$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa File: 734ca13e-dcbf-3086-8d93-d83e559240e6.roa (raw, json) Hash identifier: lSNOIeuzDQyR9BW4Jl1HKeD4i5O4JR0aQzxsHed1Lm4= Subject key identifier: 1F:F5:ED:B0:E6:1A:EE:C6:9D:B4:B5:AB:EF:75:53:F9:7E:17:06:62 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BD1047D9AAE390E0C3200 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 68.232.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d1:04:7d:9a:ae:39:0e:0c:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=a3eefe52-da32-4eb2-88f9-58be450e16c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:03:58:f4:9d:2d:a9:2f:fb:48:a4:6c:a3: cd:7b:71:ba:69:d5:24:aa:c4:e7:6b:60:ba:d8:0d: ea:1f:39:89:22:df:23:6f:06:86:48:1a:3b:a5:e4: 28:80:bb:c6:2e:eb:3e:7c:b8:7d:10:d0:f0:c7:58: a5:3d:b4:78:f8:5c:af:70:b3:23:b0:29:fd:26:03: 30:28:c6:14:73:27:0c:c1:f0:59:47:2c:f3:43:f5: 37:e1:ad:c2:a9:86:10:77:e7:ea:05:36:89:df:09: e4:01:1e:62:24:b8:1a:39:11:38:9f:65:99:29:64: a6:1e:98:4c:d3:39:97:d8:72:6a:b6:2c:dc:9d:06: b1:20:19:07:b7:25:a7:fd:5e:bc:15:00:3e:43:27: 50:4d:b2:94:93:d7:e5:d8:9c:f9:2a:21:03:13:19: 43:80:58:57:b1:a5:a2:3d:1a:34:94:fa:0c:9c:a0: f3:9f:84:76:1c:e5:c4:26:84:89:30:d4:62:eb:ad: 3e:e6:98:c7:48:16:26:50:c3:b0:7a:7f:69:38:fd: 6b:d7:fe:1a:cc:a9:8c:31:6f:90:0d:a4:3a:5b:6b: f5:17:92:3e:ca:69:f2:eb:6f:71:aa:ba:87:7d:bc: e8:10:6c:31:bb:77:ba:0a:0b:d0:61:2e:bf:95:f2: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:ED:B0:E6:1A:EE:C6:9D:B4:B5:AB:EF:75:53:F9:7E:17:06:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5c:dd:f2:de:58:a7:bf:fe:92:a0:99:62:eb:da:5e:05:8b: 4d:34:e6:14:e3:2d:c5:fa:68:0c:d7:fe:33:25:c0:4f:8a:a6: 7e:d0:a1:3e:a0:89:5f:52:5e:1a:6d:83:0b:4f:66:d4:02:cc: 41:1d:09:c4:2c:d2:5e:07:eb:4c:90:8c:fa:f2:5f:73:8c:0b: 0a:41:17:9e:47:37:c1:1d:ad:88:49:6d:14:ef:41:ec:6b:36: ba:53:d3:08:f3:28:cd:c0:a3:76:5f:e3:57:1b:d3:d5:38:87: 9f:a6:76:d3:72:df:ca:95:6d:cb:7e:0a:63:8b:af:a8:4b:90: 92:98:be:52:64:92:28:e8:b6:79:58:e1:79:f2:c9:75:84:0d: f7:0c:52:9b:bf:da:43:5c:8a:90:f1:84:98:5f:73:fd:1a:10: bf:f0:d7:65:95:a6:e6:20:dc:fd:0c:1b:2e:c0:b3:3f:11:28: 72:02:6d:07:d5:0f:93:8f:f0:e3:b2:18:81:f1:88:1f:0c:f6: 34:ce:9a:71:5e:aa:f6:1a:de:c5:ac:ca:7e:80:5d:8d:c8:f3: 95:70:bd:66:73:65:18:60:87:96:23:1a:cb:63:f7:19:5f:57: b6:f5:82:71:13:57:f6:df:3b:0a:89:0f:14:f1:8e:74:0c:2b: 8c:33:bc:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9EEfZquOQ4MMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YTNlZWZlNTItZGEzMi00ZWIyLTg4ZjktNThiZTQ1MGUxNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTQDWPSdLakv+0ikbKPNe3G6adUkqsTna2C6 2A3qHzmJIt8jbwaGSBo7peQogLvGLus+fLh9ENDwx1ilPbR4+FyvcLMjsCn9JgMw KMYUcycMwfBZRyzzQ/U34a3CqYYQd+fqBTaJ3wnkAR5iJLgaORE4n2WZKWSmHphM 0zmX2HJqtizcnQaxIBkHtyWn/V68FQA+QydQTbKUk9fl2Jz5KiEDExlDgFhXsaWi PRo0lPoMnKDzn4R2HOXEJoSJMNRi660+5pjHSBYmUMOwen9pOP1r1/4azKmMMW+Q DaQ6W2v1F5I+ymny629xqrqHfbzoEGwxu3e6CgvQYS6/lfK2FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/17bDmGu7GnbS1q+91U/l+FwZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNzM0Y2ExM2UtZGNiZi0z MDg2LThkOTMtZDgzZTU1OTI0MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJc3fLeWKe//pKgmWLr2l4Fi0005hTjLcX6aAzX/jMlwE+Kpn7QoT6g iV9SXhptgwtPZtQCzEEdCcQs0l4H60yQjPryX3OMCwpBF55HN8EdrYhJbRTvQexr NrpT0wjzKM3Ao3Zf41cb09U4h5+mdtNy38qVbct+CmOLr6hLkJKYvlJkkijotnlY 4XnyyXWEDfcMUpu/2kNcipDxhJhfc/0aEL/w12WVpuYg3P0MGy7Asz8RKHICbQfV D5OP8OOyGIHxiB8M9jTOmnFeqvYa3sWsyn6AXY3I85VwvWZzZRhgh5YjGstj9xlf V7b1gnETV/bfOwqJDxTxjnQMK4wzvOo= -----END CERTIFICATE-----Generated at Tue Apr 29 01:49:52 2025 by rpki-client