$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa File: 40af74f1-6337-3393-ab22-9e5d61e32e00.roa (raw, json) Hash identifier: RXYhDAHLFcbHeLBXijpE7+dlqej5HIiI2MmITNh6TEE= Subject key identifier: 1F:93:7F:9F:9C:F6:33:0D:D5:29:1A:E7:1B:F1:60:27:D4:51:ED:E3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858486D9054775192DBD3678C7700 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 26744 IP address blocks: 68.170.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:54:77:51:92:db:d3:67:8c:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=2991beed-fc49-47c5-8c4d-56ccd7876c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:52:8b:e8:8e:f6:53:01:4e:ee:20:ba:89: ab:29:48:85:50:e1:f0:23:2d:b0:bc:57:65:b6:53: 4f:bf:64:ff:43:8b:3a:c8:bc:1d:bb:58:04:e8:04: c6:fb:bb:c7:49:12:10:b1:7a:4b:1b:31:76:63:98: ec:27:8c:7c:e7:78:55:95:fd:ce:56:ce:a6:73:4a: 65:50:c2:11:53:6f:65:71:03:16:00:bb:b9:45:d5: 32:9f:a2:07:11:e5:12:0c:3e:23:af:a9:97:cf:87: f1:73:c0:67:26:25:ae:51:df:3b:6a:1e:a7:21:29: 42:3e:5a:70:ab:9c:57:50:05:60:6b:a9:6b:7f:f5: b1:25:19:82:2f:4a:e3:96:b9:9b:13:a6:98:f1:1d: 26:2b:bb:1c:3f:36:62:05:84:cf:ed:99:cc:a8:39: ff:22:3e:32:4a:47:bc:c5:e3:82:6f:f9:e2:c3:69: 90:56:5e:12:ce:c1:7f:00:ab:27:95:c8:21:83:af: 08:df:6e:27:f7:b6:93:7c:ed:c9:92:eb:d4:80:52: f7:8c:48:e6:6d:d6:4c:d6:23:77:d4:b2:42:70:b0: 5b:e8:00:fd:f1:65:02:e5:1f:d7:58:8a:23:18:e9: 88:bf:47:4d:85:0c:85:bb:e6:10:46:15:68:8e:27: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:93:7F:9F:9C:F6:33:0D:D5:29:1A:E7:1B:F1:60:27:D4:51:ED:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e3:83:66:da:43:39:cd:5d:e8:d7:2e:27:fd:da:f2:45:4f: 9c:d3:04:6f:2c:79:07:67:5a:bd:c9:b0:5f:6a:12:ee:3f:ab: ac:bb:70:5f:e3:21:01:6f:f9:40:3b:d6:d9:96:57:39:cf:1a: 8a:af:1a:a2:39:e5:50:ad:52:f4:e8:11:4b:4f:fb:1c:93:82: 36:97:88:fc:92:0c:aa:71:60:ab:16:13:d3:18:02:02:47:65: c0:59:94:2c:f4:a8:d5:54:ce:d4:46:20:61:ca:05:41:8f:89: ab:fc:29:4f:b2:91:76:9b:03:6a:e0:4a:d2:45:37:a6:10:36: 4c:36:68:40:28:18:51:52:b7:c8:5a:ec:b2:c5:91:13:f3:1c: 19:6d:f8:d2:0b:4f:8f:8e:60:d7:25:15:9f:9a:23:95:4c:95: 01:d5:1e:87:91:04:37:f4:4f:e1:8c:3a:63:d6:02:ba:14:03: 36:e5:dd:56:8b:4f:53:89:62:f6:96:08:af:3b:4a:ec:2e:b6: 58:e3:c1:d0:6f:db:58:2a:df:80:16:1a:4b:07:1d:d4:75:d8: 57:69:6a:39:9a:5a:de:65:a7:f3:61:eb:3f:f7:8f:50:c5:ec: 26:71:d4:d6:80:9d:5c:75:89:ad:d3:19:84:60:77:19:cb:5c: 8d:51:47:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFR3UZLb02eMdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk Mjk5MWJlZWQtZmM0OS00N2M1LThjNGQtNTZjY2Q3ODc2YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmdSi+iO9lMBTu4guomrKUiFUOHwIy2wvFdl tlNPv2T/Q4s6yLwdu1gE6ATG+7vHSRIQsXpLGzF2Y5jsJ4x853hVlf3OVs6mc0pl UMIRU29lcQMWALu5RdUyn6IHEeUSDD4jr6mXz4fxc8BnJiWuUd87ah6nISlCPlpw q5xXUAVga6lrf/WxJRmCL0rjlrmbE6aY8R0mK7scPzZiBYTP7ZnMqDn/Ij4ySke8 xeOCb/niw2mQVl4SzsF/AKsnlcghg68I324n97aTfO3JkuvUgFL3jEjmbdZM1iN3 1LJCcLBb6AD98WUC5R/XWIojGOmIv0dNhQyFu+YQRhVojifYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+Tf5+c9jMN1Ska5xvxYCfUUe3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNDBhZjc0ZjEtNjMzNy0z MzkzLWFiMjItOWU1ZDYxZTMyZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTjg2baQznNXejXLif92vJFT5zTBG8seQdnWr3JsF9qEu4/q6y7cF/j IQFv+UA71tmWVznPGoqvGqI55VCtUvToEUtP+xyTgjaXiPySDKpxYKsWE9MYAgJH ZcBZlCz0qNVUztRGIGHKBUGPiav8KU+ykXabA2rgStJFN6YQNkw2aEAoGFFSt8ha 7LLFkRPzHBlt+NILT4+OYNclFZ+aI5VMlQHVHoeRBDf0T+GMOmPWAroUAzbl3VaL T1OJYvaWCK87SuwutljjwdBv21gq34AWGksHHdR12FdpajmaWt5lp/Nh6z/3j1DF 7CZx1NaAnVx1ia3TGYRgdxnLXI1RR+w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:26 2025 by rpki-client