$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa File: ceeaa841-ed82-33d1-843a-3a411e6fee58.roa (raw, json) Hash identifier: nuwAeOmWLqaMdy9BkyLY5WlOOXlfPBd70RKklHrynLA= Subject key identifier: 26:B0:AA:A8:34:B2:34:15:28:2F:2C:80:18:F4:FF:FD:13:79:50:D9 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F432858498769BB9E8420BD0400912920 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 394195 IP address blocks: 68.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bb:9e:84:20:bd:04:00:91:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=7259fb62-8c81-47e4-b966-f17d561ff3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:b2:88:bd:72:a3:c5:e3:b2:c4:da:af:a6: 86:c0:c8:ee:e2:4e:11:33:f9:a3:a6:a9:6b:03:0e: 34:45:e5:0b:24:7e:b5:f2:6f:22:64:b3:05:80:a4: a0:6e:44:62:05:39:5a:7d:2e:65:8d:0f:c6:5c:7f: a0:2f:e9:c9:3d:91:5f:f4:8b:c5:0c:21:fd:80:68: d6:0f:24:7c:d2:f0:80:74:33:b5:ae:39:b3:3e:3a: cc:99:5c:e4:ac:5a:2d:13:a8:b3:5b:61:9a:c0:30: f0:f2:56:88:93:c1:04:e9:ba:3a:3d:6c:56:a4:54: 74:ff:5e:2d:61:98:c9:87:5d:5d:2d:f0:66:75:e8: fc:34:1c:11:78:01:e5:b6:1e:02:96:c2:0f:b4:ac: d4:d1:40:2a:ea:c9:0b:d6:7b:4a:ed:ad:a6:35:6b: dc:0f:72:22:be:fe:81:a1:54:cf:7c:7b:f6:3d:a6: 2d:70:d7:f7:67:fa:99:4b:86:dd:2a:15:9e:80:6d: a4:3b:a2:ef:59:50:ea:95:26:dd:80:f3:da:82:61: 23:08:9a:8e:29:52:80:f2:bd:42:a5:8e:00:b7:df: 62:f7:fe:cd:36:78:93:74:be:f2:ae:fd:8a:fe:77: 93:31:af:1f:47:94:1d:e6:06:92:01:02:7f:5e:3f: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B0:AA:A8:34:B2:34:15:28:2F:2C:80:18:F4:FF:FD:13:79:50:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 68.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fa:61:a4:90:3a:67:e3:20:08:86:be:c7:44:bf:ca:db:2e: 53:39:2f:5c:19:8a:0b:ec:06:62:62:b5:24:8c:0d:47:26:3a: cd:02:ba:4c:a0:18:7f:1c:ef:29:63:ee:2f:b6:29:23:ab:f7: 7d:71:90:29:3d:c5:f4:f3:6f:66:50:6d:d5:14:61:d2:ff:2a: d4:88:3e:02:ff:50:b9:68:c8:4b:fa:3b:34:a5:90:f8:51:39: 1a:33:0e:82:97:1d:65:2a:35:92:29:0b:09:db:1d:1c:1f:ba: 06:74:48:74:f1:aa:f6:22:fb:d0:b2:e0:42:4d:0a:9e:fe:c3: eb:b0:28:e9:9f:bb:83:36:03:73:01:27:40:a4:33:9d:a3:30: 61:32:46:4c:a1:38:8c:b1:17:e7:7a:ac:76:3b:50:33:9e:5d: 34:c9:99:b8:59:97:f6:c4:ff:87:a0:e7:fc:b1:d6:7d:9f:e5: 9b:61:78:6d:c3:9a:79:24:9e:54:07:27:61:f2:59:42:d4:b4: 72:8f:67:30:b8:4d:db:b5:d6:29:3d:e8:ad:01:68:fb:bb:1e: 87:b8:56:b0:4e:cf:47:b3:67:8b:d0:90:36:a4:f2:7a:ab:dd: f4:f5:10:98:23:8e:31:0c:7a:7d:6a:3a:a3:51:70:aa:58:ba: e2:b5:f2:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabuehCC9BACRKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NzI1OWZiNjItOGM4MS00N2U0LWI5NjYtZjE3ZDU2MWZmM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHWyiL1yo8XjssTar6aGwMju4k4RM/mjpqlr Aw40ReULJH618m8iZLMFgKSgbkRiBTlafS5ljQ/GXH+gL+nJPZFf9IvFDCH9gGjW DyR80vCAdDO1rjmzPjrMmVzkrFotE6izW2GawDDw8laIk8EE6bo6PWxWpFR0/14t YZjJh11dLfBmdej8NBwReAHlth4ClsIPtKzU0UAq6skL1ntK7a2mNWvcD3Iivv6B oVTPfHv2PaYtcNf3Z/qZS4bdKhWegG2kO6LvWVDqlSbdgPPagmEjCJqOKVKA8r1C pY4At99i9/7NNniTdL7yrv2K/neTMa8fR5Qd5gaSAQJ/Xj//mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCawqqg0sjQVKC8sgBj0//0TeVDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvY2VlYWE4NDEtZWQ4Mi0z M2QxLTg0M2EtM2E0MTFlNmZlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn6YaSQOmfjIAiGvsdEv8rbLlM5L1wZigvsBmJitSSMDUcmOs0Cukyg GH8c7ylj7i+2KSOr931xkCk9xfTzb2ZQbdUUYdL/KtSIPgL/ULloyEv6OzSlkPhR ORozDoKXHWUqNZIpCwnbHRwfugZ0SHTxqvYi+9Cy4EJNCp7+w+uwKOmfu4M2A3MB J0CkM52jMGEyRkyhOIyxF+d6rHY7UDOeXTTJmbhZl/bE/4eg5/yx1n2f5ZtheG3D mnkknlQHJ2HyWULUtHKPZzC4Tdu11ik96K0BaPu7Hoe4VrBOz0ezZ4vQkDak8nqr 3fT1EJgjjjEMen1qOqNRcKpYuuK18ko= -----END CERTIFICATE-----Generated at Sun May 11 20:29:56 2025 by rpki-client