$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa File: 11afab10-f59c-313b-b25b-4dc592a25c6e.roa (raw, json) Hash identifier: F47mbiwYWhKzWAxkGXdOVZ2zpEW+MSA8TfmOeaBro/A= Subject key identifier: 7C:7A:1C:2B:02:20:53:AD:3B:1E:6D:05:0B:62:7A:FA:26:2A:66:A3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A1B5FF1CBE65ECDAC74DEA180 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 30238 IP address blocks: 68.232.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f1:cb:e6:5e:cd:ac:74:de:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=3c5a2bba-b528-484e-914a-1936762e9d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:50:13:b7:2b:ec:27:1c:ef:3e:54:3e:3d: 05:cd:80:80:20:26:dc:0c:4c:45:26:be:3a:49:ac: 31:7b:a1:68:5b:ab:34:63:41:26:13:46:c2:12:8a: ad:4c:fc:0d:57:19:20:3b:44:d7:3c:af:0b:b0:98: 41:df:ab:7f:88:1c:cc:8d:c9:19:34:e4:34:27:8a: 58:c6:5c:42:39:0e:13:fa:d0:96:6c:74:42:71:bb: 75:42:d6:e1:c4:96:61:10:2b:8a:47:94:e2:38:35: b6:ec:c7:23:ab:18:83:34:71:6d:58:c9:62:8d:98: 2d:47:e8:e7:db:8a:5c:31:7c:38:5c:7b:5b:6d:c5: e6:f4:21:a0:b8:0d:48:1c:0e:2e:9f:59:1b:f8:4e: 94:42:bf:1d:f6:0d:2f:5f:f2:5d:98:15:e7:fe:ce: d5:2e:99:c1:75:48:97:ab:d9:8f:5c:c6:57:da:a0: 8b:d4:2f:c6:e1:49:aa:a3:7a:cb:7f:7b:2a:6e:0a: fb:6d:96:f5:9f:38:61:12:28:16:56:4d:80:22:53: fd:92:21:f8:09:b4:5d:5f:9d:68:10:20:82:8a:47: 45:12:68:04:c9:a3:36:5c:56:30:b1:ca:f7:95:ab: 6b:f0:95:d6:98:79:28:03:e9:2b:7e:67:0d:ca:96: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:1C:2B:02:20:53:AD:3B:1E:6D:05:0B:62:7A:FA:26:2A:66:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:74:06:c9:02:d4:41:da:4d:e1:75:ba:b1:4c:bb:32:ed:31: 41:86:6b:01:f2:18:0f:61:99:87:4d:6b:7f:33:76:14:f1:90: 44:1d:b2:e5:74:21:40:a0:11:54:bf:e9:3f:24:be:93:36:ba: 0e:9f:db:8d:ad:78:56:d3:8d:07:0f:f4:ac:31:ab:7b:95:13: 8d:ea:2a:90:ce:3c:06:4d:52:41:ee:3d:5b:8a:bb:3c:62:28: 06:40:1e:00:cc:d7:1b:f6:b3:22:18:65:6e:fe:69:68:29:6d: a7:5c:dd:a5:87:c9:3d:76:6a:16:cf:55:95:0b:7a:b5:07:c1: 61:35:2f:fb:aa:64:8c:d3:93:90:ef:b3:f9:ee:ce:a7:35:4e: f5:14:8b:db:47:63:03:db:82:37:10:9a:c9:cd:41:58:5c:6b: 60:b2:b5:e7:44:52:0c:61:92:26:5b:e2:20:81:ce:76:42:68: c2:3a:ce:0f:79:3e:a7:e5:ac:22:38:78:a1:8e:bf:da:6c:c5: 6d:36:b3:24:54:df:f1:e9:9d:8d:21:b6:57:9a:e7:46:1b:a9: fc:6d:07:46:d4:46:01:fd:30:8f:55:1c:79:df:8a:2d:bd:04: ba:c3:dd:b2:6d:65:b2:4b:7b:4b:60:f5:b8:94:03:fb:f4:1e: 85:23:9c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/HL5l7NrHTeoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk M2M1YTJiYmEtYjUyOC00ODRlLTkxNGEtMTkzNjc2MmU5ZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQVQE7cr7Ccc7z5UPj0FzYCAICbcDExFJr46 Sawxe6FoW6s0Y0EmE0bCEoqtTPwNVxkgO0TXPK8LsJhB36t/iBzMjckZNOQ0J4pY xlxCOQ4T+tCWbHRCcbt1QtbhxJZhECuKR5TiODW27McjqxiDNHFtWMlijZgtR+jn 24pcMXw4XHtbbcXm9CGguA1IHA4un1kb+E6UQr8d9g0vX/JdmBXn/s7VLpnBdUiX q9mPXMZX2qCL1C/G4Umqo3rLf3sqbgr7bZb1nzhhEigWVk2AIlP9kiH4CbRdX51o ECCCikdFEmgEyaM2XFYwscr3latr8JXWmHkoA+krfmcNypaS5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx6HCsCIFOtOx5tBQtievomKmajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTFhZmFiMTAtZjU5Yy0z MTNiLWIyNWItNGRjNTkyYTI1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx0BskC1EHaTeF1urFMuzLtMUGGawHyGA9hmYdNa38zdhTxkEQdsuV0 IUCgEVS/6T8kvpM2ug6f242teFbTjQcP9Kwxq3uVE43qKpDOPAZNUkHuPVuKuzxi KAZAHgDM1xv2syIYZW7+aWgpbadc3aWHyT12ahbPVZULerUHwWE1L/uqZIzTk5Dv s/nuzqc1TvUUi9tHYwPbgjcQmsnNQVhca2CytedEUgxhkiZb4iCBznZCaMI6zg95 PqflrCI4eKGOv9psxW02syRU3/HpnY0htlea50YbqfxtB0bURgH9MI9VHHnfii29 BLrD3bJtZbJLe0tg9biUA/v0HoUjnOI= -----END CERTIFICATE-----Generated at Mon Jun 30 04:02:13 2025 by rpki-client