$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa File: e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa (raw, json) Hash identifier: s6oO43ApDLWj4W2t7Bix5aq3hsjXLUC8vaJWY9POSro= Subject key identifier: 2F:69:1B:1D:88:2D:02:25:62:62:55:B5:68:CF:6E:1F:B0:12:FF:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24777A7CD574EDC3B22780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 68.238.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:77:7a:7c:d5:74:ed:c3:b2:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=1f1f982a-c50c-47bb-a0aa-67e87fcd4e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:16:43:89:bd:0a:54:6d:8b:87:91:ed:6e: ef:cf:ea:cd:21:70:41:0a:e8:f3:ff:53:b9:4b:af: f2:e0:eb:12:0a:a9:ff:18:19:2b:f7:90:2e:f2:de: 46:78:6b:6f:ed:47:5f:6b:56:0f:6f:45:eb:12:6f: 30:91:d4:4d:49:c6:c5:cc:79:9e:5d:cc:01:f7:2b: f9:e1:00:40:36:17:da:43:75:d5:93:9c:0d:46:74: 81:5e:9f:88:e5:be:bb:34:3e:f1:33:cf:f9:84:3a: d0:77:55:91:6c:94:18:bb:7f:4b:8a:1f:1b:eb:0b: eb:f1:8f:5c:0c:42:6c:4f:d6:62:d2:72:4e:ba:f1: dc:91:78:dc:4d:56:f7:53:6b:67:33:e8:d9:ca:56: d1:25:5c:23:a0:80:20:b1:b5:57:a4:17:04:96:68: b2:8b:4f:cd:76:ba:10:2e:8b:f4:5e:5e:c6:a7:96: 35:b2:e5:cc:34:91:05:84:fe:13:2a:63:cd:41:1f: 18:2c:17:0d:f4:e9:86:94:d4:01:e2:29:d2:00:f5: ba:61:ed:68:7e:d7:44:a8:0c:fc:43:e3:19:cb:a9: b6:01:5c:b4:ef:ca:26:bb:4c:9b:47:73:83:47:19: de:ad:11:e2:fd:cb:cf:5e:57:79:2c:bd:ba:3a:31: 1a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:69:1B:1D:88:2D:02:25:62:62:55:B5:68:CF:6E:1F:B0:12:FF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2b:b2:77:94:f0:c6:ef:21:f8:ca:bf:6e:4b:06:9a:33:26: f9:4c:80:1c:7a:69:ac:04:ac:b9:de:1c:17:42:7e:0c:16:8f: e1:8f:78:e1:9e:6a:7b:b0:c6:d4:50:8b:04:7e:9f:e2:db:07: 98:f4:6e:2e:83:82:2c:75:18:16:87:c9:b4:a2:50:32:5f:59: 2e:77:6c:4f:b8:1e:13:02:2f:8a:a7:22:00:5c:3d:44:b3:2b: a3:47:22:45:95:31:86:f6:ab:47:06:26:aa:54:85:67:39:f9: 1b:ef:b9:88:c8:7f:a9:3b:31:b2:19:51:cd:3d:ec:50:98:dc: 7f:58:c9:43:08:fe:61:0e:ca:e3:0b:ae:53:da:de:63:bb:f7: 1c:a0:93:89:4d:2f:f3:87:b4:7e:ee:6b:eb:3a:ce:87:1d:b3: 2c:2a:8e:6e:a9:7a:26:ba:e5:2d:ee:67:1b:46:cd:90:ca:64: 47:b1:fa:02:f2:0b:8b:ea:ca:a8:9c:2f:c1:0b:f9:6d:a5:04: f7:00:d9:b9:6f:4a:ec:1b:1f:18:5d:23:cb:6f:c1:28:aa:35: 0a:e9:bb:0f:b0:b9:31:7b:b3:99:c9:a0:e6:6e:5f:25:58:79: b3:6b:5a:c5:10:74:a6:4b:31:ab:82:4b:5e:44:5c:07:f5:ee: 6a:48:65:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJHd6fNV07cOyJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MWYxZjk4MmEtYzUwYy00N2JiLWEwYWEtNjdlODdmY2Q0ZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi0WQ4m9ClRti4eR7W7vz+rNIXBBCujz/1O5 S6/y4OsSCqn/GBkr95Au8t5GeGtv7Udfa1YPb0XrEm8wkdRNScbFzHmeXcwB9yv5 4QBANhfaQ3XVk5wNRnSBXp+I5b67ND7xM8/5hDrQd1WRbJQYu39Lih8b6wvr8Y9c DEJsT9Zi0nJOuvHckXjcTVb3U2tnM+jZylbRJVwjoIAgsbVXpBcElmiyi0/NdroQ Lov0Xl7Gp5Y1suXMNJEFhP4TKmPNQR8YLBcN9OmGlNQB4inSAPW6Ye1oftdEqAz8 Q+MZy6m2AVy078omu0ybR3ODRxnerRHi/cvPXld5LL26OjEaGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9pGx2ILQIlYmJVtWjPbh+wEv+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTI0ZjAwYjUtMmY1MC0z MDViLTk3OTYtM2VmODlhYzBkZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACorsneU8MbvIfjKv25LBpozJvlMgBx6aawErLneHBdCfgwWj+GPeOGe anuwxtRQiwR+n+LbB5j0bi6Dgix1GBaHybSiUDJfWS53bE+4HhMCL4qnIgBcPUSz K6NHIkWVMYb2q0cGJqpUhWc5+RvvuYjIf6k7MbIZUc097FCY3H9YyUMI/mEOyuML rlPa3mO79xygk4lNL/OHtH7ua+s6zocdsywqjm6peia65S3uZxtGzZDKZEex+gLy C4vqyqicL8EL+W2lBPcA2blvSuwbHxhdI8tvwSiqNQrpuw+wuTF7s5nJoOZuXyVY ebNrWsUQdKZLMauCS15EXAf17mpIZZ0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:40 2025 by rpki-client