$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa File: aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa (raw, json) Hash identifier: GrkD3OFOra6CEa8gyuMKFW3Ysy1QhbLauSycR9dZL68= Subject key identifier: 34:4D:5F:75:99:62:0D:E5:86:F7:30:46:D3:5C:97:76:DD:9C:AD:AD Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F43285849ABB4A96E66427347C6EB8110 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 68.233.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a9:6e:66:42:73:47:c6:eb:81:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ae1b34a6-97e8-4a09-9fbd-9e13bd3bb47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:12:97:2d:3f:85:12:35:b1:a6:e7:dd:e3: 28:73:b3:57:f4:26:5d:d4:1d:a8:7b:29:9e:be:ed: e8:f1:f8:1e:1f:3e:05:1e:2a:81:2d:75:c9:41:09: bb:c1:bb:b0:46:66:95:fb:0c:b5:6d:3a:16:ab:47: b0:32:4a:6f:f3:fd:3d:ca:c0:71:9a:9f:6b:cb:39: 5b:c7:3f:7c:c1:c8:4b:e9:f2:35:1a:e6:30:a4:30: bc:5b:20:1b:06:6d:f2:3a:04:47:54:bd:c6:c5:d4: 1d:c1:bd:2b:01:fa:1a:10:b6:34:5b:51:fd:47:f2: 0a:68:4f:98:4f:1a:02:60:c7:80:9f:f1:7f:7a:d1: 30:26:94:9e:cb:30:92:85:d2:46:fd:e1:7a:92:b9: 6c:a1:34:2e:ad:04:c3:f9:74:9c:95:b3:1d:0d:06: 11:94:c5:a0:2a:8b:c2:14:74:ca:2c:d2:ec:07:73: ce:6b:e5:2d:90:8b:b1:9d:8c:81:7b:0e:74:0e:fa: 70:31:f8:ab:af:80:4a:fc:34:9e:51:17:e2:3f:01: fa:07:1d:16:ed:b6:a5:5d:ec:39:08:05:c9:6a:14: 32:13:b2:b1:96:17:4f:7c:0d:1b:86:af:39:1d:75: 12:2d:db:7c:af:e3:e4:f6:4e:28:72:c4:74:43:dd: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4D:5F:75:99:62:0D:E5:86:F7:30:46:D3:5C:97:76:DD:9C:AD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9f:ee:b3:f7:ce:bf:92:ab:2a:4a:7e:56:b3:59:df:3f:0b: 22:18:5f:9a:9f:1d:02:ea:b0:29:4c:44:16:47:2f:6b:ba:f9: 8f:67:13:cf:7c:77:b3:ee:fc:3f:7b:8f:16:d3:32:13:f2:17: 39:f9:4b:a2:d5:90:b4:83:bb:01:a0:bc:bc:be:f7:51:5e:4b: 14:ca:e8:ec:4f:ef:3f:f8:8a:64:35:13:1b:04:d2:82:37:ee: 34:93:dd:63:1b:6a:9b:9f:9b:0a:f9:18:4f:da:dc:a0:28:bd: 68:e8:d7:8d:d1:b8:f2:4e:44:02:8c:cd:d5:42:1b:f5:7d:eb: 47:8a:7d:7e:92:67:76:07:6c:50:c3:45:5f:a4:77:aa:d2:47: 03:2f:b1:ba:8b:73:ec:6d:a1:9c:76:3d:c6:0b:17:6a:5f:60: 36:9e:d1:1b:9f:61:b5:40:4f:01:6f:9c:34:03:86:cc:82:1e: 0a:4e:7d:5a:fa:10:bb:14:c8:e4:80:29:a7:a7:96:ad:cc:57: de:05:87:b0:51:d6:d3:2c:78:32:8d:23:a2:d3:9e:df:a5:08: ce:2b:4f:eb:0f:b1:f5:58:70:fc:fb:7f:0b:33:92:ba:7d:31: 08:79:7f:e8:a8:89:e7:2a:d3:17:08:a0:75:c9:e0:a4:ae:95: fd:0c:cc:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKluZkJzR8brgRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWUxYjM0YTYtOTdlOC00YTA5LTlmYmQtOWUxM2JkM2JiNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwQSly0/hRI1sabn3eMoc7NX9CZd1B2oeyme vu3o8fgeHz4FHiqBLXXJQQm7wbuwRmaV+wy1bToWq0ewMkpv8/09ysBxmp9ryzlb xz98wchL6fI1GuYwpDC8WyAbBm3yOgRHVL3GxdQdwb0rAfoaELY0W1H9R/IKaE+Y TxoCYMeAn/F/etEwJpSeyzCShdJG/eF6krlsoTQurQTD+XSclbMdDQYRlMWgKovC FHTKLNLsB3POa+UtkIuxnYyBew50DvpwMfirr4BK/DSeURfiPwH6Bx0W7balXew5 CAXJahQyE7KxlhdPfA0bhq85HXUSLdt8r+Pk9k4ocsR0Q91XgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRNX3WZYg3lhvcwRtNcl3bdnK2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYWVhMjQ2ZGQtZjAyZS0z ZTUyLTgxODctZjFjZjI3MjJjNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6f7rP3zr+SqypKflazWd8/CyIYX5qfHQLqsClMRBZHL2u6+Y9nE898 d7Pu/D97jxbTMhPyFzn5S6LVkLSDuwGgvLy+91FeSxTK6OxP7z/4imQ1ExsE0oI3 7jST3WMbapufmwr5GE/a3KAovWjo143RuPJORAKMzdVCG/V960eKfX6SZ3YHbFDD RV+kd6rSRwMvsbqLc+xtoZx2PcYLF2pfYDae0RufYbVATwFvnDQDhsyCHgpOfVr6 ELsUyOSAKaenlq3MV94Fh7BR1tMseDKNI6LTnt+lCM4rT+sPsfVYcPz7fwszkrp9 MQh5f+ioiecq0xcIoHXJ4KSulf0MzKo= -----END CERTIFICATE-----Generated at Fri May 9 10:56:27 2025 by rpki-client