$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa File: 1df4824f-cad9-3e2d-885e-82b97814e305.roa (raw, json) Hash identifier: 0SRGuzIP4hJd63xIXDhv3jyiYm212AmRuCbbLZRJPdc= Subject key identifier: 03:15:17:13:E6:74:F4:EF:8B:84:C7:E9:25:CA:C5:ED:E7:7E:21:5F Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A374ACE0B6E60457B448DDFB0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 22781 IP address blocks: 68.68.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ce:0b:6e:60:45:7b:44:8d:df:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=8cb745a3-2a8e-4deb-b31c-6f3de063ca27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:42:67:90:5e:df:15:8d:c4:d7:88:bb:3f:8f: a3:54:9d:9e:6b:9d:d1:4a:e1:e1:f2:52:63:82:24: 4c:61:11:a5:8c:39:89:a0:7a:84:51:06:e9:98:45: 03:af:d1:b1:a2:3a:97:f5:d1:57:25:7d:68:ec:0d: 12:b2:0d:3f:3d:0f:54:c1:5c:4a:12:53:b6:47:57: 4f:93:08:5e:43:11:7d:48:e8:9e:24:6c:48:c2:22: 72:78:0f:35:e3:86:ad:2a:1f:05:1a:8e:83:fb:bb: eb:93:a0:08:f1:2f:8b:45:63:ed:aa:52:cb:4f:f3: 53:75:7c:dc:0b:93:95:7d:d0:ef:77:fc:ee:f4:53: 01:da:58:29:ce:88:ae:86:1c:9b:bd:85:b4:66:fc: ba:3a:2c:ef:bf:4f:a3:22:5b:35:b4:84:b9:4b:21: e3:2c:90:9d:16:81:29:57:58:c3:ab:8f:a9:48:07: 63:ff:2a:ba:af:85:60:9e:9a:8a:ac:c5:57:b4:ee: 3d:0f:50:f7:88:71:87:80:6b:94:6c:3b:f2:4a:82: 0f:3d:d3:6d:9a:a6:3b:13:82:d6:75:86:89:63:46: 53:ac:05:c7:36:c6:8b:31:56:54:a7:a0:5d:61:ae: e4:40:b9:05:36:bc:fa:14:2c:2e:fa:05:ff:65:5e: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:15:17:13:E6:74:F4:EF:8B:84:C7:E9:25:CA:C5:ED:E7:7E:21:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 68.68.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d1:f7:64:b4:37:87:d3:e1:1e:3a:5e:38:55:ef:5b:60:b9: 18:2f:30:dd:46:f3:f8:8f:07:f1:a8:8a:50:d4:5b:f4:58:1b: f6:9d:5a:01:3a:a7:53:5a:b9:81:48:ea:00:a7:21:35:68:ad: f2:77:29:27:85:06:29:0a:2d:04:e7:ec:ae:1e:21:bc:20:24: e7:3b:12:91:79:66:f1:b9:d6:fd:4d:41:71:9c:a4:4e:50:58: 1e:bf:0f:81:aa:4a:88:e1:c2:2c:14:3c:45:20:95:cc:69:1f: 8f:da:c2:ff:78:2f:b7:17:00:bb:cf:6d:c5:a9:4b:c7:a3:4a: ff:13:52:23:2d:6b:c2:fd:a4:85:68:2e:ce:e1:1c:c9:65:0d: 94:14:28:69:1b:2b:89:d2:09:34:22:75:bc:2e:25:ca:57:96: 2f:25:e5:13:0a:93:c7:1c:9e:71:cb:25:c6:94:80:7a:46:59: ba:6b:4b:6c:49:f6:6f:b6:eb:9a:48:c0:b7:7e:46:be:84:54: f1:69:37:36:10:70:20:1a:7f:ef:b7:3c:c8:94:3a:07:f7:2c: 2f:18:13:a8:bd:ed:cc:27:15:5b:e8:76:11:d8:fe:00:3d:65: 36:f6:71:f3:a5:60:42:54:bb:af:66:12:94:18:76:d0:19:df: dc:ea:e5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss4LbmBFe0SN37AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk OGNiNzQ1YTMtMmE4ZS00ZGViLWIzMWMtNmYzZGUwNjNjYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUJnkF7fFY3E14i7P4+jVJ2ea53RSuHh8lJj giRMYRGljDmJoHqEUQbpmEUDr9GxojqX9dFXJX1o7A0Ssg0/PQ9UwVxKElO2R1dP kwheQxF9SOieJGxIwiJyeA8144atKh8FGo6D+7vrk6AI8S+LRWPtqlLLT/NTdXzc C5OVfdDvd/zu9FMB2lgpzoiuhhybvYW0Zvy6Oizvv0+jIls1tIS5SyHjLJCdFoEp V1jDq4+pSAdj/yq6r4VgnpqKrMVXtO49D1D3iHGHgGuUbDvySoIPPdNtmqY7E4LW dYaJY0ZTrAXHNsaLMVZUp6BdYa7kQLkFNrz6FCwu+gX/ZV6xlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMVFxPmdPTvi4TH6SXKxe3nfiFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWRmNDgyNGYtY2FkOS0z ZTJkLTg4NWUtODJiOTc4MTRlMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvR92S0N4fT4R46XjhV71tguRgvMN1G8/iPB/GoilDUW/RYG/adWgE6 p1NauYFI6gCnITVorfJ3KSeFBikKLQTn7K4eIbwgJOc7EpF5ZvG51v1NQXGcpE5Q WB6/D4GqSojhwiwUPEUglcxpH4/awv94L7cXALvPbcWpS8ejSv8TUiMta8L9pIVo Ls7hHMllDZQUKGkbK4nSCTQidbwuJcpXli8l5RMKk8ccnnHLJcaUgHpGWbprS2xJ 9m+265pIwLd+Rr6EVPFpNzYQcCAaf++3PMiUOgf3LC8YE6i97cwnFVvodhHY/gA9 ZTb2cfOlYEJUu69mEpQYdtAZ39zq5Vw= -----END CERTIFICATE-----Generated at Fri Jul 4 10:03:45 2025 by rpki-client