$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa File: f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa (raw, json) Hash identifier: DzK/ySQV7g4gWqj3qCUpjaUzT0lA5d3HDAFN0v+C7M0= Subject key identifier: 3D:89:05:F4:44:5D:72:9A:66:FC:73:8D:79:87:57:BC:25:22:36:E3 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584A4E93865A0495BEE9ECD99AC0 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa Signing time: Wed 25 Jun 2025 09:11:03 +0000 ROA not before: Wed 25 Jun 2025 09:11:03 +0000 ROA not after: Tue 23 Sep 2025 09:11:03 +0000 asID: 397391 IP address blocks: 68.233.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4e:93:86:5a:04:95:be:e9:ec:d9:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jun 25 09:11:03 2025 GMT Not After : Sep 23 09:11:03 2025 GMT Subject: CN=2b9dacd1-b315-4c21-9f46-81779d0b3e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:00:65:5f:23:2b:79:59:98:46:ea:d1:2b:0e: b8:f4:2a:c9:cc:0b:2c:92:74:62:f8:ca:42:08:6e: fe:a0:a3:95:67:f4:85:ad:45:91:2f:ff:3a:be:51: 00:c5:5f:4f:49:01:28:ef:ea:21:6f:78:f2:66:47: 1e:35:53:14:8c:ea:e1:7f:6e:8f:8c:c0:4e:06:37: da:02:77:40:3d:a3:ce:91:e8:f9:80:e7:7d:36:9b: e1:cd:2e:3a:d1:74:f8:75:35:57:75:a1:0d:5b:60: 31:ad:47:25:d0:4f:ea:9a:c8:f4:df:04:45:94:7e: eb:16:5b:45:ba:df:d1:8a:e8:9f:bc:b9:7d:2a:03: 11:14:41:ab:a9:08:df:b0:03:70:fb:56:ec:06:17: 82:39:0e:1c:cc:16:ef:8e:e3:ec:0f:dc:e5:ca:6b: 1a:0a:a9:42:d9:22:09:82:c6:b0:0b:29:57:a1:e9: a2:1f:e8:3b:54:fd:00:5c:92:80:6e:4c:a8:81:3f: 82:1e:04:f6:b5:13:73:af:03:c0:cc:af:90:68:e8: fa:96:84:d5:02:22:28:cd:06:63:25:e1:b1:cb:52: aa:2f:fd:53:9f:f7:02:f7:40:04:1e:d8:98:f5:fe: 8f:c3:69:49:f7:ba:9b:17:ed:cc:78:d4:e2:38:5b: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:89:05:F4:44:5D:72:9A:66:FC:73:8D:79:87:57:BC:25:22:36:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2d:4e:8e:1f:d3:48:eb:0f:6e:9b:47:b7:48:64:f1:78:d0: 05:2d:5e:77:2d:b8:22:ad:24:3a:2b:35:f9:b5:08:14:a0:44: 3c:bd:fd:2c:dd:9b:11:30:fe:e0:a4:8f:4c:b3:09:1d:31:4e: df:72:74:8a:27:9e:21:07:d4:54:ed:4a:c7:bc:c0:0e:d8:be: ae:10:96:86:4f:dc:9a:ac:d5:bf:a3:ea:6a:9f:b8:65:a8:9d: 65:5f:e5:b6:c4:f3:d9:97:57:63:91:d1:ac:c9:51:92:f6:8a: af:51:c3:be:80:8d:31:7a:24:58:ed:c4:27:ff:9c:48:58:b2: 86:82:9b:63:75:87:da:3a:2d:c6:d1:8e:ce:b6:7b:75:61:65: 90:ce:cc:c8:c5:9a:57:d4:bd:24:34:49:22:6f:d7:c0:65:c8: 94:f7:c6:60:af:13:60:2a:6c:00:75:90:d9:7c:41:b8:96:5d: d5:71:6c:ad:89:5c:45:ec:e1:9b:c8:cd:6f:24:28:f8:8a:88: 51:bf:f4:50:ca:8d:ca:2c:a9:fc:0a:bc:97:6d:22:44:6f:0c: f8:c3:3a:09:ec:5f:ab:d0:21:a7:21:9f:b9:a3:95:89:88:17: 8d:98:7d:7a:3c:f8:15:c4:79:ab:42:6e:04:d1:fe:5b:25:26: 45:16:b3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpOk4ZaBJW+6ezZmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDYyNTA5MTEwM1oXDTI1MDkyMzA5MTEwM1owLzEtMCsGA1UEAxMk MmI5ZGFjZDEtYjMxNS00YzIxLTlmNDYtODE3NzlkMGIzZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggBlXyMreVmYRurRKw649CrJzAssknRi+MpC CG7+oKOVZ/SFrUWRL/86vlEAxV9PSQEo7+ohb3jyZkceNVMUjOrhf26PjMBOBjfa AndAPaPOkej5gOd9NpvhzS460XT4dTVXdaENW2AxrUcl0E/qmsj03wRFlH7rFltF ut/RiuifvLl9KgMRFEGrqQjfsANw+1bsBheCOQ4czBbvjuPsD9zlymsaCqlC2SIJ gsawCylXoemiH+g7VP0AXJKAbkyogT+CHgT2tRNzrwPAzK+QaOj6loTVAiIozQZj JeGxy1KqL/1Tn/cC90AEHtiY9f6Pw2lJ97qbF+3MeNTiOFvc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2JBfREXXKaZvxzjXmHV7wlIjbjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvZjA4MjRlMGUtNzFmMS0z NGMyLThjMjItNDMwZmM1YTg0ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0tTo4f00jrD26bR7dIZPF40AUtXnctuCKtJDorNfm1CBSgRDy9/Szd mxEw/uCkj0yzCR0xTt9ydIonniEH1FTtSse8wA7Yvq4QloZP3Jqs1b+j6mqfuGWo nWVf5bbE89mXV2OR0azJUZL2iq9Rw76AjTF6JFjtxCf/nEhYsoaCm2N1h9o6LcbR js62e3VhZZDOzMjFmlfUvSQ0SSJv18BlyJT3xmCvE2AqbAB1kNl8QbiWXdVxbK2J XEXs4ZvIzW8kKPiKiFG/9FDKjcosqfwKvJdtIkRvDPjDOgnsX6vQIachn7mjlYmI F42YfXo8+BXEeatCbgTR/lslJkUWs58= -----END CERTIFICATE-----Generated at Sun Jun 29 23:30:45 2025 by rpki-client