$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa File: 00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa (raw, json) Hash identifier: POGB31uzC0UFz1oBuu7S2RYWntu9dKLd1/n2Yn8bd44= Subject key identifier: 2C:94:AE:71:8E:49:0A:39:52:D5:A4:63:68:8D:25:E2:49:BE:39:A2 Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F43285849C0A4CE0990BC91705FA82B00 Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 40183 IP address blocks: 68.68.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ce:09:90:bc:91:70:5f:a8:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=dd425d86-4817-448c-9495-ebf5a8ce189a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:25:d4:c9:7a:e7:ef:12:86:3e:f0:1d:5b:2b: 47:a6:7c:f1:af:f5:ef:13:e3:fa:37:cf:4e:41:8b: 98:06:3b:d5:30:83:f7:2f:74:95:4e:6b:b7:8a:1d: 4f:9b:b6:33:9c:d2:1e:d6:bd:18:3d:ff:53:69:4c: c2:01:bd:18:0f:f0:48:e9:02:88:7b:16:14:fe:75: c4:61:9f:ad:fb:47:01:5f:b5:e5:b2:1e:ae:f9:b8: 9a:44:70:a5:1a:3f:4f:33:7c:1b:30:e0:de:71:eb: 26:ee:0a:62:79:01:d4:76:54:b3:ea:44:c1:60:d4: 03:77:6f:a4:63:c1:e4:e2:9a:0f:b0:b3:5b:2a:ce: 9b:85:3a:51:a3:d1:10:fa:57:c4:81:46:8b:d9:dc: ee:43:21:92:48:45:68:17:db:1d:21:41:53:26:40: e7:5a:16:c5:4f:a7:6c:2e:2d:3d:5c:f1:f9:b4:c7: 44:37:af:f3:6f:e5:75:47:8a:66:29:02:86:33:a1: fb:00:16:2b:29:d5:5b:86:7b:41:87:b0:8e:6b:16: 6e:f3:97:c2:ab:ea:f4:9e:1a:77:9f:22:f4:1b:e6: c2:c4:34:38:5d:be:df:1a:fa:d5:a3:0e:58:f2:37: f1:db:29:13:41:0a:ca:9e:fc:aa:fd:a5:36:77:b8: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:94:AE:71:8E:49:0A:39:52:D5:A4:63:68:8D:25:E2:49:BE:39:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/00b36b4f-b92e-3fb6-8479-1b166b1f5faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 68.68.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:48:c4:92:43:87:58:6c:76:16:ba:34:0e:5f:0b:2e:fe:6d: 3b:fb:c2:f7:9d:73:b3:09:c2:5d:01:0f:3d:a8:78:35:24:20: 80:e7:c4:cc:04:9c:ce:e6:04:da:c6:5f:a3:33:5c:80:55:7a: 86:e6:d1:34:c6:14:7b:c3:65:9f:89:d5:4a:ac:bc:57:06:ea: da:ec:c6:4f:68:8b:8a:a2:eb:17:b5:af:45:72:1e:48:6d:44: 9a:d5:17:eb:cd:fa:ce:d5:39:88:0b:e1:dd:3c:5d:7e:2d:e6: 51:66:1f:49:a0:14:2a:3d:2c:80:d8:99:ac:a6:38:51:ec:e2: 89:09:fa:d6:d4:8a:14:07:99:a2:96:a7:d5:7a:c7:d2:e8:c4: 46:fd:94:fc:5d:d4:b9:e6:73:f9:20:5e:26:7e:0a:d5:6d:c3: de:5f:50:9a:6a:ae:48:cf:b5:85:6a:ac:94:6b:26:da:25:ab: 30:0b:3c:fd:96:b5:70:d0:8a:2a:53:fb:2e:66:c5:73:ef:50: f5:8e:2a:12:04:44:ab:aa:93:3d:f7:1c:4c:3d:a9:17:2c:f8: fa:20:35:3a:af:b8:f1:86:31:02:3d:62:d2:8d:c4:0e:97:86: 0d:24:1c:45:4d:00:8d:b1:fa:c8:4c:ef:a9:c5:67:a2:5c:34: 6a:cd:5e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApM4JkLyRcF+oKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGQ0MjVkODYtNDgxNy00NDhjLTk0OTUtZWJmNWE4Y2UxODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCXUyXrn7xKGPvAdWytHpnzxr/XvE+P6N89O QYuYBjvVMIP3L3SVTmu3ih1Pm7YznNIe1r0YPf9TaUzCAb0YD/BI6QKIexYU/nXE YZ+t+0cBX7Xlsh6u+biaRHClGj9PM3wbMODecesm7gpieQHUdlSz6kTBYNQDd2+k Y8Hk4poPsLNbKs6bhTpRo9EQ+lfEgUaL2dzuQyGSSEVoF9sdIUFTJkDnWhbFT6ds Li09XPH5tMdEN6/zb+V1R4pmKQKGM6H7ABYrKdVbhntBh7COaxZu85fCq+r0nhp3 nyL0G+bCxDQ4Xb7fGvrVow5Y8jfx2ykTQQrKnvyq/aU2d7gNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyUrnGOSQo5UtWkY2iNJeJJvjmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvMDBiMzZiNGYtYjkyZS0z ZmI2LTg0NzktMWIxNjZiMWY1ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENIxJJDh1hsdha6NA5fCy7+bTv7wvedc7MJwl0BDz2oeDUkIIDnxMwE nM7mBNrGX6MzXIBVeobm0TTGFHvDZZ+J1UqsvFcG6trsxk9oi4qi6xe1r0VyHkht RJrVF+vN+s7VOYgL4d08XX4t5lFmH0mgFCo9LIDYmaymOFHs4okJ+tbUihQHmaKW p9V6x9LoxEb9lPxd1Lnmc/kgXiZ+CtVtw95fUJpqrkjPtYVqrJRrJtolqzALPP2W tXDQiipT+y5mxXPvUPWOKhIERKuqkz33HEw9qRcs+PogNTqvuPGGMQI9YtKNxA6X hg0kHEVNAI2x+shM76nFZ6JcNGrNXk4= -----END CERTIFICATE-----Generated at Mon May 5 14:31:29 2025 by rpki-client