$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa File: 3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa (raw, json) Hash identifier: sTjkmJlCYQPuk2bxJnWnAGp8UnIyFpE3YRbWD4gYqGk= Subject key identifier: CE:17:88:A2:5C:58:D9:1B:3A:50:AA:B5:12:92:EA:5C:A1:C6:DD:AD Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849C4D4C370F369AA2E411D7E40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16417 IP address blocks: 68.232.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c3:70:f3:69:aa:2e:41:1d:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=0ef70ef1-90dd-4b78-9a4d-e2ab90c1cf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:7c:b2:ee:45:a8:10:00:fa:7c:e1:3d:78: c8:d8:23:67:74:e4:ec:90:94:34:b3:6f:05:f0:78: dc:1c:63:01:1a:0d:69:7e:da:05:b6:7e:e2:4f:2a: 9e:47:35:c2:f2:21:2a:85:b5:29:e9:7a:09:fb:28: a6:38:aa:13:4b:6b:be:52:55:32:d4:eb:c2:eb:86: 34:34:bf:e3:f9:75:a1:0b:cb:2e:6c:e4:ed:2b:fe: 14:d1:f7:06:5b:3a:67:d6:bc:79:2f:4d:f9:af:8d: d9:dc:e4:3c:d2:53:d5:03:45:ca:64:13:f1:5e:63: cf:b8:f5:30:de:01:39:fd:62:89:be:1a:6d:ad:b0: a8:11:c4:b6:6d:17:59:52:53:a3:51:0b:b6:84:87: fc:54:fb:b5:03:28:b4:e1:e0:29:92:0a:ad:1c:5b: 1d:3e:26:d5:4e:d8:4d:4c:9b:44:00:c1:22:8b:21: 56:b6:1f:32:e2:c4:95:90:d2:54:c6:9f:2d:17:af: fc:66:b5:a8:dd:8d:e5:c7:0e:fa:e7:68:c7:88:a9: 29:2a:f9:cb:11:0d:50:22:61:4c:5d:c2:db:15:f1: 05:3e:d0:51:ee:a5:ce:84:a4:60:94:11:33:18:68: c8:44:74:2d:32:9f:fc:a5:5b:1e:39:a1:68:6b:ac: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:17:88:A2:5C:58:D9:1B:3A:50:AA:B5:12:92:EA:5C:A1:C6:DD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0e:d7:1b:4b:a1:3c:b4:c5:0b:01:f0:cc:73:3a:0e:dc:54: 43:d8:6e:78:08:1b:42:e3:38:b4:d9:cf:ed:ef:cc:bf:2f:63: 65:54:9d:a4:3f:d3:c3:18:4c:2e:e5:27:ab:46:04:00:48:6e: 5b:ca:7b:81:e3:18:22:45:3b:2d:d5:d6:6f:9e:31:a2:a8:61: 24:41:a0:d2:57:d8:58:f7:cd:7d:f5:78:b8:e5:f4:fd:6f:e3: 7a:b0:b6:51:61:06:33:3a:10:e7:dc:54:31:04:0c:8d:81:75: 85:e9:1a:c8:33:6d:30:49:b5:06:4d:d4:92:e2:fe:e7:1a:f6: 04:ea:f9:9a:97:c3:1f:49:fb:47:ee:85:ed:16:7c:5c:1f:6a: 3e:6e:d2:0b:9b:fa:c5:12:86:f2:0c:b8:c5:13:df:c8:30:02: 46:ba:64:27:01:4c:06:c2:8f:f8:6d:79:a4:5e:7d:50:27:4e: c7:fd:fb:92:cc:92:7e:27:37:70:d5:42:18:41:1a:ab:40:af: 26:5a:96:75:8b:c1:d1:93:e0:6b:dd:b9:f4:c9:23:41:f2:a5: f1:cb:8f:29:01:d4:ac:77:81:94:8b:e6:da:79:c1:e2:36:e3: 36:a0:08:1f:ec:5e:d8:08:f2:a3:31:0a:ab:c3:bd:50:a6:76: f1:dd:78:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MNw82mqLkEdfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MGVmNzBlZjEtOTBkZC00Yjc4LTlhNGQtZTJhYjkwYzFjZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5d8su5FqBAA+nzhPXjI2CNndOTskJQ0s28F 8HjcHGMBGg1pftoFtn7iTyqeRzXC8iEqhbUp6XoJ+yimOKoTS2u+UlUy1OvC64Y0 NL/j+XWhC8subOTtK/4U0fcGWzpn1rx5L035r43Z3OQ80lPVA0XKZBPxXmPPuPUw 3gE5/WKJvhptrbCoEcS2bRdZUlOjUQu2hIf8VPu1Ayi04eApkgqtHFsdPibVTthN TJtEAMEiiyFWth8y4sSVkNJUxp8tF6/8ZrWo3Y3lxw7652jHiKkpKvnLEQ1QImFM XcLbFfEFPtBR7qXOhKRglBEzGGjIRHQtMp/8pVseOaFoa6xK5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4XiKJcWNkbOlCqtRKS6lyhxt2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2EzODk2NmUtMGJlNS0z Y2MzLTlhYTItNGNiMDg4M2JiYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUO1xtLoTy0xQsB8MxzOg7cVEPYbngIG0LjOLTZz+3vzL8vY2VUnaQ/ 08MYTC7lJ6tGBABIblvKe4HjGCJFOy3V1m+eMaKoYSRBoNJX2Fj3zX31eLjl9P1v 43qwtlFhBjM6EOfcVDEEDI2BdYXpGsgzbTBJtQZN1JLi/uca9gTq+ZqXwx9J+0fu he0WfFwfaj5u0gub+sUShvIMuMUT38gwAka6ZCcBTAbCj/hteaRefVAnTsf9+5LM kn4nN3DVQhhBGqtAryZalnWLwdGT4GvdufTJI0HypfHLjykB1Kx3gZSL5tp5weI2 4zagCB/sXtgI8qMxCqvDvVCmdvHdeC0= -----END CERTIFICATE-----Generated at Mon Jun 30 10:29:39 2025 by rpki-client