$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa File: 347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa (raw, json) Hash identifier: lMcYL8N5X5/4dH4iAbQcyRUM2cImJeyHgyQIihtMong= Subject key identifier: B7:51:BF:B9:EE:38:38:64:B6:ED:FB:E3:48:0B:4E:19:51:AA:AE:65 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A0C056F703380C0084297BBC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 30238 IP address blocks: 68.232.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6f:70:33:80:c0:08:42:97:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d2463cd2-7e63-4a33-9957-c10696757716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:b5:fd:46:fc:f7:8c:9f:42:3c:ab:9a:e2: 6b:6e:fe:eb:e8:05:12:2a:c4:25:34:fe:d7:de:ba: cf:92:05:c7:e6:75:bb:0b:50:31:12:96:79:34:c6: 17:e7:2e:e0:3b:0a:55:69:ad:59:08:f7:19:2c:83: 93:13:43:24:62:d3:c6:e2:5c:cd:24:da:15:3d:b4: 7d:15:8d:42:cc:78:59:77:4d:60:66:65:28:c5:27: f5:f5:b3:94:41:7d:a9:ce:38:08:ec:cb:0a:f7:a8: fc:f0:d4:a7:04:b4:c5:e6:04:1d:f3:3b:7a:03:84: cf:29:db:02:b5:df:37:78:0d:64:65:e0:3a:69:78: 1e:80:d3:af:20:c5:b3:a6:bf:96:fe:74:33:70:42: 32:44:62:72:93:5c:da:66:7f:4b:56:25:6f:16:68: d0:d8:17:93:c8:57:9b:d2:77:85:0e:81:09:f0:b8: 05:a5:b6:01:9f:59:ec:8e:6e:58:cc:73:03:6a:fa: 9b:c9:ca:b1:42:b8:61:70:3d:9e:a4:c9:ba:eb:0f: 76:33:29:e7:d8:94:19:f6:a1:f4:dd:f2:e5:f6:cd: d2:65:2b:16:5a:e1:49:a3:41:e3:3d:48:e1:22:60: e9:ce:92:74:46:51:e8:25:72:c2:80:50:a9:82:7c: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:51:BF:B9:EE:38:38:64:B6:ED:FB:E3:48:0B:4E:19:51:AA:AE:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:a6:3b:71:7f:29:05:52:af:6e:0c:5f:00:c5:e2:cd:92:c2: 87:5a:0d:4a:4d:a8:61:2d:57:02:9a:af:b2:1e:5c:fa:4e:35: cd:0d:86:57:28:79:6b:6e:bf:e6:60:29:78:f1:4d:e9:70:d2: b0:8d:a1:cf:50:54:a9:0e:9f:74:c4:63:2c:2c:b0:15:89:68: d0:aa:c3:9b:41:28:07:04:63:2d:89:47:d3:ee:45:59:b8:83: 60:8e:88:48:7d:99:55:e9:28:5c:1d:ca:82:c2:a5:47:21:24: d3:1a:52:2f:28:6e:e9:67:d2:32:6d:88:05:42:5f:45:41:9d: 09:68:00:5c:2f:7d:18:ea:f3:a8:dc:a7:0c:68:64:ee:71:28: a3:6e:30:2a:83:b9:3c:8b:ee:08:20:fa:89:91:7a:dc:75:8f: c5:a4:76:d3:27:88:87:bd:3f:0c:1f:02:09:5a:5e:7e:95:05: 66:c7:37:58:93:5c:2a:7c:01:8f:4a:91:7d:56:70:ab:db:75: 5e:9f:27:1f:36:3a:b1:8a:5e:18:ad:78:95:e1:3b:8b:84:f1: 0e:41:9c:48:e8:83:38:24:01:a3:ca:51:70:03:b7:5f:3b:cf: 43:ec:55:f7:d8:bc:4f:c9:58:b3:28:30:04:08:34:ae:76:95: dd:26:97:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBW9wM4DACEKXu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDI0NjNjZDItN2U2My00YTMzLTk5NTctYzEwNjk2NzU3NzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9q1/Ub894yfQjyrmuJrbv7r6AUSKsQlNP7X 3rrPkgXH5nW7C1AxEpZ5NMYX5y7gOwpVaa1ZCPcZLIOTE0MkYtPG4lzNJNoVPbR9 FY1CzHhZd01gZmUoxSf19bOUQX2pzjgI7MsK96j88NSnBLTF5gQd8zt6A4TPKdsC td83eA1kZeA6aXgegNOvIMWzpr+W/nQzcEIyRGJyk1zaZn9LViVvFmjQ2BeTyFeb 0neFDoEJ8LgFpbYBn1nsjm5YzHMDavqbycqxQrhhcD2epMm66w92Mynn2JQZ9qH0 3fLl9s3SZSsWWuFJo0HjPUjhImDpzpJ0RlHoJXLCgFCpgnzx+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdRv7nuODhktu3740gLThlRqq5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzQ3YmQ4NWUtODZjNy0z ZDM2LWFiMzctZTFhMTAxY2NhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCmO3F/KQVSr24MXwDF4s2SwodaDUpNqGEtVwKar7IeXPpONc0Nhlco eWtuv+ZgKXjxTelw0rCNoc9QVKkOn3TEYywssBWJaNCqw5tBKAcEYy2JR9PuRVm4 g2COiEh9mVXpKFwdyoLCpUchJNMaUi8obuln0jJtiAVCX0VBnQloAFwvfRjq86jc pwxoZO5xKKNuMCqDuTyL7ggg+omRetx1j8WkdtMniIe9PwwfAglaXn6VBWbHN1iT XCp8AY9KkX1WcKvbdV6fJx82OrGKXhiteJXhO4uE8Q5BnEjogzgkAaPKUXADt187 z0PsVffYvE/JWLMoMAQINK52ld0mlyU= -----END CERTIFICATE-----Generated at Mon Jun 16 12:25:13 2025 by rpki-client