$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: SYTt0RXwNNJDfkzapNj+bnzPYcjFAWvAx+Wn7bgCBsc= Subject key identifier: 22:CA:58:14:76:2D:45:04:E8:0A:10:40:B0:56:04:3E:E6:7B:D7:6D Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584A1B5FF5142BF9BFD85FCFE200 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f5:14:2b:f9:bf:d8:5f:cf:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=4358cbb2-3274-4de9-82dc-446cc0bb0308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:66:e1:72:41:f8:40:b7:c6:d4:fa:f1:00: 13:6a:99:ac:df:d7:c8:16:d0:39:90:0f:56:0b:0b: 86:6b:2c:cd:4d:19:a8:6a:c0:90:7d:3d:cb:50:23: 92:97:dd:53:3a:20:9b:9f:ac:65:7e:be:3c:26:11: aa:2c:2f:45:b4:60:9d:d8:59:7f:24:c7:f8:a6:bc: f6:63:3e:d8:ef:31:e6:b0:ea:f4:73:c8:fa:a0:5f: 52:6c:5c:a0:a8:d2:4e:de:18:3f:fb:84:bd:da:53: ec:0f:43:a0:c0:c7:95:1a:ea:b7:d0:2e:2b:4c:3f: 3b:75:61:5d:bc:a8:22:67:d9:4d:88:9f:9e:f2:92: 5d:8c:7e:32:de:12:cf:a9:ca:0e:42:00:9c:07:83: 0c:4b:e4:ca:a7:8c:18:8f:8a:2d:cf:17:28:eb:75: 60:7c:24:97:6c:85:6c:28:5b:b6:16:b0:9f:29:13: fb:5a:4e:3e:fe:36:d0:25:80:b6:2a:d6:72:66:b9: e4:d8:33:ca:5c:25:dd:69:1f:93:95:38:6d:a4:c2: 47:0c:1f:90:e2:95:20:60:a3:f2:80:61:f2:9f:de: 67:5a:7f:91:47:aa:b8:75:64:38:1b:4b:ab:79:b1: 6e:35:29:ce:bd:3f:02:30:a6:6d:9a:37:71:8d:e8: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:58:14:76:2D:45:04:E8:0A:10:40:B0:56:04:3E:E6:7B:D7:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cd:9f:c7:f2:81:50:50:4d:ed:4d:88:a2:c2:56:60:d0:83: 7a:e0:24:c7:77:96:13:7c:cc:41:55:58:a9:3f:0b:d2:45:10: 84:64:1f:07:9d:c7:65:9e:d5:9b:9b:ee:46:26:de:a5:fb:15: ae:1d:e2:f8:93:55:4e:a0:35:fc:b8:53:43:f0:f1:d0:ec:ee: 64:a2:98:c4:72:55:18:ac:3d:9d:d1:ca:eb:10:ea:65:93:d9: f9:f2:cb:a0:b9:87:a3:27:4e:c8:5d:1a:a2:f4:bf:a9:68:42: ea:37:de:d7:4a:8d:30:a4:a5:cc:37:cc:5f:ef:d4:94:d5:76: a3:b4:8d:2c:67:88:80:38:7e:24:27:3e:d2:4f:c5:bb:ba:df: 86:ca:92:9f:90:34:26:25:09:55:30:55:20:dd:18:14:8b:35: 6f:c9:42:7b:5b:7f:26:4f:84:f9:6e:d7:b3:cf:85:f2:dc:09: 94:5d:e4:aa:13:b2:1c:6c:f0:f4:2c:5a:a6:89:48:61:d9:a4: af:50:84:19:10:d3:51:cd:01:00:1f:b7:7d:67:21:0d:2a:0b: e1:5d:0e:c9:ff:c9:94:e9:c2:76:3d:4c:48:2d:20:ae:0d:08: ee:84:e1:37:32:7d:d6:30:4c:89:3b:f4:0c:d1:d9:15:c5:09: a7:1e:2a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/UUK/m/2F/P4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDM1OGNiYjItMzI3NC00ZGU5LTgyZGMtNDQ2Y2MwYmIwMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUFm4XJB+EC3xtT68QATapms39fIFtA5kA9W CwuGayzNTRmoasCQfT3LUCOSl91TOiCbn6xlfr48JhGqLC9FtGCd2Fl/JMf4prz2 Yz7Y7zHmsOr0c8j6oF9SbFygqNJO3hg/+4S92lPsD0OgwMeVGuq30C4rTD87dWFd vKgiZ9lNiJ+e8pJdjH4y3hLPqcoOQgCcB4MMS+TKp4wYj4otzxco63VgfCSXbIVs KFu2FrCfKRP7Wk4+/jbQJYC2KtZyZrnk2DPKXCXdaR+TlThtpMJHDB+Q4pUgYKPy gGHyn95nWn+RR6q4dWQ4G0urebFuNSnOvT8CMKZtmjdxjejYzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLKWBR2LUUE6AoQQLBWBD7me9dtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTNn8fygVBQTe1NiKLCVmDQg3rgJMd3lhN8zEFVWKk/C9JFEIRkHwed x2We1Zub7kYm3qX7Fa4d4viTVU6gNfy4U0Pw8dDs7mSimMRyVRisPZ3RyusQ6mWT 2fnyy6C5h6MnTshdGqL0v6loQuo33tdKjTCkpcw3zF/v1JTVdqO0jSxniIA4fiQn PtJPxbu634bKkp+QNCYlCVUwVSDdGBSLNW/JQntbfyZPhPlu17PPhfLcCZRd5KoT shxs8PQsWqaJSGHZpK9QhBkQ01HNAQAft31nIQ0qC+FdDsn/yZTpwnY9TEgtIK4N CO6E4TcyfdYwTIk79AzR2RXFCaceKlg= -----END CERTIFICATE-----Generated at Mon Jun 16 05:47:29 2025 by rpki-client