$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa File: 68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa (raw, json) Hash identifier: Lojmvr6QLBN25s2amnhxPVDMR2O1HxvHxgBwgR7ZSSc= Subject key identifier: CC:46:5A:ED:A6:F9:D3:FD:E4:DE:B8:94:B3:6C:D4:07:5D:F1:38:B6 Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Certificate serial: 010D0C9F432858499829D1946B5BB64358B66280 Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 396032 IP address blocks: 64.38.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d1:94:6b:5b:b6:43:58:b6:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=1ce8da69-4222-4344-b3b3-85c68604a961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:ec:c1:90:4d:21:13:c7:03:ed:c5:ff:c7: 25:21:df:f7:6a:32:b0:d7:07:81:b9:ee:5e:cf:05: 4d:3f:de:b3:91:ab:4f:99:29:1e:49:2c:f3:c4:8d: 33:ff:ae:01:0c:6c:bb:99:f0:ee:a4:99:2e:0c:23: ca:1b:c1:f9:64:a1:53:2e:ff:27:72:39:f2:c2:35: a7:1c:39:a2:94:23:fa:fc:42:14:1d:58:cc:75:bc: 2c:8e:f2:b8:30:12:b7:fc:e6:5a:c7:09:f5:2a:96: f5:ca:ab:ac:f5:9f:31:5b:76:4f:ad:95:2a:be:24: 14:28:92:93:17:f6:1d:ae:7d:a7:8e:2d:55:72:44: 21:c6:35:b6:20:b3:46:31:97:d2:be:97:93:05:dc: e4:8b:67:7b:ba:db:1e:d1:69:28:39:1b:55:9b:2f: a1:8c:9e:33:11:9e:d2:64:57:3c:1f:3d:be:0b:6d: a4:37:9b:25:3f:14:09:2d:01:23:50:09:88:84:8b: 8d:50:42:6f:3b:e2:03:fc:28:d0:86:8a:a9:b5:8c: b0:ae:70:af:a1:24:a4:49:b6:42:ab:49:80:ad:34: 37:b8:07:17:47:9d:f3:b9:9d:b6:7d:94:c0:81:e3: 60:72:6f:d9:29:93:1f:54:60:a0:93:03:b4:e3:a7: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:5A:ED:A6:F9:D3:FD:E4:DE:B8:94:B3:6C:D4:07:5D:F1:38:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl X509v3 Authority Key Identifier: keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer sbgp-ipAddrBlock: critical IPv4: 64.38.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e9:d9:64:31:55:fc:a9:6b:1f:8c:49:62:04:4f:39:1a:74:3e: 42:00:4c:39:24:df:c4:56:a4:b4:f3:9b:66:5b:f5:72:a5:58: 2e:34:94:b6:17:52:90:b3:33:91:45:3d:20:ed:52:b6:37:10: bf:23:d4:61:a1:27:e6:54:b2:ff:fc:81:e0:8d:9b:1c:32:c0: 5c:8e:c7:e7:bc:6f:fb:9f:91:5d:59:00:b0:ac:be:11:72:21: b2:f0:12:83:a0:60:d5:81:be:47:6b:a4:0a:f5:1c:eb:70:9b: 0e:03:69:24:8d:07:b9:49:17:96:ff:e7:85:73:9e:5b:61:25: c2:b9:c1:b7:93:d7:0a:e0:76:8f:ea:59:67:ea:87:1d:fb:6b: 42:50:28:56:1b:1b:8a:41:94:ce:10:a6:05:99:c9:18:96:88: e7:a8:f0:08:1f:77:cd:7a:77:58:60:43:d4:4d:0d:a1:f4:2a: 95:0c:81:1b:47:00:63:ad:cd:b7:29:78:74:31:89:0c:b0:6c: 69:cf:bd:2b:dd:44:0d:8a:cb:34:bc:f1:d4:9d:01:0a:b8:c1: 07:9d:fd:48:0d:84:0d:2a:7c:c7:ed:b6:79:6c:dd:bf:c6:77: 5b:cd:37:7c:22:21:b9:e5:c2:7f:67:0e:d5:36:ee:30:a2:2a: 4e:30:88:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdGUa1u2Q1i2YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz YzE2MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MWNlOGRhNjktNDIyMi00MzQ0LWIzYjMtODVjNjg2MDRhOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE7swZBNIRPHA+3F/8clId/3ajKw1weBue5e zwVNP96zkatPmSkeSSzzxI0z/64BDGy7mfDupJkuDCPKG8H5ZKFTLv8ncjnywjWn HDmilCP6/EIUHVjMdbwsjvK4MBK3/OZaxwn1Kpb1yqus9Z8xW3ZPrZUqviQUKJKT F/Ydrn2nji1VckQhxjW2ILNGMZfSvpeTBdzki2d7utse0WkoORtVmy+hjJ4zEZ7S ZFc8Hz2+C22kN5slPxQJLQEjUAmIhIuNUEJvO+ID/CjQhoqptYywrnCvoSSkSbZC q0mArTQ3uAcXR53zuZ22fZTAgeNgcm/ZKZMfVGCgkwO046cIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxGWu2m+dP95N64lLNs1Add8Ti2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvNjhkYzY4YWUtYjZjNC0z NzAxLWEyYWQtNjIwOThiMWYxMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3 MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2 ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOnZZDFV/KlrH4xJYgRPORp0PkIATDkk38RWpLTzm2Zb9XKlWC40lLYX UpCzM5FFPSDtUrY3EL8j1GGhJ+ZUsv/8geCNmxwywFyOx+e8b/ufkV1ZALCsvhFy IbLwEoOgYNWBvkdrpAr1HOtwmw4DaSSNB7lJF5b/54VznlthJcK5wbeT1wrgdo/q WWfqhx37a0JQKFYbG4pBlM4QpgWZyRiWiOeo8Agfd816d1hgQ9RNDaH0KpUMgRtH AGOtzbcpeHQxiQywbGnPvSvdRA2KyzS88dSdAQq4wQed/UgNhA0qfMfttnls3b/G d1vNN3wiIbnlwn9nDtU27jCiKk4wiI4= -----END CERTIFICATE-----Generated at Mon Apr 28 06:08:35 2025 by rpki-client