$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa File: e602d673-4722-3cf4-9fc1-7baeb525d19c.roa (raw, json) Hash identifier: sxc89V9ZjiCp7Xpk6ZStrAjF5ddOWC5DoTcK2re5OEU= Subject key identifier: 1D:AB:E4:DF:F5:8E:B1:1D:C8:46:C7:4E:61:12:AB:48:21:DA:37:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858491246F39F9C3CE25109459CE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 701 IP address blocks: 68.236.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:f3:9f:9c:3c:e2:51:09:45:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=520b0e33-befd-47ac-9662-4e717766823c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:6f:6b:ba:84:12:54:6a:23:4b:36:63:dc: 8d:7d:4a:01:ea:ca:c8:67:eb:5f:c0:4d:7c:b1:82: 07:09:bf:de:0a:b2:00:01:99:8f:15:f6:d1:26:2a: fe:8d:ff:ee:fc:a5:b8:59:fe:d2:ef:92:bd:fc:be: ce:f7:2f:94:e2:81:17:e9:7f:f6:f2:dd:e7:ac:08: 3b:23:37:0d:dc:c8:cc:4e:12:29:3e:29:c5:d9:32: b8:37:fc:5b:9a:82:17:1e:d5:49:be:8c:90:32:fa: 94:ff:b5:9d:a5:0f:8f:a5:47:41:0f:4b:c8:b3:27: 60:7c:a0:b6:72:1a:3b:e3:92:1f:c4:e4:3f:7b:b8: ab:42:ce:99:95:1d:78:06:99:c3:8d:ca:c7:24:e4: 0f:d6:1f:2d:fa:4b:cb:3f:c4:c1:16:4c:ce:c7:e8: 95:2b:78:ba:9c:94:1e:b2:e2:22:b4:fd:b2:b4:fd: b6:fd:93:62:d8:91:f7:8f:db:8e:0a:09:7c:1b:9f: c6:61:1b:08:61:5b:d6:4b:8c:86:33:3c:73:73:1c: f9:94:fb:c9:59:69:d1:fa:dd:48:a5:43:3e:cf:31: 0f:5d:71:e7:8e:7f:c0:19:fd:bb:c0:a4:66:30:12: 99:4e:6e:19:2a:00:ab:4c:94:4a:39:0d:ee:80:8d: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AB:E4:DF:F5:8E:B1:1D:C8:46:C7:4E:61:12:AB:48:21:DA:37:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.236.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:50:bc:ae:e2:be:b5:10:fc:aa:f2:da:42:98:71:f8:c0:22: d4:58:cf:bf:4c:a1:d0:9c:a9:6d:7f:d0:60:66:b5:6a:a2:9e: d2:d0:ef:dc:d1:dd:b6:f4:06:ea:85:53:cd:8d:04:1d:35:00: 5a:fb:11:a4:9d:12:5e:e0:e0:0f:3e:fd:6e:98:99:14:88:d7: eb:9c:ac:df:a8:33:8c:78:67:4f:fe:8e:c3:3d:cd:b3:e6:bf: 87:e1:47:32:cc:4e:e9:23:46:b7:5c:c2:70:9b:df:eb:db:f1: 5c:56:40:f9:bb:2a:82:d3:2b:4f:7d:bd:1c:7f:3d:39:d0:24: 93:1b:a9:78:30:a3:4d:87:54:00:ae:38:d6:55:7e:ed:88:63: af:19:3d:45:7d:90:20:d1:e6:3f:c0:6f:00:a7:d0:78:ea:99: af:0a:2c:c0:61:ed:de:e4:46:24:14:4f:d8:2e:22:1e:c5:6f: 37:56:5a:93:19:74:84:aa:8d:1c:d8:3a:05:ae:a7:8b:e3:e5: d8:56:6a:5b:95:9d:2f:99:0a:27:31:b4:d2:43:db:07:3e:4f: 16:7d:88:36:38:fb:6f:04:6d:3e:c3:cd:55:aa:c8:7a:95:93: 35:e6:72:e7:06:e7:a3:09:da:76:2e:9e:27:13:bf:db:59:78: ce:00:15:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvOfnDziUQlFnOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NTIwYjBlMzMtYmVmZC00N2FjLTk2NjItNGU3MTc3NjY4MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqndva7qEElRqI0s2Y9yNfUoB6srIZ+tfwE18 sYIHCb/eCrIAAZmPFfbRJir+jf/u/KW4Wf7S75K9/L7O9y+U4oEX6X/28t3nrAg7 IzcN3MjMThIpPinF2TK4N/xbmoIXHtVJvoyQMvqU/7WdpQ+PpUdBD0vIsydgfKC2 cho745IfxOQ/e7irQs6ZlR14BpnDjcrHJOQP1h8t+kvLP8TBFkzOx+iVK3i6nJQe suIitP2ytP22/ZNi2JH3j9uOCgl8G5/GYRsIYVvWS4yGMzxzcxz5lPvJWWnR+t1I pUM+zzEPXXHnjn/AGf27wKRmMBKZTm4ZKgCrTJRKOQ3ugI3/wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2r5N/1jrEdyEbHTmESq0gh2jexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTYwMmQ2NzMtNDcyMi0z Y2Y0LTlmYzEtN2JhZWI1MjVkMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9QvK7ivrUQ/Kry2kKYcfjAItRYz79ModCcqW1/0GBmtWqintLQ79zR 3bb0BuqFU82NBB01AFr7EaSdEl7g4A8+/W6YmRSI1+ucrN+oM4x4Z0/+jsM9zbPm v4fhRzLMTukjRrdcwnCb3+vb8VxWQPm7KoLTK099vRx/PTnQJJMbqXgwo02HVACu ONZVfu2IY68ZPUV9kCDR5j/AbwCn0Hjqma8KLMBh7d7kRiQUT9guIh7FbzdWWpMZ dISqjRzYOgWup4vj5dhWaluVnS+ZCicxtNJD2wc+TxZ9iDY4+28EbT7DzVWqyHqV kzXmcucG56MJ2nYunicTv9tZeM4AFWQ= -----END CERTIFICATE-----Generated at Mon Apr 28 03:09:36 2025 by rpki-client