$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dfb7d6ca-24db-3696-8c73-585ad7339815.roa File: dfb7d6ca-24db-3696-8c73-585ad7339815.roa (raw, json) Hash identifier: TdwcdRCSZ/isJikrvXLUiClfB6yJMUQd4Hk4uPuttOs= Subject key identifier: 81:DB:B8:F3:EF:CC:B9:89:F8:C6:C8:4B:25:48:B3:CE:8C:23:9B:A4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849D1651535D9D127E18AF57900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dfb7d6ca-24db-3696-8c73-585ad7339815.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 852 IP address blocks: 68.182.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:35:d9:d1:27:e1:8a:f5:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=9b5cd0cc-4691-4816-844b-424492edb8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:d3:5c:67:14:be:e0:ac:b6:1e:07:21:e6: 65:71:e0:a4:db:78:a4:10:f2:5a:fb:f0:f5:ec:8a: 59:98:19:74:ca:5f:37:4f:9d:c8:83:43:bf:1e:66: 88:24:db:08:de:8b:6e:f8:b8:dc:95:15:2d:36:64: 64:c1:8e:80:f7:4a:cb:06:b7:aa:ff:a5:72:17:ab: b2:4d:1c:f4:0f:cb:f0:8d:83:55:ca:ba:99:4f:a9: f3:6d:40:41:ff:8c:84:f0:c1:d8:52:da:bb:0f:ae: d9:6d:99:4c:cd:c1:18:7a:30:5b:a8:5d:fc:ae:c4: 93:5b:0b:45:82:25:d7:29:d8:98:ca:2f:ae:38:94: 0b:1b:6c:22:f2:97:98:be:62:de:09:d6:c1:79:2a: 03:46:f6:68:fc:34:13:3d:2b:68:7a:17:52:6d:ad: 96:af:25:51:ee:29:cc:c3:9c:10:eb:92:bf:5b:5c: 90:ac:6c:41:ab:9f:36:ce:ef:97:8f:2d:92:a9:f8: 57:ae:17:fa:62:66:c7:a8:cc:35:e8:94:0d:64:b7: 05:27:df:21:8a:31:25:e7:58:ea:0b:c9:9d:0d:b1: 19:e2:16:14:78:3e:6a:fb:81:2c:55:d2:65:b2:ec: e7:7d:9d:7b:01:be:c4:94:08:17:bd:ba:15:3a:a2: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DB:B8:F3:EF:CC:B9:89:F8:C6:C8:4B:25:48:B3:CE:8C:23:9B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dfb7d6ca-24db-3696-8c73-585ad7339815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:46:da:43:d9:6b:cb:ad:e8:fd:57:44:90:44:3a:59:93:fd: 4d:ee:3e:15:c3:fd:ec:43:2a:c7:09:5e:84:15:9a:dc:3d:dd: bd:ae:e9:a3:ab:35:e5:eb:b7:a5:5d:1c:d6:ab:fa:59:77:4f: cd:4e:2d:d1:16:4e:63:46:68:ff:10:1e:3e:6c:1b:ca:d6:44: 3e:a2:f3:68:cd:9c:04:c0:4b:0e:c0:1e:74:10:11:9b:5a:ab: 96:4b:0a:c9:6c:dc:f0:d3:5f:a5:42:69:e6:75:62:56:1e:cf: eb:39:e8:68:97:32:a8:2b:fa:e8:71:ce:19:8f:36:4c:7d:62: 93:7e:14:a8:97:1b:25:51:ac:b4:22:d1:0e:79:bf:03:7d:ad: 59:e6:cb:85:b2:7e:eb:f1:93:0c:a6:5e:9c:d5:c3:7c:19:0c: 43:ab:36:bc:9b:f1:00:27:59:7f:ac:7a:9e:2a:59:ac:ed:04: aa:81:60:fc:1d:a5:49:98:45:4e:ac:fc:d5:41:39:2b:01:0b: 6b:39:1a:b7:1d:3e:71:78:92:d2:52:23:f1:86:4f:98:08:31: 51:c6:34:44:91:d3:b2:50:0e:a9:01:60:c8:20:a7:63:3a:5b: 54:0c:70:98:c8:fa:26:cb:17:f1:19:e3:55:b4:9d:49:65:41: b4:92:44:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRU12dEn4Yr1eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk OWI1Y2QwY2MtNDY5MS00ODE2LTg0NGItNDI0NDkyZWRiOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsLTXGcUvuCsth4HIeZlceCk23ikEPJa+/D1 7IpZmBl0yl83T53Ig0O/HmaIJNsI3otu+LjclRUtNmRkwY6A90rLBreq/6VyF6uy TRz0D8vwjYNVyrqZT6nzbUBB/4yE8MHYUtq7D67ZbZlMzcEYejBbqF38rsSTWwtF giXXKdiYyi+uOJQLG2wi8peYvmLeCdbBeSoDRvZo/DQTPStoehdSba2WryVR7inM w5wQ65K/W1yQrGxBq582zu+Xjy2SqfhXrhf6YmbHqMw16JQNZLcFJ98hijEl51jq C8mdDbEZ4hYUeD5q+4EsVdJlsuznfZ17Ab7ElAgXvboVOqKBeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHbuPPvzLmJ+MbISyVIs86MI5ukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGZiN2Q2Y2EtMjRkYi0z Njk2LThjNzMtNTg1YWQ3MzM5ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRLaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhG2kPZa8ut6P1XRJBEOlmT/U3uPhXD/exDKscJXoQVmtw93b2u6aOr NeXrt6VdHNar+ll3T81OLdEWTmNGaP8QHj5sG8rWRD6i82jNnATASw7AHnQQEZta q5ZLCsls3PDTX6VCaeZ1YlYez+s56GiXMqgr+uhxzhmPNkx9YpN+FKiXGyVRrLQi 0Q55vwN9rVnmy4WyfuvxkwymXpzVw3wZDEOrNryb8QAnWX+sep4qWaztBKqBYPwd pUmYRU6s/NVBOSsBC2s5GrcdPnF4ktJSI/GGT5gIMVHGNESR07JQDqkBYMggp2M6 W1QMcJjI+ibLF/EZ41W0nUllQbSSRIE= -----END CERTIFICATE-----Generated at Sun May 11 17:08:39 2025 by rpki-client