$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa File: 2a107519-0ec5-30d7-9c54-2f762d58dd15.roa (raw, json) Hash identifier: wNpMJrFUSA0t75h/7V/hNap2TT5tGbgbU0pdaJsXtis= Subject key identifier: CB:F3:CB:88:9E:01:2B:2C:AD:C5:83:AD:69:C5:CF:8F:77:3D:3D:EC Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F43285849071BE8AF922F84298A2C7B00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 22765 IP address blocks: 68.170.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e8:af:92:2f:84:29:8a:2c:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=44f50b06-0621-4093-ae78-4bea7e50140a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:7b:60:4b:82:d8:02:32:71:c0:ad:af:2d: 11:fd:9e:7b:c1:53:72:a5:01:54:e5:1b:1b:4c:49: 54:c7:03:02:55:b1:ad:25:da:e3:62:da:10:55:22: 5e:57:86:f6:69:64:3e:1b:f8:e7:e8:fe:c8:c0:01: 32:6a:13:20:40:fc:b3:e6:68:0f:86:39:31:b9:0a: ef:11:90:6b:e1:6c:a1:b0:12:de:94:8c:d4:a4:0f: 0a:2e:71:d3:f1:e9:62:17:19:65:62:59:67:63:5e: 4b:ba:59:3e:3b:9a:a5:d7:82:e5:a7:0e:e2:03:57: 95:1d:f1:23:ad:db:7a:11:e9:e7:05:ae:17:1d:50: f0:2b:b6:33:de:3b:0b:4d:ac:d8:c5:24:5b:3c:f0: dc:63:f0:2c:1f:99:f8:d2:72:99:14:9c:4f:08:53: ed:f9:e0:c0:8d:de:2d:02:87:b6:26:09:6d:da:2d: 04:56:82:29:0d:9f:28:de:9a:a0:27:d1:6b:d2:e8: fe:ef:29:01:64:50:43:36:ce:e8:de:1c:5b:61:78: 96:73:e7:09:6c:88:43:06:58:9a:4c:d6:cd:87:fb: bc:ac:d0:cd:2c:aa:26:c6:50:ae:8b:d4:6c:5f:aa: d3:13:9f:39:cb:46:41:c1:94:0a:0b:76:33:3e:3b: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:CB:88:9E:01:2B:2C:AD:C5:83:AD:69:C5:CF:8F:77:3D:3D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:22:ed:42:9d:e0:fc:4c:8b:f6:9e:4f:6e:7f:e6:2e:8f:6d: 57:b7:ea:84:36:02:09:2b:44:77:fc:71:3c:bf:63:ed:1e:3f: 36:72:7f:9e:97:d6:ff:54:11:34:e8:17:4c:aa:8b:4f:6e:9e: f3:57:f8:59:a8:b6:3c:c1:b4:59:07:7e:89:3a:40:17:31:51: 7d:37:c0:d0:e3:1e:21:f1:06:95:c3:11:19:a5:0a:d8:a3:83: 46:32:c2:9f:15:bd:a4:e1:a0:f6:5a:2d:0b:de:55:6a:76:f2: 45:d7:99:96:45:dc:20:be:1a:27:8d:c0:50:dc:2d:63:f1:14: 18:b2:03:d4:88:23:a7:e5:75:9c:69:bb:f3:ff:bf:86:06:b7: 13:51:44:43:25:91:06:4e:4b:78:01:d9:7f:16:e1:53:f4:94: 43:b5:6a:88:10:04:d5:39:32:9b:49:90:3e:d5:e8:11:27:98: d6:6e:f1:fb:da:28:68:30:40:29:1d:65:40:3d:ce:e6:68:b0: f2:f9:6a:e9:f8:95:ec:1b:4c:58:31:5f:50:75:45:c5:55:b8: dc:d7:df:58:88:dc:f3:c2:97:85:75:a3:39:f4:7e:2b:03:19: b9:64:88:3c:a7:2c:1f:b2:00:03:ca:f6:b7:f6:41:57:b0:48: 2c:a3:1a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+ivki+EKYosewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NDRmNTBiMDYtMDYyMS00MDkzLWFlNzgtNGJlYTdlNTAxNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseR7YEuC2AIyccCtry0R/Z57wVNypQFU5Rsb TElUxwMCVbGtJdrjYtoQVSJeV4b2aWQ+G/jn6P7IwAEyahMgQPyz5mgPhjkxuQrv EZBr4WyhsBLelIzUpA8KLnHT8eliFxllYllnY15Lulk+O5ql14Llpw7iA1eVHfEj rdt6EennBa4XHVDwK7Yz3jsLTazYxSRbPPDcY/AsH5n40nKZFJxPCFPt+eDAjd4t Aoe2Jglt2i0EVoIpDZ8o3pqgJ9Fr0uj+7ykBZFBDNs7o3hxbYXiWc+cJbIhDBlia TNbNh/u8rNDNLKomxlCui9RsX6rTE585y0ZBwZQKC3YzPjtM0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvzy4ieASssrcWDrWnFz493PT3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMmExMDc1MTktMGVjNS0z MGQ3LTljNTQtMmY3NjJkNThkZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAi7UKd4PxMi/aeT25/5i6PbVe36oQ2AgkrRHf8cTy/Y+0ePzZyf56X 1v9UETToF0yqi09unvNX+FmotjzBtFkHfok6QBcxUX03wNDjHiHxBpXDERmlCtij g0Yywp8VvaThoPZaLQveVWp28kXXmZZF3CC+GieNwFDcLWPxFBiyA9SII6fldZxp u/P/v4YGtxNRREMlkQZOS3gB2X8W4VP0lEO1aogQBNU5MptJkD7V6BEnmNZu8fva KGgwQCkdZUA9zuZosPL5aun4lewbTFgxX1B1RcVVuNzX31iI3PPCl4V1ozn0fisD GblkiDynLB+yAAPK9rf2QVewSCyjGnM= -----END CERTIFICATE-----Generated at Sat Apr 12 01:58:06 2025 by rpki-client