$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a4b2c529-df23-3728-8d97-31dd3e788678.roa File: a4b2c529-df23-3728-8d97-31dd3e788678.roa (raw, json) Hash identifier: QKcc7Yon5nZbcNKkqmAJE0JeQ69Qub/Ke6Bp0rmd7HM= Subject key identifier: C5:9F:8D:48:46:24:BF:1D:5C:81:9B:6E:11:F5:C2:78:E5:55:06:95 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849912F2E34F4E51C6ADE125298 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a4b2c529-df23-3728-8d97-31dd3e788678.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 68.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2e:34:f4:e5:1c:6a:de:12:52:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=3adbebff-0c4c-44a8-a5bb-5ea7588c58b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:df:e4:56:23:ff:03:01:cd:64:1c:89:a2: b6:b9:c7:d0:37:14:92:da:8c:59:f7:1b:f1:3e:5f: d2:45:f5:e7:72:72:e0:bf:a7:b6:6a:f9:c7:ba:93: d2:94:2f:3a:b2:17:d8:fd:a0:58:62:60:c2:6b:6c: 9a:9b:12:66:5a:c3:07:51:e5:d0:1c:3e:cc:87:29: 74:e1:aa:f1:d7:2b:22:28:da:c3:06:9b:6a:0f:21: 8b:b7:1e:50:86:46:36:36:de:d9:d9:dd:20:d2:dc: 6f:d6:a5:c6:f7:aa:06:60:61:8f:69:de:7c:11:d7: 13:45:40:29:3d:8a:5c:24:1c:ef:39:dd:f8:ea:50: 43:32:22:50:6f:a7:d6:eb:50:9a:04:df:35:42:c9: 85:d3:6c:6a:6e:08:f5:d6:1c:b7:d4:8e:3c:25:46: 1d:b5:fc:0e:d0:f4:b9:43:dc:37:0c:9d:fa:1c:19: 34:d5:08:8c:b0:83:58:5d:bf:9c:f2:9f:b8:6c:5d: 86:ed:29:e7:be:14:9e:6e:7b:5f:e1:3c:cf:97:dd: 72:34:d8:e0:aa:61:14:5c:a8:e4:66:4b:f4:45:cf: ff:f3:d2:92:ec:ae:45:47:93:50:dd:2a:ae:1b:08: 78:fa:71:e1:8f:26:91:7a:b8:73:44:1b:11:48:de: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9F:8D:48:46:24:BF:1D:5C:81:9B:6E:11:F5:C2:78:E5:55:06:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a4b2c529-df23-3728-8d97-31dd3e788678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:50:e6:bf:7d:0a:ad:a8:0e:88:fc:b4:59:ce:4e:f5:01:0a: b1:74:da:d0:62:02:e4:18:d0:38:ec:fe:a3:bd:07:0b:02:31: 3f:c6:d8:7b:b1:ee:35:5d:d7:94:9c:68:a2:11:a1:8b:f8:71: 96:1f:e2:4d:b8:42:89:2f:dd:af:6b:23:8b:2c:07:18:ce:6e: 9c:e3:12:7e:9e:bf:ec:0b:36:2c:ed:fb:54:fe:f0:d7:53:bc: 7c:2c:f5:f5:92:c8:b3:7a:f7:fc:c7:cc:4f:dc:e3:ee:b2:2b: 21:8d:41:c0:c1:8b:af:53:95:01:3f:52:08:1a:a5:41:ff:95: 3e:9a:3d:b0:c2:55:9b:7b:c1:a1:32:ad:e4:20:87:e5:84:9a: d9:85:6c:27:e6:aa:d3:58:84:7d:2f:f1:b5:42:22:fc:b2:31: 2b:51:ba:aa:96:60:53:67:71:e9:23:13:94:31:62:b1:31:e8: 23:0b:86:c8:fd:61:06:88:ed:59:36:07:7f:ba:d0:f0:9b:39: 86:85:60:05:42:59:a0:22:4d:14:a6:b2:7e:ac:96:8e:a3:b0: 8e:98:d2:e1:a8:68:aa:c0:4d:53:95:88:66:ae:11:a5:4c:ba: ba:ba:63:75:6a:9f:90:fe:24:ea:94:97:ff:28:b7:aa:70:62: 9e:03:6a:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy409OUcat4SUpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk M2FkYmViZmYtMGM0Yy00NGE4LWE1YmItNWVhNzU4OGM1OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoXf5FYj/wMBzWQciaK2ucfQNxSS2oxZ9xvx Pl/SRfXncnLgv6e2avnHupPSlC86shfY/aBYYmDCa2yamxJmWsMHUeXQHD7Mhyl0 4arx1ysiKNrDBptqDyGLtx5QhkY2Nt7Z2d0g0txv1qXG96oGYGGPad58EdcTRUAp PYpcJBzvOd346lBDMiJQb6fW61CaBN81QsmF02xqbgj11hy31I48JUYdtfwO0PS5 Q9w3DJ36HBk01QiMsINYXb+c8p+4bF2G7SnnvhSebntf4TzPl91yNNjgqmEUXKjk Zkv0Rc//89KS7K5FR5NQ3SquGwh4+nHhjyaRerhzRBsRSN4oAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWfjUhGJL8dXIGbbhH1wnjlVQaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTRiMmM1MjktZGYyMy0z NzI4LThkOTctMzFkZDNlNzg4Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRQ5r99Cq2oDoj8tFnOTvUBCrF02tBiAuQY0Djs/qO9BwsCMT/G2Hux 7jVd15ScaKIRoYv4cZYf4k24Qokv3a9rI4ssBxjObpzjEn6ev+wLNizt+1T+8NdT vHws9fWSyLN69/zHzE/c4+6yKyGNQcDBi69TlQE/UggapUH/lT6aPbDCVZt7waEy reQgh+WEmtmFbCfmqtNYhH0v8bVCIvyyMStRuqqWYFNncekjE5QxYrEx6CMLhsj9 YQaI7Vk2B3+60PCbOYaFYAVCWaAiTRSmsn6slo6jsI6Y0uGoaKrATVOViGauEaVM urq6Y3Vqn5D+JOqUl/8ot6pwYp4DaqA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:12:44 2025 by rpki-client