$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa File: 195a65bc-7a79-3b20-8e10-5794d68025a0.roa (raw, json) Hash identifier: fnQQP70D0IJCetEQ89SDvjLfrvvA/n0iEgLrcroHrTw= Subject key identifier: 37:64:C0:FE:E7:15:1B:FC:B6:D6:1F:25:CA:57:FD:9B:E3:3B:8F:D3 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F43285849A557DEA829EFAEB5886A6200 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa Signing time: Fri 25 Apr 2025 18:19:15 +0000 ROA not before: Fri 25 Apr 2025 18:19:15 +0000 ROA not after: Thu 24 Jul 2025 18:19:15 +0000 asID: 23316 IP address blocks: 68.170.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:57:de:a8:29:ef:ae:b5:88:6a:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Apr 25 18:19:15 2025 GMT Not After : Jul 24 18:19:15 2025 GMT Subject: CN=5e412a03-d7dd-4c80-bf89-7282fa835d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:d6:61:5c:d0:19:a1:dc:a2:63:8e:25:da: fd:7b:f1:84:72:ce:5f:30:5d:f1:54:e7:c1:d8:93: 48:84:32:f1:1c:c6:c7:c0:48:f9:77:c4:ec:e4:15: e1:74:50:4c:0d:78:5a:eb:ab:ea:ee:8f:89:66:56: 60:b5:17:3c:c9:94:f0:82:b0:c3:c8:13:5d:46:5a: 90:3b:91:b6:56:8f:16:18:07:ba:59:91:00:bf:24: 01:6d:c9:d3:30:36:77:03:16:46:e8:2a:87:0f:d7: 20:97:00:cc:f0:b1:7e:e7:55:99:ae:f9:df:81:20: 23:c9:5d:67:7b:a7:35:d0:10:67:55:09:ac:19:ee: 7f:aa:14:83:f4:98:53:24:64:78:35:d5:c6:af:42: 26:a5:cb:df:5d:4c:7e:20:5f:97:ac:15:6c:26:a5: 7a:ac:73:36:f2:ed:11:87:26:e5:e2:93:7a:c5:ac: c4:32:f5:4e:c7:6b:d9:72:38:62:33:d2:67:d0:fe: 04:01:74:b3:16:c6:bc:d8:42:7b:49:f4:66:5c:52: 3a:4e:fb:a2:21:da:0e:b8:3a:85:e2:6b:c0:21:09: 14:03:c1:a8:dd:e8:ae:b3:b1:84:49:f6:f7:17:ce: f7:72:e0:02:dc:d5:cf:5b:70:fe:5f:e0:7a:7a:ae: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:C0:FE:E7:15:1B:FC:B6:D6:1F:25:CA:57:FD:9B:E3:3B:8F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 68.170.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:09:9d:21:05:05:f0:60:0e:d3:22:12:fc:d3:9f:d6:f5:2c: 2e:29:87:3e:b3:c8:0b:95:a2:76:71:91:ec:0f:0b:97:95:8f: e2:b3:2f:fd:25:11:c5:70:69:cc:1b:f7:a4:14:54:fc:09:be: e8:33:ed:f6:88:8f:a9:c2:40:30:4e:05:a2:2e:fc:df:2c:5a: 9e:26:fb:11:28:23:ca:07:ac:17:db:cf:ba:6b:89:5a:a3:cc: bf:6c:a5:34:c6:34:71:8a:70:45:61:c4:b4:56:e6:d2:38:45: 23:2c:9e:0e:15:c7:1e:13:69:b3:27:75:7d:80:a5:3c:ca:20: 01:c1:dc:6e:9e:9c:f6:51:b4:45:2c:3f:68:f3:32:09:a9:36: 0a:7a:9f:d4:cb:17:99:d7:92:0b:47:f2:6f:80:24:90:9a:8c: 15:9e:2e:48:4e:32:a3:8e:ca:61:17:a5:42:40:22:9a:fd:b1: dd:f4:1e:02:2e:1c:7c:98:71:96:1d:75:4e:75:ac:9b:70:66: 04:10:0f:49:da:26:74:62:1c:ba:3a:cf:41:48:1c:67:2b:29: fd:c0:3a:f7:6c:15:96:cf:b5:42:1e:6b:e2:ef:c0:10:89:17: 60:74:4e:6f:d1:5d:ce:bd:d1:41:54:55:e5:db:97:4b:25:89: d3:61:66:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmlV96oKe+utYhqYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MDQyNTE4MTkxNVoXDTI1MDcyNDE4MTkxNVowLzEtMCsGA1UEAxMk NWU0MTJhMDMtZDdkZC00YzgwLWJmODktNzI4MmZhODM1ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXLWYVzQGaHcomOOJdr9e/GEcs5fMF3xVOfB 2JNIhDLxHMbHwEj5d8Ts5BXhdFBMDXha66vq7o+JZlZgtRc8yZTwgrDDyBNdRlqQ O5G2Vo8WGAe6WZEAvyQBbcnTMDZ3AxZG6CqHD9cglwDM8LF+51WZrvnfgSAjyV1n e6c10BBnVQmsGe5/qhSD9JhTJGR4NdXGr0ImpcvfXUx+IF+XrBVsJqV6rHM28u0R hybl4pN6xazEMvVOx2vZcjhiM9Jn0P4EAXSzFsa82EJ7SfRmXFI6TvuiIdoOuDqF 4mvAIQkUA8Go3eius7GESfb3F873cuAC3NXPW3D+X+B6eq4W+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdkwP7nFRv8ttYfJcpX/ZvjO4/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMTk1YTY1YmMtN2E3OS0z YjIwLThlMTAtNTc5NGQ2ODAyNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4JnSEFBfBgDtMiEvzTn9b1LC4phz6zyAuVonZxkewPC5eVj+KzL/0l EcVwacwb96QUVPwJvugz7faIj6nCQDBOBaIu/N8sWp4m+xEoI8oHrBfbz7priVqj zL9spTTGNHGKcEVhxLRW5tI4RSMsng4Vxx4TabMndX2ApTzKIAHB3G6enPZRtEUs P2jzMgmpNgp6n9TLF5nXkgtH8m+AJJCajBWeLkhOMqOOymEXpUJAIpr9sd30HgIu HHyYcZYddU51rJtwZgQQD0naJnRiHLo6z0FIHGcrKf3AOvdsFZbPtUIea+LvwBCJ F2B0Tm/RXc690UFUVeXbl0slidNhZtM= -----END CERTIFICATE-----Generated at Tue May 13 07:19:58 2025 by rpki-client