$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa File: 1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa (raw, json) Hash identifier: +pKkoHJuvzfNe2XFkF9l6ZpmI5nn7PMmIYer5+UQkk0= Subject key identifier: 20:47:00:0E:87:37:51:F3:CE:85:82:70:88:4B:31:11:CB:DC:A2:C6 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F43285849ABB4A97E26CA0B092FEA0C00 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16509 IP address blocks: 68.233.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a9:7e:26:ca:0b:09:2f:ea:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=880b2fb8-b2c9-4ef6-ba83-9f1709a19e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:8d:55:bc:9b:3f:a6:44:dc:9a:9b:52:ce: 8b:1b:ea:6a:59:ea:2d:29:49:7b:99:e8:b2:3a:3b: 46:8b:b0:06:4d:ee:35:b1:bb:9b:ff:14:79:fe:16: 50:21:cd:e8:28:cf:27:f5:69:65:99:a1:0c:14:03: 41:9b:67:35:7f:e8:b5:3f:0d:f4:0b:28:9d:af:dc: cf:da:5d:4d:70:fb:36:f6:54:bb:14:4b:41:96:71: 1b:10:7b:f4:25:4b:88:7c:42:7f:e9:aa:1b:38:ce: 11:3c:76:98:0d:66:9e:bc:78:20:95:2e:36:86:68: 94:15:49:40:dd:18:a2:3b:99:ee:fc:62:2a:c3:4f: ab:11:d4:40:b5:4c:da:19:8d:72:a5:c9:23:83:a1: 00:f7:bf:f1:e0:5b:46:8a:f2:cc:1d:db:58:be:fe: 03:4e:ee:7a:2e:b0:c7:51:3d:64:5b:bf:bc:97:27: c8:d2:f2:51:f1:a9:9e:2d:0a:30:a9:ff:02:6e:1d: 47:b7:ce:69:9c:06:57:a4:66:39:f1:4c:4b:75:ea: 56:06:c3:90:ae:a5:b4:4b:ff:91:ae:39:5d:e1:7f: 01:2f:e8:77:03:6f:88:0f:2c:36:1c:e3:22:c8:a8: 24:29:c0:2c:0b:49:87:81:39:31:af:60:d5:76:66: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:47:00:0E:87:37:51:F3:CE:85:82:70:88:4B:31:11:CB:DC:A2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:27:f2:5d:da:3d:f5:bc:1a:d6:61:54:d4:ee:e7:15:cd:df: 99:ca:39:a0:d4:e3:20:c4:79:2a:02:cc:f8:58:9c:56:89:3d: e0:fb:26:e5:8f:c9:fa:a6:41:09:60:3e:d1:22:94:9b:cb:cf: cd:8f:cb:d1:e9:fd:a7:c5:7a:13:dd:95:93:1a:70:ca:6f:21: f9:4b:22:2f:1b:80:90:d6:de:e4:ed:3e:11:a0:6f:56:39:37: 56:57:59:1d:d4:88:66:1f:e2:f7:4f:36:e4:63:f6:33:f7:ae: b4:75:b8:af:3e:9e:63:4e:e3:9a:39:56:98:14:51:f2:b2:6c: 7d:73:de:f1:8f:5b:f6:1d:6f:0f:bf:5f:26:3e:19:fc:81:88: a1:74:25:59:e1:e0:62:29:23:5f:59:7b:48:f8:52:b3:3c:cb: 75:40:50:36:15:6d:98:6e:d1:37:8d:c1:da:2d:08:c7:ef:16: 3f:8e:e4:6e:02:fa:61:9b:e0:c2:dd:02:88:5b:e7:41:bd:a9: 21:35:e1:3a:ba:c3:af:bd:3b:43:e2:cc:5c:ec:24:b1:27:13: 1f:37:5d:1f:6f:23:d2:d6:de:01:38:0e:ae:1d:ae:b7:b2:1c: 5c:ae:ac:14:7c:91:02:03:92:af:52:d9:91:23:23:55:d7:82: 85:c4:95:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKl+JsoLCS/qDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ODgwYjJmYjgtYjJjOS00ZWY2LWJhODMtOWYxNzA5YTE5ZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPWNVbybP6ZE3JqbUs6LG+pqWeotKUl7meiy OjtGi7AGTe41sbub/xR5/hZQIc3oKM8n9WllmaEMFANBm2c1f+i1Pw30Cyidr9zP 2l1NcPs29lS7FEtBlnEbEHv0JUuIfEJ/6aobOM4RPHaYDWaevHgglS42hmiUFUlA 3RiiO5nu/GIqw0+rEdRAtUzaGY1ypckjg6EA97/x4FtGivLMHdtYvv4DTu56LrDH UT1kW7+8lyfI0vJR8ameLQowqf8Cbh1Ht85pnAZXpGY58UxLdepWBsOQrqW0S/+R rjld4X8BL+h3A2+IDyw2HOMiyKgkKcAsC0mHgTkxr2DVdmbVnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBHAA6HN1HzzoWCcIhLMRHL3KLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMWIxOWY4YzUtM2NkMS0z ZWNjLTgyYTQtMjA0NmUzOWY5NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkn8l3aPfW8GtZhVNTu5xXN35nKOaDU4yDEeSoCzPhYnFaJPeD7JuWP yfqmQQlgPtEilJvLz82Py9Hp/afFehPdlZMacMpvIflLIi8bgJDW3uTtPhGgb1Y5 N1ZXWR3UiGYf4vdPNuRj9jP3rrR1uK8+nmNO45o5VpgUUfKybH1z3vGPW/Ydbw+/ XyY+GfyBiKF0JVnh4GIpI19Ze0j4UrM8y3VAUDYVbZhu0TeNwdotCMfvFj+O5G4C +mGb4MLdAohb50G9qSE14Tq6w6+9O0PizFzsJLEnEx83XR9vI9LW3gE4Dq4drrey HFyurBR8kQIDkq9S2ZEjI1XXgoXElWk= -----END CERTIFICATE-----Generated at Wed May 7 16:51:42 2025 by rpki-client