ca: 64:d0:23:66:a6:af:54:e4:0c:29:96:49:35:f6:0e: 13:de:33:28:0e:91:20:bb:cc:03:56:ac:5f:c8:9b: 91:fb:21:b5:a7:69:30:f8:a1:89:4b:ee:61:59:07: 2a:94:03:7a:d8:a4:22:70:ea:70:88:11:6d:25:82: 07:7b:c6:6c:db:22:23:dc:d6:c0:40:e8:94:dc:2f: 0c:e7:d1:f7:59:80:6a:b2:9b:36:9c:a4:eb:88:5f: 32:8e:60:e1:1f:87:b5:bf:0b:45:c5:7b:14:2a:8d: 85:20:ce:f8:16:d7:7c:02:ba:7e:b7:6a:86:52:05: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:BE:1E:C3:C5:E8:4A:4B:54:4C:B0:FC:E1:31:C2:89:F2:74:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0b:76:c4:53:38:bd:91:db:65:20:db:3e:8a:ba:51:4a:14: d1:09:61:26:f6:d4:68:7f:dd:a1:97:74:d1:be:fc:b2:86:4d: d6:47:de:c1:e0:5d:e2:24:74:84:c5:0f:4d:c4:9c:50:34:56: f1:73:bb:07:fb:3f:8b:15:c6:60:21:9e:45:bf:96:3a:05:2e: 1a:0b:f3:20:d9:5c:2a:f9:36:48:42:9a:7f:6d:5d:65:59:14: e9:20:49:c5:de:8c:26:22:2e:35:18:d7:cc:2e:fc:74:fb:87: 3e:df:36:d8:62:6e:53:48:0e:5d:ba:ff:2a:76:fa:e7:da:22: 41:00:05:80:f9:d7:ff:80:ec:cf:4b:e5:12:ae:5f:52:b3:f2: 75:96:46:c0:1f:1d:71:80:e8:a6:b5:83:09:f1:bc:f0:b1:c1: e0:5d:53:3f:fd:d5:8f:a6:d9:3c:21:6a:51:11:47:6b:da:66: 0d:8c:3a:56:0a:16:57:a2:57:73:f5:22:ec:ae:ae:45:1a:eb: 17:82:42:da:57:91:19:d8:89:72:58:c0:b9:f0:97:2b:35:17: b5:95:28:5e:dc:6a:96:65:62:ff:b8:8f:41:cc:4b:34:1a:2a: b3:91:9a:4f:55:af:d3:d2:c2:0c:d8:ff:13:c9:22:62:2c:e1: 2a:69:55:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTfkUiVlr1fq8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZmRhZTJjN2MtMzA1Ny00ODljLWEwMjUtOTQ4YTBkNTc0MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylx5cbtTqiDv3WLGOCQtb4hSKeM+fF20fsWV 55KVa1n4R5AGOt/VWfZ2cLY3k63ixqHLG+pnZbucyW7hZiKize/pQ2OjAO2Q+1ph wQBvxznhE6gSuOOEwWkwIyELCgUELvYQBFnba43BpDE+NjMZmh4YAJcNEFqfW3jI cPS+/QzrDj5Tccpk0CNmpq9U5Awplkk19g4T3jMoDpEgu8wDVqxfyJuR+yG1p2kw +KGJS+5hWQcqlAN62KQicOpwiBFtJYIHe8Zs2yIj3NbAQOiU3C8M59H3WYBqsps2 nKTriF8yjmDhH4e1vwtFxXsUKo2FIM74Ftd8Arp+t2qGUgWjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL/vh7DxehKS1RMsPzhMcKJ8nRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGQ1Mzc5OTctZGJlYi0z Mzk0LWFiNmEtZGRjMDU4NTJkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRIAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQLdsRTOL2R22Ug2z6KulFKFNEJYSb21Gh/3aGXdNG+/LKGTdZH3sHg XeIkdITFD03EnFA0VvFzuwf7P4sVxmAhnkW/ljoFLhoL8yDZXCr5NkhCmn9tXWVZ FOkgScXejCYiLjUY18wu/HT7hz7fNthiblNIDl26/yp2+ufaIkEABYD51/+A7M9L 5RKuX1Kz8nWWRsAfHXGA6Ka1gwnxvPCxweBdUz/91Y+m2TwhalERR2vaZg2MOlYK FleiV3P1IuyurkUa6xeCQtpXkRnYiXJYwLnwlys1F7WVKF7capZlYv+4j0HMSzQa KrORmk9Vr9PSwgzY/xPJImIs4SppVQY= -----END CERTIFICATE-----Generated at Mon Jun 16 22:07:01 2025 by rpki-client