$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa File: 892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa (raw, json) Hash identifier: Ll2JAyCLHciytuQ4gR5LXi8sAguFmCx2/+bEFms6NEk= Subject key identifier: BA:12:28:E5:D5:43:A4:9D:AF:D9:40:0C:00:21:89:C0:79:38:22:7F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849002154DBBAEC30E3FC364600 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 68.64.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:54:db:ba:ec:30:e3:fc:36:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=6e100963-70c1-4614-9bbf-9daf61c21589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:84:75:1d:d8:1b:ca:5a:1c:42:a1:e1:0e: 16:6a:a8:bb:71:7e:31:be:fc:24:e3:96:38:34:41: b8:b7:8e:3c:7d:18:df:8c:3f:ae:1f:ff:24:7d:4e: 8f:c7:13:02:ec:44:14:22:71:a5:7e:b1:98:ed:bd: 97:5a:74:ec:8f:b0:ac:60:84:40:86:d8:15:06:70: d9:9a:a7:37:68:b8:43:f9:b7:00:10:bf:fb:71:67: 8b:37:78:b5:b5:17:79:49:23:09:83:0a:f2:78:65: f3:44:f9:64:bb:c8:0e:f7:74:a1:07:de:9f:da:02: 2b:51:98:57:42:1a:e6:07:71:5c:e1:8c:7b:02:c5: 01:2d:8b:8d:3a:7a:b1:12:2e:a2:d4:08:c7:66:2d: 93:29:d9:30:ed:aa:31:17:ae:7b:7a:4a:8c:27:6d: cf:39:07:e5:37:d8:54:9e:b9:70:f6:76:6b:14:34: 32:63:a6:e3:05:0a:19:04:5a:0b:3d:5b:8f:5c:19: 63:24:e9:e1:ed:d7:51:d0:36:42:ac:1b:38:fd:7e: 6b:b9:b9:53:78:f3:15:98:5e:8b:d3:6d:4f:ce:4c: c1:ae:9b:00:0a:cf:b7:85:82:b4:6f:22:7e:94:43: 08:d6:be:21:ae:50:cf:6c:54:d1:7f:ef:1e:0e:97: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:12:28:E5:D5:43:A4:9D:AF:D9:40:0C:00:21:89:C0:79:38:22:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:bb:44:79:52:57:4a:d0:9b:c8:f3:4a:12:68:fe:17:1e:51: d4:27:3a:fa:30:0f:a8:98:2e:f0:22:d1:e5:7e:6b:66:fa:0a: bd:e4:27:1a:b0:73:16:3d:b2:0e:14:63:bd:a7:c3:a3:4e:0b: bd:a1:03:4f:cd:2a:ff:ef:26:13:85:4a:b8:a7:cb:c7:7e:98: 4b:b8:b1:f2:7b:2b:1d:52:27:a2:34:6e:97:99:2a:da:5a:b4: 4b:b2:51:27:59:29:12:04:56:64:42:58:02:03:cf:37:cd:05: ef:80:bd:f8:e6:0f:34:6e:77:5e:28:18:2a:a9:00:fb:5e:82: a5:75:3d:e8:b8:dd:6b:5e:ab:41:71:8e:98:4a:5a:c9:70:0c: d6:e7:fc:b8:98:16:5c:d2:8c:3f:12:2f:2a:0b:cc:6a:ff:fb: a4:a3:fa:a5:84:3d:f9:75:57:b0:91:b9:42:78:7b:71:16:46: 3e:ff:f3:58:46:ae:9d:48:d0:05:0c:3a:1e:34:a1:89:29:c2: 8d:01:81:92:2d:53:65:fb:84:2b:1d:ae:27:72:2b:58:94:e7: a8:ef:9d:e0:4d:76:d5:e2:44:a9:dc:7d:db:53:e8:90:89:d3: 5f:c6:f0:81:17:de:a8:ac:77:27:01:55:c0:5f:9f:26:23:90: 12:b2:96:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVTbuuww4/w2RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NmUxMDA5NjMtNzBjMS00NjE0LTliYmYtOWRhZjYxYzIxNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZyEdR3YG8paHEKh4Q4Waqi7cX4xvvwk45Y4 NEG4t448fRjfjD+uH/8kfU6PxxMC7EQUInGlfrGY7b2XWnTsj7CsYIRAhtgVBnDZ mqc3aLhD+bcAEL/7cWeLN3i1tRd5SSMJgwryeGXzRPlku8gO93ShB96f2gIrUZhX QhrmB3Fc4Yx7AsUBLYuNOnqxEi6i1AjHZi2TKdkw7aoxF657ekqMJ23POQflN9hU nrlw9nZrFDQyY6bjBQoZBFoLPVuPXBljJOnh7ddR0DZCrBs4/X5rublTePMVmF6L 021PzkzBrpsACs+3hYK0byJ+lEMI1r4hrlDPbFTRf+8eDpdr7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoSKOXVQ6Sdr9lADAAhicB5OCJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODkyYzcxNTMtNmVmMS0z ZDkwLThhM2ItODFlZWM4ZWM4ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI27RHlSV0rQm8jzShJo/hceUdQnOvowD6iYLvAi0eV+a2b6Cr3kJxqw cxY9sg4UY72nw6NOC72hA0/NKv/vJhOFSriny8d+mEu4sfJ7Kx1SJ6I0bpeZKtpa tEuyUSdZKRIEVmRCWAIDzzfNBe+AvfjmDzRud14oGCqpAPtegqV1Pei43Wteq0Fx jphKWslwDNbn/LiYFlzSjD8SLyoLzGr/+6Sj+qWEPfl1V7CRuUJ4e3EWRj7/81hG rp1I0AUMOh40oYkpwo0BgZItU2X7hCsdridyK1iU56jvneBNdtXiRKncfdtT6JCJ 01/G8IEX3qisdycBVcBfnyYjkBKyljw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:02 2025 by rpki-client