$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa File: 40af74f1-6337-3393-ab22-9e5d61e32e00.roa (raw, json) Hash identifier: ds/w5y/00oLloYIcGEE5ETVwX6vv5+rxU5tYM23Qj+U= Subject key identifier: FF:C7:E1:15:79:3A:AE:72:9F:E4:86:44:7A:F6:92:B6:DE:C8:7C:DA Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858494CC94809A125C1E14CC9DF00 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 26744 IP address blocks: 68.170.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:48:09:a1:25:c1:e1:4c:c9:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=0cae59b6-f54f-4966-be65-4162c7d08f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:8b:91:e7:57:53:2a:17:74:67:46:34:d2: b5:e2:14:5d:8b:d3:2f:ee:8f:5a:b6:97:65:60:7a: 9c:b0:56:9a:45:7b:b7:77:16:4b:6a:1c:87:80:2c: a0:a7:92:42:ed:d1:25:48:b3:6b:14:58:8f:3c:84: a6:37:18:a5:71:50:d5:59:39:48:9e:15:02:9e:b6: 1c:20:92:fb:c8:e8:8d:2c:ad:81:54:32:7f:6b:dd: 19:6e:0e:2b:fc:15:b8:7e:89:bf:b5:0d:80:e5:f2: 4c:67:12:b7:6a:cf:82:46:a7:3a:56:8d:a0:e9:d3: 5b:ca:d5:d4:8f:a0:9f:a9:b4:14:c8:6d:cc:0a:05: 54:c5:e2:29:a7:ba:27:82:c6:a7:ff:c4:99:de:9d: 4a:b7:9a:30:24:36:1c:eb:6d:a9:e6:27:5f:8d:56: 00:56:ae:f0:93:c3:22:c0:8c:e9:3f:89:12:70:2c: af:12:b7:59:d2:4f:7f:b8:42:58:f8:2b:9c:29:db: fc:8f:18:be:92:b2:34:f2:38:27:34:2c:ff:b5:ed: 5b:84:29:6e:f3:cd:0f:3e:7f:9f:df:89:e1:47:12: 25:f0:7a:ef:a1:bd:d8:cf:7c:e9:8f:b5:f9:a6:7a: 67:ea:59:f3:9f:51:24:b2:85:ad:1d:73:2d:92:76: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C7:E1:15:79:3A:AE:72:9F:E4:86:44:7A:F6:92:B6:DE:C8:7C:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a7:a6:d4:2f:41:f6:af:c0:5c:3f:b7:20:7b:39:db:2c:26: 56:7d:46:63:21:74:33:65:d6:c1:c9:12:d6:80:04:db:74:db: 6b:cb:f6:6a:ef:97:79:a6:da:44:52:2e:b7:94:94:b2:b1:93: 77:42:38:06:63:9e:78:cc:34:20:cd:c8:d0:a3:40:dc:94:f1: 12:16:cf:4c:5d:87:84:d2:f1:29:83:d7:c8:75:de:fd:8d:2b: d8:74:cc:03:96:b8:a8:1c:ce:62:e5:92:c6:0b:ec:1d:6e:a2: ed:bc:f3:b7:b1:80:3d:62:b5:4a:58:44:eb:d4:fb:1b:bf:ed: 3d:18:23:32:6f:02:4b:51:ee:85:ac:e7:2d:9b:56:5c:96:18: 46:63:cd:da:7e:88:83:d6:29:27:62:25:05:64:38:51:af:7e: fb:93:a4:79:62:55:e3:3c:90:42:76:6f:f1:06:77:ad:f7:46: 28:04:73:67:98:f6:9a:b0:48:a0:07:f3:98:03:14:4b:1e:09: a8:51:8b:8b:52:fd:97:a2:77:4e:2c:13:3b:cb:79:e6:31:76: 23:5b:f5:e1:fc:e5:34:2a:77:c5:60:a6:c2:5b:26:ec:12:d9: ed:96:37:91:4e:88:63:81:5c:fa:82:b8:b2:2b:95:03:28:4e: 57:de:10:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUgJoSXB4UzJ3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MGNhZTU5YjYtZjU0Zi00OTY2LWJlNjUtNDE2MmM3ZDA4ZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNCLkedXUyoXdGdGNNK14hRdi9Mv7o9atpdl YHqcsFaaRXu3dxZLahyHgCygp5JC7dElSLNrFFiPPISmNxilcVDVWTlInhUCnrYc IJL7yOiNLK2BVDJ/a90Zbg4r/BW4fom/tQ2A5fJMZxK3as+CRqc6Vo2g6dNbytXU j6CfqbQUyG3MCgVUxeIpp7ongsan/8SZ3p1Kt5owJDYc622p5idfjVYAVq7wk8Mi wIzpP4kScCyvErdZ0k9/uEJY+CucKdv8jxi+krI08jgnNCz/te1bhClu880PPn+f 34nhRxIl8Hrvob3Yz3zpj7X5pnpn6lnzn1EksoWtHXMtknZzjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/H4RV5Oq5yn+SGRHr2krbeyHzaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNDBhZjc0ZjEtNjMzNy0z MzkzLWFiMjItOWU1ZDYxZTMyZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOnptQvQfavwFw/tyB7OdssJlZ9RmMhdDNl1sHJEtaABNt022vL9mrv l3mm2kRSLreUlLKxk3dCOAZjnnjMNCDNyNCjQNyU8RIWz0xdh4TS8SmD18h13v2N K9h0zAOWuKgczmLlksYL7B1uou2887exgD1itUpYROvU+xu/7T0YIzJvAktR7oWs 5y2bVlyWGEZjzdp+iIPWKSdiJQVkOFGvfvuTpHliVeM8kEJ2b/EGd633RigEc2eY 9pqwSKAH85gDFEseCahRi4tS/Zeid04sEzvLeeYxdiNb9eH85TQqd8VgpsJbJuwS 2e2WN5FOiGOBXPqCuLIrlQMoTlfeEIk= -----END CERTIFICATE-----Generated at Sun Apr 13 01:32:28 2025 by rpki-client