$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa File: 2facff71-9840-3679-b83b-43e50bddf021.roa (raw, json) Hash identifier: NMfHmbYwzX0hbYWi5LNtDChisV3hpor8edKJBUJ+zlI= Subject key identifier: 74:97:4C:69:D4:7F:24:7E:14:9B:C1:7F:D6:0E:58:E3:C2:DA:82:B9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584975446152EE7A4FA4C8F5D700 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 16417 IP address blocks: 68.232.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:61:52:ee:7a:4f:a4:c8:f5:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=e901a19d-7c8d-4137-9a8d-6f7f3c166f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:cd:f7:d3:b6:84:3a:58:9e:62:ec:ee:fd: 3d:14:38:b0:63:6b:cc:ad:f8:bf:b4:23:ab:f0:58: 1d:de:28:30:db:b4:1f:bb:d5:00:41:83:28:b8:54: eb:4e:6d:36:4b:87:f4:19:02:64:9e:9e:a3:96:a4: b3:5e:68:ec:a6:55:16:bc:0b:31:70:d2:c7:38:34: 77:c2:19:86:8d:12:1c:82:ec:ba:cf:17:a3:4b:de: e9:36:2c:f7:5e:6c:91:5e:03:22:e7:d9:c0:3d:77: 95:df:9a:9f:d5:45:c6:52:7a:02:4f:3d:fd:0b:14: a7:2d:e6:ed:63:a5:f6:1b:9d:a8:78:9d:93:17:db: 5e:e5:bd:b8:ae:ee:ef:dd:1f:db:db:8b:4b:af:94: e9:c7:6a:d3:95:5f:d5:16:12:8d:76:de:a4:a2:b5: a0:aa:85:9a:61:48:a7:7f:79:f7:b4:36:bb:56:68: 3c:ed:06:e9:a9:d3:70:65:14:84:a0:e8:de:ba:45: f4:01:84:10:9c:0b:98:eb:90:06:15:91:fc:55:a9: d6:22:54:36:9c:c1:94:72:0e:16:6e:e6:59:9d:81: 9b:eb:46:15:31:2a:a1:b8:72:39:a8:17:47:75:2b: 44:9b:b6:1c:9d:d3:ed:52:09:15:83:27:f4:58:32: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:97:4C:69:D4:7F:24:7E:14:9B:C1:7F:D6:0E:58:E3:C2:DA:82:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:da:bc:23:61:b3:79:38:98:a5:38:06:9b:9a:b7:d2:e6:8f: 28:9e:96:90:d5:ef:e5:87:31:74:c4:60:44:59:1e:ab:b9:3e: 61:65:1a:72:12:20:8e:9b:c0:24:26:da:37:05:c0:d1:f3:19: f5:cf:ff:5f:c3:45:40:9c:51:95:2e:98:84:40:48:ec:e0:5f: 7c:85:cf:54:12:e5:0d:57:60:1a:c8:84:bc:49:f8:50:11:5e: 2c:37:f1:25:bb:13:8a:c4:d5:56:df:3d:57:a4:30:ce:5d:90: 50:a6:bd:ec:4b:33:fb:72:c2:e9:15:92:79:a9:ca:2b:d2:f2: 22:66:8e:99:f9:a1:f5:0d:16:fd:0c:a6:18:4d:4b:95:5d:0e: 71:1e:0e:fa:40:f5:7d:23:4c:82:40:2d:e0:08:d2:a4:10:f0: b3:38:c7:c3:b3:4b:15:e0:7d:11:52:f5:3f:58:3b:e5:e5:31: 7c:57:62:82:47:00:b2:f7:1e:c2:87:5a:6b:51:54:42:bd:e2: 1a:84:32:7d:c5:86:09:42:f2:12:d4:63:32:c2:56:c4:8f:b0: 56:94:78:b8:e5:40:db:e6:66:04:c5:c5:f0:08:4e:ed:84:19: cc:63:c7:39:3b:04:91:be:06:ee:53:71:60:c8:d5:6a:8c:35: 36:b4:92:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RGFS7npPpMj11wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZTkwMWExOWQtN2M4ZC00MTM3LTlhOGQtNmY3ZjNjMTY2ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSLN99O2hDpYnmLs7v09FDiwY2vMrfi/tCOr 8Fgd3igw27Qfu9UAQYMouFTrTm02S4f0GQJknp6jlqSzXmjsplUWvAsxcNLHODR3 whmGjRIcguy6zxejS97pNiz3XmyRXgMi59nAPXeV35qf1UXGUnoCTz39CxSnLebt Y6X2G52oeJ2TF9te5b24ru7v3R/b24tLr5Tpx2rTlV/VFhKNdt6korWgqoWaYUin f3n3tDa7Vmg87QbpqdNwZRSEoOjeukX0AYQQnAuY65AGFZH8VanWIlQ2nMGUcg4W buZZnYGb60YVMSqhuHI5qBdHdStEm7YcndPtUgkVgyf0WDKeAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSXTGnUfyR+FJvBf9YOWOPC2oK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMmZhY2ZmNzEtOTg0MC0z Njc5LWI4M2ItNDNlNTBiZGRmMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDavCNhs3k4mKU4Bpuat9LmjyielpDV7+WHMXTEYERZHqu5PmFlGnIS II6bwCQm2jcFwNHzGfXP/1/DRUCcUZUumIRASOzgX3yFz1QS5Q1XYBrIhLxJ+FAR Xiw38SW7E4rE1VbfPVekMM5dkFCmvexLM/tywukVknmpyivS8iJmjpn5ofUNFv0M phhNS5VdDnEeDvpA9X0jTIJALeAI0qQQ8LM4x8OzSxXgfRFS9T9YO+XlMXxXYoJH ALL3HsKHWmtRVEK94hqEMn3FhglC8hLUYzLCVsSPsFaUeLjlQNvmZgTFxfAITu2E Gcxjxzk7BJG+Bu5TcWDI1WqMNTa0kvI= -----END CERTIFICATE-----Generated at Mon Apr 28 15:07:11 2025 by rpki-client