$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa File: 347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa (raw, json) Hash identifier: qySBPQSNBMlEfVHNBf6lClBuMSGPcFm1P3p9dqU7cy0= Subject key identifier: 84:0C:B0:7F:28:17:4C:CD:8C:25:47:16:CE:D4:55:F4:1B:D6:BE:DB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858492CAE9858D9F377326D8BBF80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 30238 IP address blocks: 68.232.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:98:58:d9:f3:77:32:6d:8b:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=0200ca0a-af13-4e51-857f-070dffc3eceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:81:58:3f:9f:31:0e:be:44:07:0c:e8:9e: 3a:51:d3:1e:03:49:c6:b3:f7:10:7b:1b:1c:28:e4: 7e:e6:a8:39:14:cf:36:bb:c5:04:f3:5d:10:ee:71: e4:c1:df:6b:49:eb:29:5e:c5:8f:39:3c:5f:c9:81: e8:74:86:49:d9:b8:34:a6:af:f9:96:58:6c:87:f6: b3:0b:a0:00:ae:a2:08:cf:fd:a4:64:2d:cb:66:a0: 6a:03:ae:15:15:76:2c:40:b2:3d:97:a4:3d:73:58: 49:8c:08:72:4d:85:9d:af:b2:39:81:4b:c4:cb:1d: 31:0f:de:79:04:41:a8:8b:88:1a:cd:17:0b:dc:9e: 12:ee:7a:59:fe:b9:c1:0b:62:a8:2c:72:66:94:3a: 16:ec:85:98:42:87:ac:ce:7f:25:ce:ea:20:a1:82: ed:42:aa:74:5f:d1:b5:7c:05:17:c1:3c:e9:04:62: 14:eb:c3:ae:51:73:7f:8d:52:18:c7:02:fe:5f:37: a0:e0:29:8f:47:5a:c7:ab:ac:71:17:7d:74:42:7b: a4:5b:f7:ca:b0:f3:5f:21:bd:8b:85:b1:a0:ba:c4: 56:37:e6:85:36:4d:ed:26:02:da:6c:2a:f3:b2:93: ad:a8:6f:54:de:c8:17:27:49:bd:f4:94:37:8b:b0: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0C:B0:7F:28:17:4C:CD:8C:25:47:16:CE:D4:55:F4:1B:D6:BE:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c3:63:a8:0c:cd:19:b6:0c:00:c2:90:d6:52:6d:d2:7f:45: f3:1e:54:83:ba:b6:3b:d6:c7:b6:e7:0d:a0:3e:2f:7c:43:ba: c1:83:44:a4:d3:4a:9c:de:91:34:f1:92:f4:51:ce:c5:25:9c: 9f:e4:50:6c:96:28:a7:b8:10:e7:00:1c:12:81:08:a3:ee:10: e1:5c:ad:eb:66:88:5a:15:d5:08:4e:42:35:bb:45:0c:44:52: 8a:67:d0:cc:64:50:d2:e7:f7:2a:e5:c5:f4:c3:ec:56:ea:c8: fa:b7:c3:70:c1:be:0b:85:a3:2b:fd:55:34:1b:2f:52:d6:41: db:cb:76:a3:56:45:76:28:93:91:28:5e:8d:83:f7:32:b0:5c: 7c:e6:09:50:77:ac:b1:32:e2:cb:90:4e:86:c3:09:3d:ba:e1: da:14:4a:a4:c2:3e:f0:88:60:db:4d:a7:99:93:be:aa:f5:78: a7:be:37:9f:3f:4e:12:7b:f2:e4:79:c9:b0:68:c9:50:a4:1c: 79:c0:c8:86:c7:06:55:94:16:fe:3a:d8:4d:ff:26:85:c3:c2: e0:53:bf:a7:6b:7e:a9:6f:63:d7:18:3d:fe:9f:29:a3:e4:a6: 3e:bf:28:43:ae:ad:c7:46:a9:3f:08:17:48:0b:43:8b:f3:41: 83:89:14:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrphY2fN3Mm2Lv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDIwMGNhMGEtYWYxMy00ZTUxLTg1N2YtMDcwZGZmYzNlY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2+BWD+fMQ6+RAcM6J46UdMeA0nGs/cQexsc KOR+5qg5FM82u8UE810Q7nHkwd9rSespXsWPOTxfyYHodIZJ2bg0pq/5llhsh/az C6AArqIIz/2kZC3LZqBqA64VFXYsQLI9l6Q9c1hJjAhyTYWdr7I5gUvEyx0xD955 BEGoi4gazRcL3J4S7npZ/rnBC2KoLHJmlDoW7IWYQoeszn8lzuogoYLtQqp0X9G1 fAUXwTzpBGIU68OuUXN/jVIYxwL+Xzeg4CmPR1rHq6xxF310QnukW/fKsPNfIb2L hbGgusRWN+aFNk3tJgLabCrzspOtqG9U3sgXJ0m99JQ3i7C9nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQMsH8oF0zNjCVHFs7UVfQb1r7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzQ3YmQ4NWUtODZjNy0z ZDM2LWFiMzctZTFhMTAxY2NhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzDY6gMzRm2DADCkNZSbdJ/RfMeVIO6tjvWx7bnDaA+L3xDusGDRKTT SpzekTTxkvRRzsUlnJ/kUGyWKKe4EOcAHBKBCKPuEOFcretmiFoV1QhOQjW7RQxE Uopn0MxkUNLn9yrlxfTD7FbqyPq3w3DBvguFoyv9VTQbL1LWQdvLdqNWRXYok5Eo Xo2D9zKwXHzmCVB3rLEy4suQTobDCT264doUSqTCPvCIYNtNp5mTvqr1eKe+N58/ ThJ78uR5ybBoyVCkHHnAyIbHBlWUFv462E3/JoXDwuBTv6drfqlvY9cYPf6fKaPk pj6/KEOurcdGqT8IF0gLQ4vzQYOJFJ8= -----END CERTIFICATE-----Generated at Mon Apr 28 12:26:47 2025 by rpki-client