$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa File: 36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa (raw, json) Hash identifier: e4bRF1mFusd4Bvi7V/5hONinlxzBFpK4F7RdnyULtAY= Subject key identifier: 05:C3:B0:3E:96:A0:A2:1C:F4:B0:B2:31:6A:F9:3C:64:A5:6B:26:3F Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858494CC9477E4A3DCA2DD70842C0 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 26744 IP address blocks: 68.170.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:47:7e:4a:3d:ca:2d:d7:08:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=298d4179-0e43-4978-b785-899f537bfb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:65:cc:c7:27:e2:35:ae:76:6f:b4:bf:ad: 44:ef:c2:61:d4:e0:e4:1b:80:49:aa:20:32:ea:ae: ea:a7:21:bc:99:e4:51:81:83:64:9f:7f:4b:be:30: 76:44:2c:2f:79:cc:5b:85:18:48:2c:38:ce:39:bf: 7a:c7:18:4a:67:a6:f3:67:3e:f7:bf:71:ad:c3:1b: 3b:84:57:58:c4:d1:8e:a4:5c:00:ca:9b:d3:07:3e: cf:29:97:b7:34:25:bd:1b:3c:a2:41:98:ab:80:40: d0:94:1c:3a:70:fd:8c:3e:21:b2:f6:61:0b:cf:39: e8:ec:8a:18:90:8c:c5:ce:79:da:7f:47:2a:a9:6f: a5:a7:87:d3:25:4c:b4:c3:81:fe:5f:15:bf:26:d5: 0e:1e:3a:89:07:b2:5c:fa:fc:64:0a:13:af:37:63: 1f:67:8b:cc:aa:c8:70:85:fa:bb:be:45:08:c2:70: f8:07:43:38:7c:36:3d:71:b9:a8:0e:a0:03:54:97: 14:23:6e:41:58:e2:2e:ee:71:dc:09:50:64:f8:10: 92:8b:c9:2e:e3:6d:97:c2:36:63:c1:6d:28:a8:ef: 07:9d:43:41:95:13:df:77:b0:b7:93:9a:2c:fe:ad: 23:f9:86:e8:f5:f6:ed:f4:b6:b0:98:dc:cd:2b:84: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C3:B0:3E:96:A0:A2:1C:F4:B0:B2:31:6A:F9:3C:64:A5:6B:26:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:92:1b:e1:66:75:88:39:2f:40:82:b8:8f:eb:1c:c3:8f:03: 50:fa:07:be:32:6e:2e:ab:2e:17:51:b7:60:b1:15:27:d7:b7: 21:70:25:2b:52:9e:cc:c5:47:92:d0:4e:46:11:04:67:4d:42: a9:93:c4:35:5e:7d:7d:86:92:a7:be:fe:16:a2:b0:c0:b6:af: 6b:3b:12:b6:f5:b5:ec:60:bd:83:dc:26:88:bd:8a:91:52:b8: 9a:60:e3:30:6c:8d:83:ec:d4:38:39:81:fc:5f:b1:3c:32:99: ea:26:dd:16:71:7b:37:da:52:12:36:2e:f4:f7:d3:b3:c8:fc: 9b:02:b4:60:a5:19:64:14:10:9e:67:0c:7c:16:33:fb:df:d3: d1:43:20:02:f6:fc:ec:2e:91:8b:07:97:65:b3:a9:fa:57:ce: 9c:c6:ba:b6:58:be:92:e9:aa:1f:69:02:7a:48:6e:5b:45:ee: fb:d3:06:71:2a:b0:c8:a5:d1:04:3a:ef:6f:b3:71:12:5c:54: d4:07:be:f4:26:d2:89:90:30:55:4c:2c:df:6d:4b:f9:45:05: 89:d2:1e:74:37:43:43:e4:8e:32:a1:27:35:b8:e4:6e:f5:74: 3b:5f:04:40:8f:b4:27:04:d1:60:6e:dd:ba:ed:d2:69:d6:fd: 4d:70:33:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUd+Sj3KLdcIQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk Mjk4ZDQxNzktMGU0My00OTc4LWI3ODUtODk5ZjUzN2JmYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLNlzMcn4jWudm+0v61E78Jh1ODkG4BJqiAy 6q7qpyG8meRRgYNkn39LvjB2RCwvecxbhRhILDjOOb96xxhKZ6bzZz73v3Gtwxs7 hFdYxNGOpFwAypvTBz7PKZe3NCW9GzyiQZirgEDQlBw6cP2MPiGy9mELzzno7IoY kIzFznnaf0cqqW+lp4fTJUy0w4H+XxW/JtUOHjqJB7Jc+vxkChOvN2MfZ4vMqshw hfq7vkUIwnD4B0M4fDY9cbmoDqADVJcUI25BWOIu7nHcCVBk+BCSi8ku422XwjZj wW0oqO8HnUNBlRPfd7C3k5os/q0j+Ybo9fbt9LawmNzNK4QkTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXDsD6WoKIc9LCyMWr5PGSlayY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzZkY2Q3NGEtMDFiYS0z NWJmLWE2YWEtOTU4NDFkMTM2ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuSG+FmdYg5L0CCuI/rHMOPA1D6B74ybi6rLhdRt2CxFSfXtyFwJStS nszFR5LQTkYRBGdNQqmTxDVefX2Gkqe+/haisMC2r2s7Erb1texgvYPcJoi9ipFS uJpg4zBsjYPs1Dg5gfxfsTwymeom3RZxezfaUhI2LvT307PI/JsCtGClGWQUEJ5n DHwWM/vf09FDIAL2/OwukYsHl2WzqfpXzpzGurZYvpLpqh9pAnpIbltF7vvTBnEq sMil0QQ672+zcRJcVNQHvvQm0omQMFVMLN9tS/lFBYnSHnQ3Q0PkjjKhJzW45G71 dDtfBECPtCcE0WBu3brt0mnW/U1wM/g= -----END CERTIFICATE-----Generated at Sat Apr 12 14:56:07 2025 by rpki-client