$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa File: a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa (raw, json) Hash identifier: ooCFkix0UNkpQH+jDBZYgUZP1XlxjJmE6orJVXB7t3w= Subject key identifier: DD:2A:AF:8A:92:18:7E:33:5D:DE:1C:AC:43:83:E5:C1:21:BE:AD:F5 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858492CAE9873F3EC36648E563540 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 30238 IP address blocks: 68.232.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:98:73:f3:ec:36:64:8e:56:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1f9fd208-2e1d-49cc-92ea-266e6eecd199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:f9:fc:6e:db:64:7a:3f:33:c3:54:aa:8c: 9f:db:d6:a1:68:f5:a8:68:7a:a8:fb:a2:a4:9f:6d: 80:2c:5a:d8:9b:f8:ae:b2:f6:79:fd:90:10:b7:9c: 30:1f:55:c3:b1:31:45:dd:5f:be:09:53:b0:b2:7d: 3b:dd:7e:81:ff:c9:7b:f4:88:fc:08:9a:ba:99:53: 44:9a:5b:91:fe:05:14:66:a0:8c:71:b4:03:97:20: 9f:da:29:84:38:db:c5:5a:a6:56:af:4d:0d:23:a1: 5a:47:d2:97:72:e5:f8:b4:88:eb:99:e5:38:5f:b1: f7:f8:38:9b:01:d3:bf:ac:27:a0:f5:15:5d:21:69: 07:8c:f4:69:8f:fe:9a:13:88:9b:04:53:3e:78:4b: 23:53:19:2e:da:d1:2d:15:cd:38:69:0a:02:c9:42: 36:b3:d6:ad:10:8c:40:2c:8e:52:8d:f6:ee:4e:fe: d1:67:b1:c0:8b:ce:10:b7:cf:76:17:43:32:7c:3f: e7:30:da:84:25:d7:29:05:e1:e5:3e:73:d9:8d:cd: cd:07:94:e2:af:d1:70:f1:5e:cd:82:1a:01:c2:21: bd:9b:1c:aa:00:21:f3:08:0b:1d:92:97:c5:0c:d3: 4a:74:6b:34:b3:eb:7d:4e:27:de:c9:17:54:8c:5e: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:AF:8A:92:18:7E:33:5D:DE:1C:AC:43:83:E5:C1:21:BE:AD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:47:64:88:4d:90:db:39:e3:4f:85:83:fd:28:1e:8d:36:fc: 06:11:d6:fd:f9:a6:be:32:32:80:bd:ea:21:c3:87:62:7e:c7: 6c:0a:23:1c:83:3e:43:3b:5d:72:86:f0:7d:16:95:68:8e:9e: b1:9f:ab:31:0f:1e:bb:bc:a7:ea:7a:83:fa:8e:ed:7e:ee:12: 49:70:31:10:93:ff:dc:a5:0d:a7:bd:ff:b4:31:c6:9f:2e:b4: af:60:2b:a9:c2:ec:1b:82:8a:3b:bc:d2:ff:f8:8e:82:66:59: d5:3a:89:45:20:23:be:13:5a:7a:8e:00:73:86:ad:2b:3d:d0: ba:32:f0:46:f9:5d:b4:97:57:4c:ee:2a:ab:a3:a0:df:22:7d: 02:21:3a:24:a5:fd:b0:2a:e8:b1:90:e3:79:42:98:dd:e0:45: a2:ec:7b:28:51:56:14:d2:21:0e:4f:37:65:38:8d:08:1d:3c: 1c:bb:db:75:50:2b:b4:a0:2f:53:ee:ec:0a:2a:6b:42:c4:01: 08:71:7d:78:84:15:2c:cc:a0:71:a1:ea:ee:0e:1e:7d:4b:5e: 7d:56:e2:5d:64:59:4e:33:7a:f7:e7:ff:ae:9e:a1:91:06:57: 81:89:a7:f4:16:7d:a6:8c:b2:a3:23:51:0d:db:ba:26:47:48: 8e:00:fc:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrphz8+w2ZI5WNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWY5ZmQyMDgtMmUxZC00OWNjLTkyZWEtMjY2ZTZlZWNkMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vX5/G7bZHo/M8NUqoyf29ahaPWoaHqo+6Kk n22ALFrYm/iusvZ5/ZAQt5wwH1XDsTFF3V++CVOwsn073X6B/8l79Ij8CJq6mVNE mluR/gUUZqCMcbQDlyCf2imEONvFWqZWr00NI6FaR9KXcuX4tIjrmeU4X7H3+Dib AdO/rCeg9RVdIWkHjPRpj/6aE4ibBFM+eEsjUxku2tEtFc04aQoCyUI2s9atEIxA LI5SjfbuTv7RZ7HAi84Qt892F0MyfD/nMNqEJdcpBeHlPnPZjc3NB5Tir9Fw8V7N ghoBwiG9mxyqACHzCAsdkpfFDNNKdGs0s+t9TifeyRdUjF7vEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0qr4qSGH4zXd4crEOD5cEhvq31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTZhYTdjM2UtZjE5Ni0z ZmQ0LWIzNmYtYzUwMTIyYzZjNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROifMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9HZIhNkNs540+Fg/0oHo02/AYR1v35pr4yMoC96iHDh2J+x2wKIxyD PkM7XXKG8H0WlWiOnrGfqzEPHru8p+p6g/qO7X7uEklwMRCT/9ylDae9/7Qxxp8u tK9gK6nC7BuCiju80v/4joJmWdU6iUUgI74TWnqOAHOGrSs90Loy8Eb5XbSXV0zu KqujoN8ifQIhOiSl/bAq6LGQ43lCmN3gRaLseyhRVhTSIQ5PN2U4jQgdPBy723VQ K7SgL1Pu7Aoqa0LEAQhxfXiEFSzMoHGh6u4OHn1LXn1W4l1kWU4zevfn/66eoZEG V4GJp/QWfaaMsqMjUQ3buiZHSI4A/BA= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:56 2025 by rpki-client