$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa558554-083a-3213-9dd3-eaea5b20fec7.roa File: fa558554-083a-3213-9dd3-eaea5b20fec7.roa (raw, json) Hash identifier: IXtWCNp3hqNJs3Vg0tVPmm7HvWqC+5b3ceOfJQhVliQ= Subject key identifier: 61:F7:65:FB:1A:FD:F4:B1:21:71:76:9E:AA:B6:B5:15:DA:56:03:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EA85253D773DBB0E60949080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa558554-083a-3213-9dd3-eaea5b20fec7.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 701 IP address blocks: 68.133.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:25:3d:77:3d:bb:0e:60:94:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=18ab1429-f4d4-4b42-bec5-b87a55832a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:2f:cc:2c:e2:0f:ed:57:0a:50:55:26:cf: 44:83:7c:b5:78:b6:47:41:00:28:64:0c:63:06:8d: a4:ba:dd:05:2f:38:17:75:26:86:51:d9:f8:75:9d: e5:cc:c7:c8:12:2f:97:49:90:f8:58:10:e7:a1:e4: 0b:17:9b:af:58:a3:8a:04:0a:19:ae:44:d4:b6:dc: a0:0c:ae:47:f3:f1:fd:c0:31:00:ec:7f:1a:bb:17: 7e:28:79:98:b2:02:ac:20:fb:cc:3e:55:80:94:f4: 56:58:d7:f2:e2:f1:67:54:af:59:e1:69:4a:ea:76: b7:6c:7f:c0:26:fa:f7:dc:be:ac:dd:d9:79:ab:27: b6:22:d0:e8:1e:18:8f:9b:1e:df:2a:70:c9:59:d8: e5:08:06:86:6d:a2:f4:01:6e:68:11:8b:df:ac:b3: cf:64:63:3a:b8:0d:82:9b:cb:88:3d:f4:fe:92:37: 8d:f8:cd:7d:81:2c:30:ab:6c:0b:10:d5:14:19:27: e6:5f:4c:57:b9:18:87:bf:21:e9:e9:8c:44:87:b5: 25:ff:00:d7:d4:56:75:a8:fc:32:d7:d0:1c:b8:ce: ab:a1:e1:91:59:be:50:b9:a3:da:54:5d:35:0c:c3: 4c:1a:0c:22:48:6d:8d:e4:34:9b:a6:85:ff:21:19: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F7:65:FB:1A:FD:F4:B1:21:71:76:9E:AA:B6:B5:15:DA:56:03:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa558554-083a-3213-9dd3-eaea5b20fec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.133.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:73:49:88:5c:36:04:19:2e:59:d9:e6:8d:4d:95:96:81:89: cb:7e:d3:04:48:36:24:ca:82:fd:29:3a:b6:7d:4b:97:6b:1b: de:4c:dc:b5:e0:72:34:29:d8:95:63:28:c4:38:2d:a8:98:ee: 84:d4:b9:58:35:f7:11:00:38:bd:92:bd:dc:51:3d:63:bf:c4: ee:5d:ca:76:07:dd:23:d9:6d:21:83:f2:a5:52:a8:2b:27:c9: 98:73:a7:c0:2b:1d:f1:4c:77:60:71:29:07:7b:2b:17:05:02: 48:65:ba:d8:cd:dd:f6:3b:31:35:57:16:f5:3c:99:0d:0d:9b: 0f:91:e2:a6:82:49:08:15:81:27:59:27:ca:9d:1b:4a:2a:b1: 3c:5d:01:da:ba:fd:98:74:b4:68:63:5b:e7:60:f4:78:6a:f9: e5:2b:05:79:07:14:fc:0c:8a:66:67:b0:1b:6e:9f:e7:35:8d: 3e:02:24:bf:1f:6f:51:b7:74:54:06:95:98:35:1b:11:d4:30: 4a:4a:2f:ad:68:31:63:9f:30:c8:ca:e2:97:c6:71:df:6e:8d: 95:42:5c:dc:0d:d4:10:44:cd:49:6b:16:98:50:41:d3:7b:a9: b9:36:f6:55:a0:04:9c:3e:1d:40:1a:68:7b:4c:77:a7:57:f6: 4e:4b:de:25 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnqhSU9dz27DmCUkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MThhYjE0MjktZjRkNC00YjQyLWJlYzUtYjg3YTU1ODMyYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1kvzCziD+1XClBVJs9Eg3y1eLZHQQAoZAxj Bo2kut0FLzgXdSaGUdn4dZ3lzMfIEi+XSZD4WBDnoeQLF5uvWKOKBAoZrkTUttyg DK5H8/H9wDEA7H8auxd+KHmYsgKsIPvMPlWAlPRWWNfy4vFnVK9Z4WlK6na3bH/A Jvr33L6s3dl5qye2ItDoHhiPmx7fKnDJWdjlCAaGbaL0AW5oEYvfrLPPZGM6uA2C m8uIPfT+kjeN+M19gSwwq2wLENUUGSfmX0xXuRiHvyHp6YxEh7Ul/wDX1FZ1qPwy 19AcuM6roeGRWb5QuaPaVF01DMNMGgwiSG2N5DSbpoX/IRmvIwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGH3Zfsa/fSxIXF2nqq2tRXaVgO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmE1NTg1NTQtMDgzYS0z MjEzLTlkZDMtZWFlYTViMjBmZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATnNJiFw2BBkuWdnmjU2VloGJy37TBEg2JMqC/Sk6tn1Ll2sb3kzcteBy NCnYlWMoxDgtqJjuhNS5WDX3EQA4vZK93FE9Y7/E7l3KdgfdI9ltIYPypVKoKyfJ mHOnwCsd8Ux3YHEpB3srFwUCSGW62M3d9jsxNVcW9TyZDQ2bD5HipoJJCBWBJ1kn yp0bSiqxPF0B2rr9mHS0aGNb52D0eGr55SsFeQcU/AyKZmewG26f5zWNPgIkvx9v Ubd0VAaVmDUbEdQwSkovrWgxY58wyMril8Zx326NlUJc3A3UEETNSWsWmFBB03up uTb2VaAEnD4dQBpoe0x3p1f2TkveJQ== -----END CERTIFICATE-----Generated at Wed Jun 18 16:02:29 2025 by rpki-client