$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e72af840-3a40-3474-98bc-76b68a34ef2c.roa File: e72af840-3a40-3474-98bc-76b68a34ef2c.roa (raw, json) Hash identifier: 8Mv3v9+nnvWJ8/FXtgJL+Up3tjcsZXlRj3ipHAgcZkU= Subject key identifier: 28:BF:F7:21:63:EB:99:52:A3:25:5E:05:24:2A:5F:59:5C:60:D2:9D Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584A0D6A841C587F5CF5A84C4780 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e72af840-3a40-3474-98bc-76b68a34ef2c.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 400039 IP address blocks: 68.67.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:84:1c:58:7f:5c:f5:a8:4c:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=5b491881-b9bd-478d-8117-bf6390e751a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:3c:43:29:17:1f:2c:a8:58:6b:cf:04:01: c5:72:3d:6f:1f:e3:35:a4:9b:5a:0c:5a:d8:23:b6: a8:37:33:ad:0c:52:ff:9c:27:e6:e4:62:ba:89:3b: e6:bd:9a:06:32:ee:c0:ec:73:3c:5b:c1:da:01:64: f3:7e:97:0b:52:5b:e7:a4:8f:74:79:04:54:0f:0f: e7:8d:34:f3:cf:40:5d:db:60:49:24:65:27:ad:08: 0b:e4:13:7f:41:91:6e:06:ca:f4:d9:d1:ec:e1:5e: 4f:f9:c2:66:43:8c:f9:a4:b1:60:57:7a:cd:5c:22: ee:62:d1:b4:0d:74:2a:51:96:b6:ec:ec:1f:3f:20: 51:f8:b9:ad:fa:51:10:62:c2:60:a4:74:3e:fb:fe: 89:e7:b8:29:36:4b:d2:56:0f:be:82:d7:16:99:9e: 51:fb:3f:b8:93:07:4e:84:41:98:5e:91:c7:43:74: 74:e7:1e:9a:4d:cc:76:29:22:04:92:7b:cc:05:45: 03:0d:93:45:d0:73:74:8e:11:ff:94:14:a8:19:00: 6f:5d:8d:2b:49:7c:49:46:ac:ec:8d:a1:8c:66:83: b8:cc:e4:8e:56:60:7c:5a:2f:18:7f:4e:60:ff:e8: 73:f3:e3:e7:55:3c:f2:7d:a0:e4:fe:2c:35:38:42: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BF:F7:21:63:EB:99:52:A3:25:5E:05:24:2A:5F:59:5C:60:D2:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e72af840-3a40-3474-98bc-76b68a34ef2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9a:9d:9d:61:2f:4b:58:92:c5:c3:16:45:67:f9:89:bb:c8: 20:95:b1:2e:d5:7a:e4:16:5f:e8:59:0c:70:50:77:fc:26:5f: bf:3a:cb:d7:8c:a7:4a:05:c7:ea:b4:3d:4a:ad:82:6b:9e:b1: 14:ad:1c:54:99:31:a3:20:fb:da:1a:63:73:30:68:c2:05:46: 8f:bc:d8:76:78:1d:55:34:81:90:7a:2a:fa:85:87:7b:d2:07: ff:e0:02:aa:fe:62:59:cc:f5:32:45:51:58:a0:3c:64:67:04: db:cf:4e:f9:91:80:e1:a3:ed:76:a0:57:57:8e:2c:bd:1b:09: 8d:71:16:72:08:fb:83:e4:5b:52:00:09:c2:e4:56:ef:ec:5f: 45:8b:a5:de:c9:71:fe:09:9e:ff:81:3a:b9:15:2f:a6:66:8d: 90:eb:63:76:ca:68:c8:f9:a8:c1:49:93:99:2f:f8:c8:16:89: 47:73:e5:47:ba:c5:8b:3e:44:0a:27:54:c3:6a:5d:80:9f:e8: 56:5b:32:1c:a6:df:05:32:bd:5d:7b:a2:9d:35:c9:62:79:a9: fb:4b:91:ea:d4:2f:e8:64:4d:75:ae:32:a6:79:85:d2:57:45: 25:a8:a8:e8:6e:41:13:5b:46:f4:68:06:f2:e7:57:be:df:97: 51:81:0d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoQcWH9c9ahMR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk NWI0OTE4ODEtYjliZC00NzhkLTgxMTctYmY2MzkwZTc1MWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcE8QykXHyyoWGvPBAHFcj1vH+M1pJtaDFrY I7aoNzOtDFL/nCfm5GK6iTvmvZoGMu7A7HM8W8HaAWTzfpcLUlvnpI90eQRUDw/n jTTzz0Bd22BJJGUnrQgL5BN/QZFuBsr02dHs4V5P+cJmQ4z5pLFgV3rNXCLuYtG0 DXQqUZa27OwfPyBR+Lmt+lEQYsJgpHQ++/6J57gpNkvSVg++gtcWmZ5R+z+4kwdO hEGYXpHHQ3R05x6aTcx2KSIEknvMBUUDDZNF0HN0jhH/lBSoGQBvXY0rSXxJRqzs jaGMZoO4zOSOVmB8Wi8Yf05g/+hz8+PnVTzyfaDk/iw1OEKn8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi/9yFj65lSoyVeBSQqX1lcYNKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvZTcyYWY4NDAtM2E0MC0z NDc0LTk4YmMtNzZiNjhhMzRlZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOanZ1hL0tYksXDFkVn+Ym7yCCVsS7VeuQWX+hZDHBQd/wmX786y9eM p0oFx+q0PUqtgmuesRStHFSZMaMg+9oaY3MwaMIFRo+82HZ4HVU0gZB6KvqFh3vS B//gAqr+YlnM9TJFUVigPGRnBNvPTvmRgOGj7XagV1eOLL0bCY1xFnII+4PkW1IA CcLkVu/sX0WLpd7Jcf4Jnv+BOrkVL6ZmjZDrY3bKaMj5qMFJk5kv+MgWiUdz5Ue6 xYs+RAonVMNqXYCf6FZbMhym3wUyvV17op01yWJ5qftLkerUL+hkTXWuMqZ5hdJX RSWoqOhuQRNbRvRoBvLnV77fl1GBDaY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:59:04 2025 by rpki-client