$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa File: 379a4041-9b9d-3d0e-bb79-4431614aa2db.roa (raw, json) Hash identifier: L30QL72+KPNukQ32fFbTdtDYs1o8jStn4yaoBVkbDuA= Subject key identifier: 33:38:1F:DB:8C:FB:7E:37:50:5F:37:E5:D5:1C:4E:56:72:44:EC:7B Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F432858499294A134FE8E083DA29B4980 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 212238 IP address blocks: 68.67.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a1:34:fe:8e:08:3d:a2:9b:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=7a42885c-6275-4487-b4a3-875924dfe6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:5d:ef:7f:62:4f:ff:f8:45:a1:0b:0c:6a: 7e:ac:32:dd:58:5d:6e:38:5a:ed:77:e8:16:36:0d: fc:db:00:94:de:7b:83:ad:aa:4b:ee:06:cc:4b:88: cc:b0:6c:69:69:8d:27:6f:27:ad:ee:f1:88:3f:b1: 6b:97:d7:7f:0a:f5:9c:27:7e:f1:3c:05:7e:34:d9: a6:5e:cc:eb:b4:08:90:22:38:cc:5f:e7:f5:46:62: 7e:45:a7:55:44:f4:c9:bc:2b:dd:96:81:fe:01:e5: fb:14:f4:b7:f5:a7:07:d2:f0:8f:a5:0a:84:e9:a5: 65:5e:ac:71:b3:9f:64:3e:15:e3:cc:73:fb:c4:8e: 9c:4e:8e:9d:96:8b:f9:ad:c8:15:d2:86:32:2d:98: 1a:f1:9e:ad:a4:9c:d1:23:86:29:d4:32:4a:e0:30: 65:b8:88:ca:c8:e7:9a:4d:78:fa:5e:f3:a4:a2:a7: f4:82:70:15:be:3d:fa:be:af:20:e5:2a:aa:2e:55: a4:18:c3:fc:8a:23:49:2f:3c:91:57:40:35:2e:42: 75:d3:90:36:cf:3e:89:ac:50:73:0a:d6:c3:b9:0f: 12:8f:6c:88:a1:44:4d:75:46:a6:a7:18:34:98:83: a0:df:32:62:71:3a:48:ca:6d:d7:09:b4:6d:c1:ef: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:38:1F:DB:8C:FB:7E:37:50:5F:37:E5:D5:1C:4E:56:72:44:EC:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:99:66:7e:52:3c:b2:d3:de:c3:41:f2:d2:63:c0:d0:07:d8: 9d:72:22:43:df:4c:63:b6:99:cb:bd:ba:e4:33:89:ee:a0:c7: 56:9a:78:c4:31:9f:ce:0a:d0:3c:5e:00:54:12:ab:54:54:ac: bb:8e:e4:bf:77:6a:92:f6:44:3b:c9:b1:3f:40:15:06:bb:0e: a4:1d:ca:f3:bc:e0:23:a7:bb:14:60:ec:e9:f9:f0:4b:fd:78: 58:92:d9:78:49:7f:40:50:f9:a4:a1:10:51:b3:bf:59:fc:0c: e6:76:f0:00:b9:17:27:d3:d5:cc:2a:59:4c:2b:b1:09:d3:76: ff:6f:c4:99:e3:f9:c4:c7:2b:dd:c2:b7:1c:dd:7c:6d:fb:95: 0c:da:f7:b2:17:09:fc:70:dc:d4:b4:c0:71:fa:d1:75:95:2c: 1c:21:39:bb:e6:bb:32:70:23:bf:af:c4:19:60:e8:0c:cc:e6: 26:2b:83:76:b0:66:6a:0d:6c:a2:7d:3d:f8:43:07:7f:e4:03: 9f:e5:47:7a:7a:13:77:f3:54:a6:8a:49:76:4a:ec:ea:d8:4c: 9e:a5:ed:b6:ed:cb:41:86:3e:1c:28:ec:6f:7a:1f:a9:71:2a: 40:da:36:eb:ff:cd:a1:79:b5:52:bf:60:a8:d4:6e:63:e3:a4: ab:e7:03:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKE0/o4IPaKbSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk N2E0Mjg4NWMtNjI3NS00NDg3LWI0YTMtODc1OTI0ZGZlNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBd739iT//4RaELDGp+rDLdWF1uOFrtd+gW Ng382wCU3nuDrapL7gbMS4jMsGxpaY0nbyet7vGIP7Frl9d/CvWcJ37xPAV+NNmm XszrtAiQIjjMX+f1RmJ+RadVRPTJvCvdloH+AeX7FPS39acH0vCPpQqE6aVlXqxx s59kPhXjzHP7xI6cTo6dlov5rcgV0oYyLZga8Z6tpJzRI4Yp1DJK4DBluIjKyOea TXj6XvOkoqf0gnAVvj36vq8g5SqqLlWkGMP8iiNJLzyRV0A1LkJ105A2zz6JrFBz CtbDuQ8Sj2yIoURNdUampxg0mIOg3zJicTpIym3XCbRtwe/jqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM4H9uM+343UF835dUcTlZyROx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMzc5YTQwNDEtOWI5ZC0z ZDBlLWJiNzktNDQzMTYxNGFhMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeZZn5SPLLT3sNB8tJjwNAH2J1yIkPfTGO2mcu9uuQzie6gx1aaeMQx n84K0DxeAFQSq1RUrLuO5L93apL2RDvJsT9AFQa7DqQdyvO84COnuxRg7On58Ev9 eFiS2XhJf0BQ+aShEFGzv1n8DOZ28AC5FyfT1cwqWUwrsQnTdv9vxJnj+cTHK93C txzdfG37lQza97IXCfxw3NS0wHH60XWVLBwhObvmuzJwI7+vxBlg6AzM5iYrg3aw ZmoNbKJ9PfhDB3/kA5/lR3p6E3fzVKaKSXZK7OrYTJ6l7bbty0GGPhwo7G96H6lx KkDaNuv/zaF5tVK/YKjUbmPjpKvnAzE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:47 2025 by rpki-client