$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa File: 93db8749-21a8-3ed7-b681-b51e2692f9ec.roa (raw, json) Hash identifier: vc5fWv62rI79/sLW+FLxqMwedf70QjeHota6zBwzmVc= Subject key identifier: 0A:91:8E:73:94:B8:33:7C:1F:6E:60:A0:4A:B8:7B:09:43:70:12:BC Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849912F2E217B6C346A539F5580 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 68.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2e:21:7b:6c:34:6a:53:9f:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=bc734a83-b2e8-45fa-b0de-1acae0798408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:6e:a5:97:43:95:49:5c:1e:79:1c:8c:a8: ee:e3:24:8d:d4:4b:ec:d5:53:79:27:42:cb:de:cd: fc:4f:7c:11:58:f5:e7:d4:73:f7:04:65:4f:eb:8b: 7b:b5:bc:c9:ac:01:04:60:74:21:51:22:7d:13:cb: 22:5c:46:f4:30:df:a3:27:7d:62:ca:da:de:72:4d: b4:1e:1f:0f:27:63:79:09:a6:33:3a:0c:4d:65:aa: 20:b1:c2:1f:93:74:24:39:5e:ec:ba:57:27:99:c1: 3b:5f:03:67:de:0d:eb:32:4a:ae:bd:bc:c2:f3:ff: da:04:96:e1:44:a1:ab:31:f2:dc:a8:82:3f:df:cf: c7:f5:33:ce:84:42:c2:84:c0:ca:eb:99:98:99:f4: f2:d0:a8:98:85:06:db:8c:85:ac:d3:78:75:9f:68: 6c:51:84:46:8f:c7:ba:f4:fb:df:11:a7:06:b5:72: 5b:75:97:ba:c3:fe:27:4f:c8:69:0b:58:56:ff:81: d6:ce:2b:45:97:a6:06:98:f5:32:d0:cf:09:a1:49: a9:c5:3a:be:f5:fe:a2:72:a7:61:7c:94:81:a5:35: 0c:23:0b:5c:b3:d1:75:b0:c0:61:76:87:34:49:d2: c6:75:55:72:a2:e9:9e:ea:76:38:7f:bc:3d:a7:66: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:91:8E:73:94:B8:33:7C:1F:6E:60:A0:4A:B8:7B:09:43:70:12:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c5:c7:52:06:32:f9:8c:b9:d7:02:67:1f:91:6f:aa:af:5e: 94:23:0d:5d:5b:ce:bb:cf:d5:f3:1a:e1:e2:e0:dc:9c:34:d0: 8a:28:7b:f5:0e:41:a1:02:be:3c:80:33:60:69:b6:6c:5b:bd: 45:69:b0:99:0a:54:39:73:c6:e5:02:92:28:22:bb:4c:26:f1: a1:4b:38:48:74:18:d6:19:b6:d4:ef:d4:ea:39:e5:93:68:76: 73:dc:a3:d3:b4:98:b2:2a:05:c5:40:84:7e:d6:ca:db:74:11: 29:1c:37:48:e1:0a:da:23:ba:7a:c6:a4:0f:66:76:17:b8:d7: 10:df:9c:e0:10:f8:2e:ac:b0:6d:25:80:1e:70:e7:43:4f:39: 2a:0c:e9:6b:e1:6a:9c:0c:4c:78:c3:48:e9:30:b1:48:e8:c4: cf:9c:9b:08:c2:16:a1:ab:1f:e6:e7:82:0d:bc:7b:9e:68:2e: ad:29:fa:23:e0:85:56:60:a5:3c:6c:8f:49:d9:98:e5:a1:7e: cf:79:02:1a:87:c0:31:7c:5c:da:09:e4:3a:7b:f0:c1:b8:72: a8:44:19:f3:12:58:b9:b4:88:9c:75:94:7b:b7:5a:67:9e:29: c5:55:94:6d:50:f4:41:32:0d:50:d5:20:af:4f:67:99:98:3a: 4b:bc:a2:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy4he2w0alOfVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YmM3MzRhODMtYjJlOC00NWZhLWIwZGUtMWFjYWUwNzk4NDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIlupZdDlUlcHnkcjKju4ySN1Evs1VN5J0LL 3s38T3wRWPXn1HP3BGVP64t7tbzJrAEEYHQhUSJ9E8siXEb0MN+jJ31iytreck20 Hh8PJ2N5CaYzOgxNZaogscIfk3QkOV7sulcnmcE7XwNn3g3rMkquvbzC8//aBJbh RKGrMfLcqII/38/H9TPOhELChMDK65mYmfTy0KiYhQbbjIWs03h1n2hsUYRGj8e6 9PvfEacGtXJbdZe6w/4nT8hpC1hW/4HWzitFl6YGmPUy0M8JoUmpxTq+9f6icqdh fJSBpTUMIwtcs9F1sMBhdoc0SdLGdVVyoume6nY4f7w9p2Z9hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqRjnOUuDN8H25goEq4ewlDcBK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOTNkYjg3NDktMjFhOC0z ZWQ3LWI2ODEtYjUxZTI2OTJmOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbFx1IGMvmMudcCZx+Rb6qvXpQjDV1bzrvP1fMa4eLg3Jw00Iooe/UO QaECvjyAM2BptmxbvUVpsJkKVDlzxuUCkigiu0wm8aFLOEh0GNYZttTv1Oo55ZNo dnPco9O0mLIqBcVAhH7Wytt0ESkcN0jhCtojunrGpA9mdhe41xDfnOAQ+C6ssG0l gB5w50NPOSoM6WvhapwMTHjDSOkwsUjoxM+cmwjCFqGrH+bngg28e55oLq0p+iPg hVZgpTxsj0nZmOWhfs95AhqHwDF8XNoJ5Dp78MG4cqhEGfMSWLm0iJx1lHu3Wmee KcVVlG1Q9EEyDVDVIK9PZ5mYOku8ogY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:04 2025 by rpki-client