$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa File: 0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa (raw, json) Hash identifier: Tlw1xwUj4QcbsAfko4rIzUi+tSfxyjYZwEJuqbTli/I= Subject key identifier: 54:69:E3:06:56:99:F1:16:58:7F:61:CD:9B:41:22:27:B4:40:77:B4 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F432858499829C2D650ECE68F7283F000 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 5650 IP address blocks: 68.170.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c2:d6:50:ec:e6:8f:72:83:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=87d87d19-c5ab-4218-a097-e12db6767518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:db:95:cc:0e:c9:95:66:aa:87:3d:3c:b3: 99:23:57:89:db:21:93:f3:b9:05:03:50:0f:6d:27: fe:c4:de:48:aa:22:86:c8:24:64:7b:6a:82:74:47: 9b:b3:b1:cc:fd:39:d9:d9:a1:5e:b2:78:11:fe:e4: 41:a9:14:9b:af:a1:70:08:d8:08:7e:69:bc:e9:1a: 62:1c:47:a4:6f:06:b2:68:21:72:e2:55:e2:3f:1d: 11:e2:6a:05:e1:44:e4:24:18:be:f5:a4:7a:d9:ce: 2b:08:97:3c:5f:24:b0:a7:fd:39:49:19:3a:80:1d: e2:ee:a6:c6:5d:c4:c4:5e:50:27:01:ea:cf:6c:c6: 23:df:d1:89:65:3b:0c:50:ab:28:6b:82:1e:49:ee: 0d:7f:c7:48:42:db:56:d4:4a:ca:ad:1f:cd:38:2b: 3c:bc:6e:e2:e9:66:64:e6:5b:40:a8:4d:92:48:42: 7e:31:c9:e1:9e:3d:d0:56:a8:db:6d:4b:14:8a:1d: 65:ca:66:67:51:48:f7:30:e9:bd:a7:0d:0d:9a:29: f5:1a:91:30:c8:56:ac:8d:a6:7d:95:d8:07:74:6a: 16:33:58:35:50:26:f9:24:de:90:15:1f:aa:15:ee: 01:c9:42:ac:5b:c8:ae:93:89:e1:e5:55:7e:98:9e: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:69:E3:06:56:99:F1:16:58:7F:61:CD:9B:41:22:27:B4:40:77:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d6:45:28:a5:67:11:38:2a:22:93:0b:d0:a5:f4:32:3b:57: a6:cd:78:3b:c6:a7:3c:19:90:13:17:1d:38:b5:b6:74:3e:c9: 92:93:28:9c:8d:e0:52:b4:48:65:63:a2:31:cb:a6:ce:88:c3: 29:96:87:dc:7b:34:07:80:4f:d4:b8:c6:e8:45:20:bc:21:3b: df:b5:c3:83:72:1d:00:75:57:d9:e7:5d:a2:e1:8b:0a:2a:29: 5a:7f:9e:a3:5a:8e:9b:72:f8:57:9e:96:0f:18:74:28:df:48: 5a:cc:e2:8c:93:33:2a:80:6d:0b:57:d5:17:ae:f7:a1:bb:06: fc:2a:a9:9b:29:ed:f9:7a:2b:86:c8:f9:e4:8d:51:c1:cb:5c: 61:fa:1a:39:19:4a:d0:25:15:4e:d0:31:e6:8e:fc:16:6a:f7: e3:dc:69:ee:72:3e:29:e2:33:e8:d3:02:9c:0d:3d:31:00:33: a5:43:d6:97:1d:9f:91:ab:4f:71:0e:bd:c4:3c:d4:73:04:18: 57:60:a5:a4:15:ad:aa:70:bb:5f:a3:c1:ac:40:95:fa:24:8b: fa:89:a7:ea:56:9d:1f:2d:6b:de:30:ec:6b:8e:9e:11:2e:6a: 72:48:52:43:f2:43:a1:a0:55:56:a4:86:7c:10:c4:04:d6:64: 33:8e:05:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcLWUOzmj3KD8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ODdkODdkMTktYzVhYi00MjE4LWEwOTctZTEyZGI2NzY3NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x/blcwOyZVmqoc9PLOZI1eJ2yGT87kFA1AP bSf+xN5IqiKGyCRke2qCdEebs7HM/TnZ2aFesngR/uRBqRSbr6FwCNgIfmm86Rpi HEekbwayaCFy4lXiPx0R4moF4UTkJBi+9aR62c4rCJc8XySwp/05SRk6gB3i7qbG XcTEXlAnAerPbMYj39GJZTsMUKsoa4IeSe4Nf8dIQttW1ErKrR/NOCs8vG7i6WZk 5ltAqE2SSEJ+Mcnhnj3QVqjbbUsUih1lymZnUUj3MOm9pw0Nmin1GpEwyFasjaZ9 ldgHdGoWM1g1UCb5JN6QFR+qFe4ByUKsW8iuk4nh5VV+mJ6pxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRp4wZWmfEWWH9hzZtBIie0QHe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMGY1NjRkMjktNDUwYi0z N2I4LTljNjctNWY4MWVjMGM3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfWRSilZxE4KiKTC9Cl9DI7V6bNeDvGpzwZkBMXHTi1tnQ+yZKTKJyN 4FK0SGVjojHLps6IwymWh9x7NAeAT9S4xuhFILwhO9+1w4NyHQB1V9nnXaLhiwoq KVp/nqNajpty+Feelg8YdCjfSFrM4oyTMyqAbQtX1Reu96G7BvwqqZsp7fl6K4bI +eSNUcHLXGH6GjkZStAlFU7QMeaO/BZq9+Pcae5yPiniM+jTApwNPTEAM6VD1pcd n5GrT3EOvcQ81HMEGFdgpaQVrapwu1+jwaxAlfoki/qJp+pWnR8ta94w7GuOnhEu anJIUkPyQ6GgVVakhnwQxATWZDOOBdU= -----END CERTIFICATE-----Generated at Tue May 6 06:09:09 2025 by rpki-client