$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa File: 864d2064-093d-302b-a8f7-e6d5c44327c5.roa (raw, json) Hash identifier: 2WF2k4ki4GvsjS3aukdjvFjZ8QYMlg42r6vR71hTVxk= Subject key identifier: 31:E0:7A:2C:73:4D:ED:88:BB:DD:8E:CF:37:B6:8F:5A:ED:57:C6:CA Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849DF5A49C04F452DFF6BAB0880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 20001 IP address blocks: 68.182.208.0/22 maxlen: 22 68.182.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:49:c0:4f:45:2d:ff:6b:ab:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=20f58446-5f79-4459-8b86-36c0a93fb1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:47:8f:de:f6:48:91:3d:07:16:98:14:f2:0d: 13:24:32:b3:c2:2d:c2:e6:bb:32:1d:a2:84:4c:8b: bd:39:4a:41:d4:aa:43:65:fb:63:a4:eb:30:a3:16: cd:81:08:d1:00:41:ca:1e:58:b3:5f:ff:a1:2a:7a: 1b:fb:46:a3:a7:11:fa:27:45:2d:57:f2:a8:37:35: 41:7f:b3:72:05:84:4d:3c:56:a8:6c:82:cd:e5:b3: 79:3c:79:fc:88:3f:81:e7:06:25:92:ae:00:aa:80: 14:a7:5d:e0:be:82:e0:71:63:7a:9d:d2:c9:cc:1a: 79:b9:c2:82:56:b0:70:e5:9f:2a:8b:db:fe:80:3b: 88:0f:4d:15:42:a0:ff:88:53:e2:74:9f:5f:ca:2d: 7d:22:14:36:b3:b7:96:78:45:3f:6c:fb:72:cf:0a: 79:05:e4:8b:1d:e9:f1:73:64:23:3d:60:df:dc:c4: 64:00:9d:6b:91:ec:ec:25:fc:5a:dd:cd:47:74:6f: 71:bb:17:50:5d:b4:f7:89:84:7e:c2:4b:98:29:2a: 77:7a:65:ed:b6:b0:d7:9a:50:48:e6:47:46:51:a7: eb:8c:d5:49:e2:77:b1:a7:3a:1e:f6:47:4c:3b:7a: 89:db:60:c2:50:59:79:d1:a3:dd:9a:64:c6:99:7e: 5e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E0:7A:2C:73:4D:ED:88:BB:DD:8E:CF:37:B6:8F:5A:ED:57:C6:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.208.0/22 68.182.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f8:2e:ce:ca:d1:fe:86:aa:31:4e:a8:8c:04:8c:79:60:56: 47:42:2b:17:f0:ed:80:87:81:b1:8e:9a:8c:8b:3f:91:48:a0: 63:89:da:a9:ae:c5:cc:23:6d:e9:ab:96:19:76:ae:25:67:ac: a8:f9:f4:53:23:4a:b4:e3:ba:b7:09:46:03:06:3d:c5:24:76: fe:43:ab:1b:2c:e8:ac:c0:da:79:36:94:01:b0:17:0b:bb:22: c2:88:6b:bd:06:64:5c:45:02:72:6d:c0:bf:49:56:28:d5:b6: ee:5a:28:1b:22:89:4b:b8:8b:5c:54:60:ce:e8:11:84:64:24: 1a:a0:93:f6:d3:c4:fc:f3:76:ce:6a:11:0e:df:82:6e:71:55: 35:c9:48:69:b4:53:0d:d0:54:99:97:df:28:94:ab:e3:8b:7a: 43:90:e4:cf:74:5b:41:d3:ac:43:01:4e:39:fd:ac:79:93:e4: 47:22:85:45:74:a5:b1:2e:59:87:5e:18:90:47:df:2d:de:f5: 8e:37:a0:57:b1:3f:a6:53:eb:aa:d4:7c:da:0e:21:67:bf:8b: a1:c8:e4:46:e8:90:6b:02:ca:3b:1c:e6:47:fa:13:8e:d3:40: 1a:13:f6:03:a8:b7:52:03:af:5c:50:91:da:5f:4f:c6:e4:5c: 00:a2:d8:08 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnfWknAT0Ut/2urCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjBmNTg0NDYtNWY3OS00NDU5LThiODYtMzZjMGE5M2ZiMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0eP3vZIkT0HFpgU8g0TJDKzwi3C5rsyHaKE TIu9OUpB1KpDZftjpOswoxbNgQjRAEHKHlizX/+hKnob+0ajpxH6J0UtV/KoNzVB f7NyBYRNPFaobILN5bN5PHn8iD+B5wYlkq4AqoAUp13gvoLgcWN6ndLJzBp5ucKC VrBw5Z8qi9v+gDuID00VQqD/iFPidJ9fyi19IhQ2s7eWeEU/bPtyzwp5BeSLHenx c2QjPWDf3MRkAJ1rkezsJfxa3c1HdG9xuxdQXbT3iYR+wkuYKSp3emXttrDXmlBI 5kdGUafrjNVJ4nexpzoe9kdMO3qJ22DCUFl50aPdmmTGmX5eVQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDHgeixzTe2Iu92Ozze2j1rtV8bKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODY0ZDIwNjQtMDkzZC0z MDJiLWE4ZjctZTZkNWM0NDMyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCRLbQAwQC RLbYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHb4Ls7K0f6GqjFOqIwEjHlgVkdCKxfw7YCHgbGOmoyLP5FI oGOJ2qmuxcwjbemrlhl2riVnrKj59FMjSrTjurcJRgMGPcUkdv5Dqxss6KzA2nk2 lAGwFwu7IsKIa70GZFxFAnJtwL9JVijVtu5aKBsiiUu4i1xUYM7oEYRkJBqgk/bT xPzzds5qEQ7fgm5xVTXJSGm0Uw3QVJmX3yiUq+OLekOQ5M90W0HTrEMBTjn9rHmT 5EcihUV0pbEuWYdeGJBH3y3e9Y43oFexP6ZT66rUfNoOIWe/i6HI5EbokGsCyjsc 5kf6E47TQBoT9gOot1IDr1xQkdpfT8bkXACi2Ag= -----END CERTIFICATE-----Generated at Sun Jun 29 20:28:10 2025 by rpki-client