$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa File: 9208bdf5-d639-308d-9352-7b93ba2bc9db.roa (raw, json) Hash identifier: wAsnL6SMyJtDM8tYQxc8DvfuunxQNY7lejP+JVwwf9A= Subject key identifier: 4C:D8:0B:30:85:F4:6E:5A:AB:47:7C:BC:14:25:FC:DA:13:61:32:99 Certificate issuer: /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81 Certificate serial: 010D0C9F43285849A089CE169F79089303617900 Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 3580 IP address blocks: 68.234.48.0/20 maxlen: 32 216.220.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:ce:16:9f:79:08:93:03:61:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=7fb586b1-5402-422f-808a-e367c2710b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:22:83:b8:35:67:90:dc:0d:90:73:f9:96: 59:18:5d:51:f4:0d:f6:fe:db:8a:2c:10:46:01:fb: 7b:1b:91:8d:25:17:3d:f8:a4:f3:5e:16:21:d8:dd: 12:71:e0:13:63:30:b2:e1:e6:b8:d2:f1:ac:91:79: c8:9a:ec:5a:c5:52:c6:b6:15:8a:b3:27:5a:03:fc: c1:60:27:19:ce:45:bb:5d:da:81:2d:dd:1b:72:3c: 32:47:bf:63:7a:92:88:43:ab:2e:26:d8:5b:e5:68: d3:1a:27:08:64:9c:c0:cd:14:2f:e4:7f:5d:86:d4: e3:18:c1:ff:db:51:90:69:5f:91:1e:81:92:eb:93: 87:73:ee:f1:1e:b0:3c:64:95:ac:74:81:55:8c:87: 24:bd:5b:64:58:8f:f2:2c:05:66:03:19:0b:e1:b7: af:11:40:c9:0f:8e:bd:ba:f2:08:e9:78:64:37:35: 35:e3:10:30:f6:f3:3e:3f:42:32:41:15:5c:16:45: 7d:53:51:46:37:0d:10:c6:9d:90:93:0e:4c:3f:12: 5b:e6:85:f6:a6:73:e1:2e:58:31:44:79:b8:ec:3c: db:5a:11:18:b8:bf:0f:49:1d:ed:80:9f:78:e4:a7: c3:79:b4:83:0a:f9:7c:37:ae:c1:5f:53:d4:c2:d3: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D8:0B:30:85:F4:6E:5A:AB:47:7C:BC:14:25:FC:DA:13:61:32:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl X509v3 Authority Key Identifier: keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer sbgp-ipAddrBlock: critical IPv4: 68.234.48.0/20 216.220.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2f:74:4e:66:5d:7d:24:44:72:95:bf:22:be:ef:bb:47:ae: be:5d:dd:d4:15:f2:dd:e2:e9:5d:15:d9:30:52:78:ce:b7:b0: 76:70:9e:9f:5d:63:19:1c:d2:84:cf:a5:f0:5d:23:d7:86:ac: 38:70:8b:db:b8:e5:33:27:87:ce:d1:70:4d:8d:70:99:31:6a: 52:47:1b:39:ad:d8:42:43:ef:1e:ac:b5:1d:0b:0b:f3:b7:88: 14:69:2f:87:a2:60:40:a9:30:61:27:21:0d:61:65:26:6e:fb: ac:fb:9f:1b:0b:45:4a:b1:e8:66:c7:f5:e2:42:45:85:b3:9c: 50:9d:30:0f:bd:4b:a7:f2:3d:c1:4c:94:b4:51:a0:b3:21:ed: fb:e2:b6:c6:90:8c:37:da:5b:79:72:13:1a:fd:46:44:3d:f8: aa:e0:e6:73:1c:aa:93:9d:df:93:03:55:7b:bb:b2:e7:08:c5: d6:0d:b1:f4:71:22:48:00:64:07:cc:0b:9a:c4:b7:8e:b2:18: 9a:64:cd:bc:31:81:56:3d:5c:e0:94:79:d5:66:bc:75:15:c7: 51:61:1e:e3:a7:1d:2e:d1:07:35:f2:72:74:ec:e5:30:f2:d6: 75:27:d7:bb:33:b1:3e:f6:07:8e:8c:c9:80:2d:66:28:44:7f: 71:9b:ff:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmgic4Wn3kIkwNheQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNjI3NTgtYjNkNi00ZDNkLWEzZTUtM2NlNjFiYWY5 YzgxMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk N2ZiNTg2YjEtNTQwMi00MjJmLTgwOGEtZTM2N2MyNzEwYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Mig7g1Z5DcDZBz+ZZZGF1R9A32/tuKLBBG Aft7G5GNJRc9+KTzXhYh2N0SceATYzCy4ea40vGskXnImuxaxVLGthWKsydaA/zB YCcZzkW7XdqBLd0bcjwyR79jepKIQ6suJthb5WjTGicIZJzAzRQv5H9dhtTjGMH/ 21GQaV+RHoGS65OHc+7xHrA8ZJWsdIFVjIckvVtkWI/yLAVmAxkL4bevEUDJD469 uvII6XhkNzU14xAw9vM+P0IyQRVcFkV9U1FGNw0Qxp2Qkw5MPxJb5oX2pnPhLlgx RHm47DzbWhEYuL8PSR3tgJ945KfDebSDCvl8N67BX1PUwtNG0wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEzYCzCF9G5aq0d8vBQl/NoTYTKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2 Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2MWJhZjljODEvOTIwOGJkZjUtZDYzOS0z MDhkLTkzNTItN2I5M2JhMmJjOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZhNjI3NTgtYjNkNi00ZDNkLWEz ZTUtM2NlNjFiYWY5YzgxL2FmYTYyNzU4LWIzZDYtNGQzZC1hM2U1LTNjZTYxYmFm OWM4MS5jcmwwHwYDVR0jBBgwFoAUu0kEYIzjyKOONgsMxSsza5gXIs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2 MWJhZjljODEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEROowAwQE 2NxQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIAvdE5mXX0kRHKVvyK+77tHrr5d3dQV8t3i6V0V2TBSeM63 sHZwnp9dYxkc0oTPpfBdI9eGrDhwi9u45TMnh87RcE2NcJkxalJHGzmt2EJD7x6s tR0LC/O3iBRpL4eiYECpMGEnIQ1hZSZu+6z7nxsLRUqx6GbH9eJCRYWznFCdMA+9 S6fyPcFMlLRRoLMh7fvitsaQjDfaW3lyExr9RkQ9+Krg5nMcqpOd35MDVXu7sucI xdYNsfRxIkgAZAfMC5rEt46yGJpkzbwxgVY9XOCUedVmvHUVx1FhHuOnHS7RBzXy cnTs5TDy1nUn17szsT72B46MyYAtZihEf3Gb/+A= -----END CERTIFICATE-----Generated at Wed May 14 02:46:08 2025 by rpki-client