$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/44d94397-7cc9-3de0-819a-3965f0d36265.roa File: 44d94397-7cc9-3de0-819a-3965f0d36265.roa (raw, json) Hash identifier: iLKR0Q33pPJqLDe5v/J0b1ocKUoFdg/OYAtuX8xKkV8= Subject key identifier: 22:55:42:D3:4E:DD:B1:47:9B:CC:4E:1F:D8:75:30:04:AD:9D:22:D6 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584921840FD8185013B12ED6A600 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/44d94397-7cc9-3de0-819a-3965f0d36265.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 68.170.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0f:d8:18:50:13:b1:2e:d6:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=afad09a9-3f58-4e45-97c6-2612c71382dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:18:df:6b:34:97:02:96:11:62:f2:83:bc: 82:2e:27:06:91:1a:9c:7b:3d:28:ae:ef:b0:5f:79: 2c:dc:de:7e:09:ce:91:ee:12:e3:28:8c:f3:5f:65: 60:78:48:a0:2b:b5:f3:0f:79:a4:33:3a:89:c3:a3: 0e:15:e0:a7:68:c5:d2:68:d6:43:83:37:7f:5c:73: 77:81:28:fd:c7:6a:ab:54:a0:81:80:a1:62:e6:15: ba:8d:4a:de:e8:4a:d2:44:9d:ef:e8:a1:17:45:66: f9:44:a5:54:0c:13:eb:45:a8:cb:75:fe:e5:38:82: 95:6d:78:90:e7:7e:22:e7:92:51:22:78:43:7a:4d: 2b:b1:7b:a5:ef:92:eb:f9:68:8f:9f:1b:9a:48:0e: 11:20:48:01:c2:b4:da:59:60:35:57:b9:83:4e:e8: cc:fd:59:39:4c:2c:88:85:28:18:52:64:85:53:bf: 4f:09:fd:13:ea:5d:20:69:ab:55:28:1f:5b:a1:3c: 2f:c3:ca:67:d8:29:14:db:1a:85:77:3d:77:7e:9f: ef:12:1b:93:e4:b5:2c:21:e7:d3:46:cf:55:49:e4: e2:c1:9a:79:56:e2:4a:7f:b9:3a:3a:28:b2:af:f7: a9:f2:15:8e:22:6a:76:6a:74:3e:a0:b9:fd:9d:9d: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:55:42:D3:4E:DD:B1:47:9B:CC:4E:1F:D8:75:30:04:AD:9D:22:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/44d94397-7cc9-3de0-819a-3965f0d36265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:03:4e:31:b7:f4:4e:31:ba:e0:1a:e1:c7:8b:19:8b:94:03: 10:55:5d:96:a0:14:eb:26:47:48:04:f7:db:68:ae:2c:4e:0b: 76:f1:29:17:64:7d:bf:53:48:58:37:45:cf:4b:61:59:76:ca: 27:7e:46:18:da:3d:23:fa:9f:71:72:05:55:14:39:b0:33:de: 4d:4e:9c:05:50:6a:2c:63:7c:2f:1c:e9:8b:49:00:3b:eb:ac: 69:8e:cc:40:54:b7:95:60:b7:7e:7a:7d:00:93:57:0c:33:12: 7a:aa:b6:21:22:36:6d:55:4d:3f:4f:05:7d:3e:6e:d7:4a:a4: c6:dd:b7:14:b7:64:14:64:93:f0:19:98:cc:ea:06:f7:96:7c: 8a:96:66:86:42:71:b8:ea:a3:75:7c:51:f8:39:34:3c:dd:c2: 24:0d:76:5d:99:2c:99:67:76:1c:04:03:d3:70:39:73:77:84: 72:90:c4:c1:76:30:e0:e0:1d:ee:93:96:d7:9f:30:03:ca:98: 8f:f9:77:bb:38:b9:9a:74:8f:ca:a0:46:5e:7c:62:1f:63:57: 2e:2c:81:ec:90:ce:5d:c7:35:ad:3f:74:a5:36:8e:c0:7b:d1: 54:b8:ab:96:69:45:21:27:41:05:a7:7b:ba:91:af:00:3e:80: 4c:a1:46:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhA/YGFATsS7WpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWZhZDA5YTktM2Y1OC00ZTQ1LTk3YzYtMjYxMmM3MTM4MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pIY32s0lwKWEWLyg7yCLicGkRqcez0oru+w X3ks3N5+Cc6R7hLjKIzzX2VgeEigK7XzD3mkMzqJw6MOFeCnaMXSaNZDgzd/XHN3 gSj9x2qrVKCBgKFi5hW6jUre6ErSRJ3v6KEXRWb5RKVUDBPrRajLdf7lOIKVbXiQ 534i55JRInhDek0rsXul75Lr+WiPnxuaSA4RIEgBwrTaWWA1V7mDTujM/Vk5TCyI hSgYUmSFU79PCf0T6l0gaatVKB9boTwvw8pn2CkU2xqFdz13fp/vEhuT5LUsIefT Rs9VSeTiwZp5VuJKf7k6Oiiyr/ep8hWOImp2anQ+oLn9nZ38fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJVQtNO3bFHm8xOH9h1MAStnSLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNDRkOTQzOTctN2NjOS0z ZGUwLTgxOWEtMzk2NWYwZDM2MjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0DTjG39E4xuuAa4ceLGYuUAxBVXZagFOsmR0gE99torixOC3bxKRdk fb9TSFg3Rc9LYVl2yid+RhjaPSP6n3FyBVUUObAz3k1OnAVQaixjfC8c6YtJADvr rGmOzEBUt5Vgt356fQCTVwwzEnqqtiEiNm1VTT9PBX0+btdKpMbdtxS3ZBRkk/AZ mMzqBveWfIqWZoZCcbjqo3V8Ufg5NDzdwiQNdl2ZLJlndhwEA9NwOXN3hHKQxMF2 MODgHe6TltefMAPKmI/5d7s4uZp0j8qgRl58Yh9jVy4sgeyQzl3HNa0/dKU2jsB7 0VS4q5ZpRSEnQQWne7qRrwA+gEyhRpk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:04 2025 by rpki-client