$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa File: 802e4f3e-477d-3343-b4df-4044a49cb54d.roa (raw, json) Hash identifier: /kpwloSF0VyUOZPwjRo2nHPLuF2JxEP2aCE+I9+iLPU= Subject key identifier: 28:DC:D7:51:F0:0C:54:86:1C:52:4B:6C:C7:D0:62:A0:B5:A2:C8:44 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584A1B5FF500A8853BCAAE5D6D00 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 14500 IP address blocks: 68.70.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f5:00:a8:85:3b:ca:ae:5d:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=de9166f7-f94a-455d-bfe9-f9f621ff2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:dc:93:a1:c5:03:41:b7:b0:06:8a:c4:eb: df:31:8d:91:71:5d:98:7d:12:4f:0e:27:4d:ad:08: 15:91:3e:8e:2a:5e:10:c1:31:ab:64:29:75:69:c4: c0:c3:7e:54:ad:52:8a:b8:f7:0e:87:9c:30:20:d3: 05:0c:78:ec:9c:21:d7:9e:dc:99:1e:fd:34:b9:da: 59:ce:6a:83:bf:b6:35:18:9f:0c:92:44:d6:b4:ad: eb:4c:be:e3:ac:fc:ec:84:95:9f:82:51:b8:48:eb: 89:49:f9:2e:d2:d2:b5:20:76:2a:7c:52:85:f4:bb: 14:32:b0:de:a4:77:cb:bd:cb:6d:32:e9:4e:d8:14: 7e:0d:0a:29:9c:e8:90:f3:82:6d:aa:54:65:da:ba: 37:ca:cc:be:12:5b:a9:ee:3a:f7:9a:67:4b:9d:11: b2:45:f8:1b:2c:36:50:0d:d8:26:03:5e:05:c0:6b: be:0f:ab:8e:04:02:39:36:d5:57:fc:5c:76:72:7d: 22:f6:a4:97:9e:9a:ce:57:47:06:b2:78:f8:26:d8: 3d:af:4b:b4:c6:8e:77:b6:0d:83:19:39:d9:34:7d: 0f:9e:c0:05:e3:f6:47:61:12:b6:04:d8:06:8c:1b: 72:c7:74:bb:9b:d0:6e:22:11:33:dd:62:33:44:13: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:D7:51:F0:0C:54:86:1C:52:4B:6C:C7:D0:62:A0:B5:A2:C8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:97:bd:d1:21:be:90:3f:23:fa:04:f1:1b:c5:08:2d:1e:93: cc:02:90:e6:06:ad:d6:12:0d:63:7c:bf:83:fe:fa:d5:40:2e: 55:11:2c:42:81:c7:66:04:9e:d8:40:a1:e4:14:81:f8:59:2a: 5e:8a:72:0b:94:7f:c8:ab:96:87:cd:53:6f:1d:1f:db:45:49: 91:5f:74:d4:ac:f4:c5:75:83:68:9f:80:15:7c:65:33:f8:d5: c6:5b:88:8e:d6:58:30:0a:c6:85:53:e8:fc:80:0d:2d:8a:cd: 07:ad:1f:6b:58:16:f5:43:6a:b2:13:6e:df:4f:54:6d:d8:96: 36:ba:9f:3b:50:6f:0f:1c:db:9d:6b:f5:c4:70:b1:ee:dd:f0: 9e:9f:0b:ee:d0:d6:82:47:8c:30:5e:35:a7:cd:39:fc:08:b2: f3:5d:93:44:01:6d:ab:94:90:9c:71:d6:21:fc:7e:52:2b:27: b9:8b:73:6e:0d:61:5e:eb:c7:e9:e0:13:c6:f3:56:81:c8:af: 30:38:93:03:1b:5a:7f:f7:7c:04:d7:ba:f1:a5:29:69:36:18: d2:4a:7e:79:ef:e3:83:74:67:32:c6:29:c3:37:28:b8:5f:8e: 63:6c:67:f8:7a:4b:de:12:23:89:e3:d3:65:50:b5:24:f6:5c: 51:d3:7c:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/UAqIU7yq5dbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZGU5MTY2ZjctZjk0YS00NTVkLWJmZTktZjlmNjIxZmYyNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQXck6HFA0G3sAaKxOvfMY2RcV2YfRJPDidN rQgVkT6OKl4QwTGrZCl1acTAw35UrVKKuPcOh5wwINMFDHjsnCHXntyZHv00udpZ zmqDv7Y1GJ8MkkTWtK3rTL7jrPzshJWfglG4SOuJSfku0tK1IHYqfFKF9LsUMrDe pHfLvcttMulO2BR+DQopnOiQ84JtqlRl2ro3ysy+Elup7jr3mmdLnRGyRfgbLDZQ DdgmA14FwGu+D6uOBAI5NtVX/Fx2cn0i9qSXnprOV0cGsnj4Jtg9r0u0xo53tg2D GTnZNH0PnsAF4/ZHYRK2BNgGjBtyx3S7m9BuIhEz3WIzRBMeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjc11HwDFSGHFJLbMfQYqC1oshEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODAyZTRmM2UtNDc3ZC0z MzQzLWI0ZGYtNDA0NGE0OWNiNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+XvdEhvpA/I/oE8RvFCC0ek8wCkOYGrdYSDWN8v4P++tVALlURLEKB x2YEnthAoeQUgfhZKl6KcguUf8irlofNU28dH9tFSZFfdNSs9MV1g2ifgBV8ZTP4 1cZbiI7WWDAKxoVT6PyADS2KzQetH2tYFvVDarITbt9PVG3Ylja6nztQbw8c251r 9cRwse7d8J6fC+7Q1oJHjDBeNafNOfwIsvNdk0QBbauUkJxx1iH8flIrJ7mLc24N YV7rx+ngE8bzVoHIrzA4kwMbWn/3fATXuvGlKWk2GNJKfnnv44N0ZzLGKcM3KLhf jmNsZ/h6S94SI4nj02VQtST2XFHTfFg= -----END CERTIFICATE-----Generated at Sun Jun 15 17:46:59 2025 by rpki-client