$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa File: 37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa (raw, json) Hash identifier: ErE2d12Q9dEHB3NQrc0ReaZEktDdVujffDnkj3VlHsA= Subject key identifier: 1A:76:8F:17:D4:AC:AB:7A:F9:F7:5E:C0:FA:E7:B6:00:2A:F8:B3:56 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F43285849218410461DDF206E58C9FC40 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 68.170.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:10:46:1d:df:20:6e:58:c9:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=a6c865b7-429f-4908-9521-9cd01f0b732d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:b8:b2:48:27:0e:5d:c3:94:39:30:2b:9e: 9a:3d:81:49:4e:7f:9f:db:e3:3e:09:7a:22:cf:15: 73:73:ed:4c:21:f3:0a:5a:b9:ce:2d:c0:a7:f4:f1: 2c:1f:43:b3:91:e6:d5:08:7f:0f:7d:59:bd:65:d9: 93:db:8e:20:e8:5e:79:05:ec:8d:a4:fb:13:e7:51: 35:16:53:98:f4:92:a3:f5:7e:b1:04:13:53:a8:34: d2:73:fe:0d:d0:55:33:5f:04:f3:08:71:df:63:12: 08:e7:fd:aa:3f:cd:4e:c1:19:4e:c8:30:6b:c8:c6: f8:52:37:26:14:7b:6b:90:41:dc:bb:42:c6:97:99: 9e:83:31:46:b9:d2:85:af:18:46:4e:1f:53:f2:ae: 8e:bc:80:73:50:4e:fe:08:12:70:d6:d7:33:50:7c: 1f:92:87:fe:a3:b8:89:7c:a8:d5:22:2c:b4:8a:f8: 5a:50:8e:b4:94:b0:f4:4b:d1:50:40:52:0d:87:14: 44:8b:5d:bc:17:f5:50:35:53:8f:71:ab:7c:58:78: e3:8e:22:1f:af:20:22:3c:21:c6:84:b7:c2:cd:86: 2e:7d:77:3f:32:2f:49:86:31:af:6d:74:dc:d9:e3: 9b:77:e5:97:6c:f1:02:84:25:6e:96:de:cf:d7:f6: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:76:8F:17:D4:AC:AB:7A:F9:F7:5E:C0:FA:E7:B6:00:2A:F8:B3:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8a:9f:0f:d1:f8:08:3b:ad:58:06:f4:8f:17:92:e7:c5:ac: fa:4d:6e:87:38:67:4e:cb:d0:2c:22:4d:e2:a4:9f:72:7a:21: 25:ea:30:5e:89:4f:57:56:d3:2e:d3:ae:44:8f:1a:4c:b5:3c: ca:2d:44:88:f2:b6:24:71:3c:1b:d4:80:e9:5a:66:88:43:79: 80:fa:45:85:e3:47:68:f4:5a:be:cc:9c:63:69:85:e9:d9:21: d1:9a:b0:2a:a9:db:ef:ee:38:03:94:51:cb:e1:ef:7d:6b:26: 5d:11:75:d5:b3:04:bf:9a:1b:b2:0d:1c:05:dd:55:40:50:d5: 37:a7:fa:8a:34:82:f7:02:97:1d:c8:9b:b4:2e:e0:e3:e1:3b: 53:7f:43:16:e1:58:e9:28:77:b2:e4:e8:9c:29:70:ed:06:18: c5:96:9b:66:ca:75:68:63:e3:22:df:81:7d:bf:fd:eb:cf:fa: 84:ab:0c:41:f6:e3:72:b2:79:d2:d8:25:e5:b7:b6:e8:64:d9: 5d:0f:1d:93:e4:6e:97:27:01:12:d6:ea:c5:f6:ea:da:7e:d1: aa:0b:92:f7:83:fe:69:df:91:ad:6a:4c:a7:40:39:ba:5f:00: e2:98:66:bf:79:a5:09:99:5e:44:d9:1a:b1:ce:5a:62:e2:7f: eb:28:f6:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBBGHd8gbljJ/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YTZjODY1YjctNDI5Zi00OTA4LTk1MjEtOWNkMDFmMGI3MzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNu4skgnDl3DlDkwK56aPYFJTn+f2+M+CXoi zxVzc+1MIfMKWrnOLcCn9PEsH0OzkebVCH8PfVm9ZdmT244g6F55BeyNpPsT51E1 FlOY9JKj9X6xBBNTqDTSc/4N0FUzXwTzCHHfYxII5/2qP81OwRlOyDBryMb4Ujcm FHtrkEHcu0LGl5megzFGudKFrxhGTh9T8q6OvIBzUE7+CBJw1tczUHwfkof+o7iJ fKjVIiy0ivhaUI60lLD0S9FQQFINhxREi128F/VQNVOPcat8WHjjjiIfryAiPCHG hLfCzYYufXc/Mi9JhjGvbXTc2eObd+WXbPEChCVult7P1/YqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp2jxfUrKt6+fdewPrntgAq+LNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzdjMjhjZDctMjVmNC0z MzczLWIyZjktOTI0YjNmYTVmMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+Knw/R+Ag7rVgG9I8XkufFrPpNboc4Z07L0CwiTeKkn3J6ISXqMF6J T1dW0y7TrkSPGky1PMotRIjytiRxPBvUgOlaZohDeYD6RYXjR2j0Wr7MnGNphenZ IdGasCqp2+/uOAOUUcvh731rJl0RddWzBL+aG7INHAXdVUBQ1Ten+oo0gvcClx3I m7Qu4OPhO1N/QxbhWOkod7Lk6JwpcO0GGMWWm2bKdWhj4yLfgX2//evP+oSrDEH2 43KyedLYJeW3tuhk2V0PHZPkbpcnARLW6sX26tp+0aoLkveD/mnfka1qTKdAObpf AOKYZr95pQmZXkTZGrHOWmLif+so9mg= -----END CERTIFICATE-----Generated at Sat Apr 12 12:45:16 2025 by rpki-client