$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa File: 1a07af80-4f86-3445-9db1-9d3ed1101688.roa (raw, json) Hash identifier: w5Z4dIDN4n2JQA5klPNVFCCl0mil6i5YRwZuBlLliSU= Subject key identifier: 3B:E6:8C:34:DF:A2:C3:D1:45:9A:7D:06:DD:C5:AE:C9:8E:75:24:99 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584A3A15789C51800DEDC599B680 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 61317 IP address blocks: 68.67.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:78:9c:51:80:0d:ed:c5:99:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=24f45b99-9810-4bd2-8da8-41715c4a5ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:ce:0f:3d:ee:bd:31:74:37:79:c4:f2:83: d6:c8:11:cc:02:42:2c:46:cf:a8:30:48:ea:63:e1: 16:b8:67:03:89:44:b2:77:eb:a4:fa:14:8e:34:56: 08:cb:11:a8:3d:d0:38:5a:09:01:05:04:02:a3:4c: db:29:56:3d:46:b8:2f:9c:b7:0d:e8:d1:4b:f6:b7: 01:c4:c2:fe:c4:88:e8:2c:76:82:77:10:8f:d8:cf: a9:0e:0f:1a:9a:b2:0d:3c:88:dd:ac:9f:b7:60:a7: 57:0c:c5:0b:b4:17:13:ff:d9:9c:a6:f9:37:5c:94: 6e:7a:11:c3:31:8f:20:04:6a:36:f2:f2:16:67:0f: b9:2e:8f:6e:c8:2b:92:90:07:24:9e:41:6b:cc:f7: f5:08:b0:3b:8e:7a:a7:f3:e9:80:10:d3:06:fe:13: 08:36:ff:44:28:75:fb:2e:34:52:1e:51:dc:b1:c3: 79:c8:0e:ef:87:3c:25:27:49:ed:9e:dd:16:9d:1c: b4:05:c2:44:83:fe:e3:95:f5:46:56:56:5f:b5:47: f5:70:9b:2c:21:b3:c5:95:3b:a4:12:25:56:c8:4d: ba:a8:85:1c:17:26:00:df:9a:58:fc:29:c7:b5:29: 5b:9a:e7:ca:1f:55:5d:76:dc:d4:d7:ac:3a:fb:62: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E6:8C:34:DF:A2:C3:D1:45:9A:7D:06:DD:C5:AE:C9:8E:75:24:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/1a07af80-4f86-3445-9db1-9d3ed1101688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7e:d5:90:0c:ca:95:c2:02:25:54:c8:b5:6b:9d:38:33:4b: 06:ed:a4:db:6c:d2:8d:a2:5d:05:9c:3f:30:78:aa:f8:12:05: 0d:46:e9:56:bd:ff:fb:44:43:95:0f:01:9f:80:00:d0:70:52: c3:03:3d:35:bc:44:12:40:3c:ab:9c:15:62:0a:22:55:1c:68: 23:51:8b:13:b6:94:b7:b5:f9:7f:41:68:b8:45:4c:41:b9:7a: b8:50:61:f4:1f:69:51:1b:a7:38:b0:c7:a2:35:a0:69:0e:35: 29:8a:dd:8c:da:9b:f5:f6:c0:b0:bf:e6:87:0a:67:b5:52:d8: 9b:80:75:4a:19:cc:62:6e:d3:b2:be:23:45:79:5c:57:55:e7: 37:a9:6c:a6:ac:5f:c5:79:b1:5f:b1:0e:b5:ee:76:86:7a:03: c0:c9:67:0a:05:4c:d7:f0:6b:a8:fb:e2:3a:0d:7c:08:bf:fe: 4d:36:18:85:41:6f:c6:69:87:25:75:bf:8d:de:f1:d3:cd:71: ba:12:cf:e1:9f:a5:8e:e6:e3:df:d8:62:ac:c7:a1:55:13:d1: de:b0:84:97:20:8f:73:cb:a0:99:7f:3e:20:23:41:08:13:7b: 6f:12:fd:ef:4f:16:08:9f:f8:a7:b1:4c:e9:0e:97:f1:94:4c: d5:d9:d5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXicUYAN7cWZtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MjRmNDViOTktOTgxMC00YmQyLThkYTgtNDE3MTVjNGE1Y2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPnODz3uvTF0N3nE8oPWyBHMAkIsRs+oMEjq Y+EWuGcDiUSyd+uk+hSONFYIyxGoPdA4WgkBBQQCo0zbKVY9RrgvnLcN6NFL9rcB xML+xIjoLHaCdxCP2M+pDg8amrINPIjdrJ+3YKdXDMULtBcT/9mcpvk3XJRuehHD MY8gBGo28vIWZw+5Lo9uyCuSkAcknkFrzPf1CLA7jnqn8+mAENMG/hMINv9EKHX7 LjRSHlHcscN5yA7vhzwlJ0ntnt0WnRy0BcJEg/7jlfVGVlZftUf1cJssIbPFlTuk EiVWyE26qIUcFyYA35pY/CnHtSlbmufKH1VddtzU16w6+2LKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvmjDTfosPRRZp9Bt3FrsmOdSSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMWEwN2FmODAtNGY4Ni0z NDQ1LTlkYjEtOWQzZWQxMTAxNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9+1ZAMypXCAiVUyLVrnTgzSwbtpNts0o2iXQWcPzB4qvgSBQ1G6Va9 //tEQ5UPAZ+AANBwUsMDPTW8RBJAPKucFWIKIlUcaCNRixO2lLe1+X9BaLhFTEG5 erhQYfQfaVEbpziwx6I1oGkONSmK3Yzam/X2wLC/5ocKZ7VS2JuAdUoZzGJu07K+ I0V5XFdV5zepbKasX8V5sV+xDrXudoZ6A8DJZwoFTNfwa6j74joNfAi//k02GIVB b8ZphyV1v43e8dPNcboSz+GfpY7m49/YYqzHoVUT0d6whJcgj3PLoJl/PiAjQQgT e28S/e9PFgif+KexTOkOl/GUTNXZ1f0= -----END CERTIFICATE-----Generated at Sun Jun 29 11:25:53 2025 by rpki-client