$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa File: b00b53ed-db98-3d02-883b-21a1dc38e020.roa (raw, json) Hash identifier: Zd/QCe3MZcCykeWmkw0MPH/bcH6m7SQg+84cM49RyDs= Subject key identifier: 1E:70:D6:D1:E1:0F:92:FE:D4:43:71:81:CD:9A:78:DC:85:48:E3:B7 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A0C056F818A150B2C37675400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 30238 IP address blocks: 68.232.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:6f:81:8a:15:0b:2c:37:67:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=42ea2750-fea9-4349-b870-7749e86b90d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:60:49:b9:6e:a9:f5:14:c3:67:15:b3:19: 43:0d:cb:c9:7c:05:cf:c3:a6:f4:04:69:50:08:03: 93:8a:47:be:18:5b:96:30:d2:83:00:37:f8:be:54: df:ac:ad:f7:41:70:76:05:16:74:cc:7e:f9:03:37: b4:0e:d1:7e:ea:94:e4:33:41:34:2c:97:c4:6d:53: 4a:54:51:e1:69:64:56:ef:ce:d1:6a:fa:8c:03:21: 2c:78:6f:85:08:7d:f6:3a:35:82:7c:cb:02:98:3b: 64:00:c1:cc:22:0b:8c:0f:75:92:84:fb:81:29:34: 26:6e:32:b7:f6:22:62:72:1f:bb:2e:e2:67:2f:cd: 0b:0b:86:67:05:eb:87:16:6c:a9:bc:d9:88:28:73: 44:7f:42:f7:8c:78:0d:3e:cc:5b:2e:a5:54:32:ea: dc:f9:80:5f:1f:7a:98:56:37:a1:93:0e:da:98:1f: 7f:5b:6b:ba:f6:15:9f:28:81:42:12:7c:c9:b3:9a: 48:96:45:d0:d0:da:7d:7b:f9:6a:15:a9:dd:a2:bb: 43:c3:a4:3e:0d:f0:0a:80:84:fa:ab:d1:9d:c0:4b: 87:69:e0:dd:ba:cb:2f:b2:11:ad:fc:ed:e0:f4:c5: da:fd:5d:a1:7a:e8:38:c1:9c:72:71:4c:65:aa:f1: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:70:D6:D1:E1:0F:92:FE:D4:43:71:81:CD:9A:78:DC:85:48:E3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b6:91:64:4a:ad:86:21:08:93:4f:1f:8a:30:aa:fa:fd:f3: 74:05:cc:4e:b6:1f:4e:f1:65:87:fb:9a:8d:64:05:b4:d0:02: 87:68:0f:fb:f6:b2:00:cc:b8:c8:67:05:76:57:6a:9c:71:1a: e0:78:bd:aa:00:36:84:5d:08:9f:b7:bf:d4:1e:fe:56:ec:8a: c3:74:dc:cb:13:76:90:f4:f5:c0:a0:e4:3e:20:cb:af:2c:ce: 68:64:5c:6f:0b:3e:d4:c2:cb:e8:62:81:42:d8:06:18:97:ce: 53:9a:f6:b6:cd:ed:13:a4:c1:de:e5:ac:e2:8a:32:4a:f7:1c: 80:fd:3f:a8:e4:48:71:eb:17:35:4b:c4:9d:8f:3a:52:c1:49: 11:a5:62:85:17:71:0a:73:74:9f:6c:42:eb:b3:f8:02:6d:a9: 49:d2:86:03:6f:30:26:fc:7d:2e:aa:08:16:09:da:a2:c6:15: b4:eb:01:a2:55:cc:00:15:66:6e:b4:13:d8:0e:82:2a:53:a5: 7a:12:a4:21:f1:68:82:da:4a:21:f3:39:a0:17:cf:f1:f0:cf: 96:2f:50:c8:a9:85:f4:0a:18:7a:9c:ed:92:dd:a1:77:17:59: 71:47:21:a6:f2:73:43:2f:d6:20:45:21:85:17:4b:f2:03:7e: 18:1b:06:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBW+BihULLDdnVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDJlYTI3NTAtZmVhOS00MzQ5LWI4NzAtNzc0OWU4NmI5MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCJgSbluqfUUw2cVsxlDDcvJfAXPw6b0BGlQ CAOTike+GFuWMNKDADf4vlTfrK33QXB2BRZ0zH75Aze0DtF+6pTkM0E0LJfEbVNK VFHhaWRW787RavqMAyEseG+FCH32OjWCfMsCmDtkAMHMIguMD3WShPuBKTQmbjK3 9iJich+7LuJnL80LC4ZnBeuHFmypvNmIKHNEf0L3jHgNPsxbLqVUMurc+YBfH3qY Vjehkw7amB9/W2u69hWfKIFCEnzJs5pIlkXQ0Np9e/lqFandortDw6Q+DfAKgIT6 q9GdwEuHaeDdussvshGt/O3g9MXa/V2heug4wZxycUxlqvGJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5w1tHhD5L+1ENxgc2aeNyFSOO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjAwYjUzZWQtZGI5OC0z ZDAyLTg4M2ItMjFhMWRjMzhlMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe2kWRKrYYhCJNPH4owqvr983QFzE62H07xZYf7mo1kBbTQAodoD/v2 sgDMuMhnBXZXapxxGuB4vaoANoRdCJ+3v9Qe/lbsisN03MsTdpD09cCg5D4gy68s zmhkXG8LPtTCy+higULYBhiXzlOa9rbN7ROkwd7lrOKKMkr3HID9P6jkSHHrFzVL xJ2POlLBSRGlYoUXcQpzdJ9sQuuz+AJtqUnShgNvMCb8fS6qCBYJ2qLGFbTrAaJV zAAVZm60E9gOgipTpXoSpCHxaILaSiHzOaAXz/Hwz5YvUMiphfQKGHqc7ZLdoXcX WXFHIabyc0Mv1iBFIYUXS/IDfhgbBtw= -----END CERTIFICATE-----Generated at Mon Jun 30 03:54:54 2025 by rpki-client