$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a607d69-bb3d-3594-894d-0bca0366ca77.roa File: 9a607d69-bb3d-3594-894d-0bca0366ca77.roa (raw, json) Hash identifier: /EUK5fFdDJxNG3cyiWOUTpvmGNcbAnMwN/5FcMvYzog= Subject key identifier: 2D:F4:99:66:63:38:D2:4F:8E:67:CB:EC:BE:2F:01:CB:59:50:EE:76 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F43285849218410FE746EE239C6C21800 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a607d69-bb3d-3594-894d-0bca0366ca77.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 68.170.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:10:fe:74:6e:e2:39:c6:c2:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=b012c839-f287-405e-81e5-4f3bb8c717e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:2e:34:3e:07:f8:84:34:10:ef:65:9a:8f: f8:db:8b:76:49:9a:40:fe:39:46:c6:6e:a3:ec:31: 3e:7e:2c:6b:b4:66:6f:73:07:88:74:f4:cf:f5:f5: 74:a2:34:b0:bc:c5:6c:54:7c:62:40:23:6e:6f:cb: 80:6f:22:be:db:5e:32:f0:dc:e4:54:e0:0f:6e:c3: 6c:5b:b9:26:68:10:f6:c9:21:35:80:f5:91:2c:c6: f7:02:66:27:7f:40:1c:ec:7f:83:f1:22:48:b9:18: 4e:ac:a4:e1:e0:d9:30:3f:2d:4d:42:9c:34:0d:ff: a0:33:f3:63:ba:ff:43:59:8d:8f:af:80:55:ad:11: 68:97:c1:85:98:ee:d7:3d:70:59:ff:f0:f6:a6:a2: 17:85:86:34:01:d8:7a:9d:a7:55:c0:ef:35:29:57: b4:6d:40:9f:4c:ca:df:a6:80:b0:fd:0f:5f:42:f2: 8a:0f:05:ed:36:42:84:6d:06:2f:36:60:f1:c7:f6: bd:31:a4:f3:c8:8f:52:17:80:c4:ae:45:03:e8:e6: 00:44:58:96:37:6a:fb:e7:31:c8:27:37:ca:ac:2b: 69:ca:cf:10:97:02:47:34:bc:5e:b9:80:bb:96:a2: c9:ef:75:bb:b6:3e:9a:2d:1e:04:16:53:07:1c:15: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F4:99:66:63:38:D2:4F:8E:67:CB:EC:BE:2F:01:CB:59:50:EE:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a607d69-bb3d-3594-894d-0bca0366ca77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c1:e8:d3:ae:ce:9c:4b:c4:c0:2b:ba:98:95:f9:a4:ab:c2: 60:62:8b:92:a2:cf:6c:a3:07:ce:fa:e7:b0:ed:a0:5c:42:ce: cc:b0:6a:9f:2e:90:ac:2e:35:8b:47:76:63:f3:72:d8:03:4c: 4e:cf:63:c1:8b:57:89:3c:a2:da:ca:07:b8:27:40:dc:9a:7f: 45:f4:ee:94:99:f1:02:03:dc:0c:d2:a6:fc:8b:0a:1a:48:bb: c3:88:6f:73:52:cb:0d:97:4a:c2:08:aa:05:ce:65:f6:b9:f2: e7:33:ce:1c:38:2b:cd:65:14:91:84:43:8e:74:01:1f:fc:41: 5b:86:9a:1b:44:5d:e8:00:fc:d4:34:74:19:09:22:85:72:99: 94:b2:ec:9e:a6:ec:89:ac:fd:54:88:17:58:74:7f:04:0c:12: 23:48:62:14:48:75:0a:e0:84:db:ee:43:7a:88:f9:b4:a7:a8: f7:8a:45:98:85:de:d3:9f:a6:6e:27:cd:4f:79:79:e4:12:91: cf:4f:5d:be:0f:cb:98:22:5d:62:00:89:66:9e:86:dc:71:e6: f8:90:89:65:db:16:0f:b1:7d:2a:52:bf:7c:c1:25:68:84:2d: d9:a4:65:9d:6b:7d:65:d3:2f:e8:cc:6f:10:c0:fa:5f:52:54: ec:52:c5:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBD+dG7iOcbCGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YjAxMmM4MzktZjI4Ny00MDVlLTgxZTUtNGYzYmI4YzcxN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpouND4H+IQ0EO9lmo/424t2SZpA/jlGxm6j 7DE+fixrtGZvcweIdPTP9fV0ojSwvMVsVHxiQCNub8uAbyK+214y8NzkVOAPbsNs W7kmaBD2ySE1gPWRLMb3AmYnf0Ac7H+D8SJIuRhOrKTh4NkwPy1NQpw0Df+gM/Nj uv9DWY2Pr4BVrRFol8GFmO7XPXBZ//D2pqIXhYY0Adh6nadVwO81KVe0bUCfTMrf poCw/Q9fQvKKDwXtNkKEbQYvNmDxx/a9MaTzyI9SF4DErkUD6OYARFiWN2r75zHI JzfKrCtpys8QlwJHNLxeuYC7lqLJ73W7tj6aLR4EFlMHHBViEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC30mWZjONJPjmfL7L4vActZUO52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvOWE2MDdkNjktYmIzZC0z NTk0LTg5NGQtMGJjYTAzNjZjYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPB6NOuzpxLxMArupiV+aSrwmBii5Kiz2yjB87657DtoFxCzsywap8u kKwuNYtHdmPzctgDTE7PY8GLV4k8otrKB7gnQNyaf0X07pSZ8QID3AzSpvyLChpI u8OIb3NSyw2XSsIIqgXOZfa58uczzhw4K81lFJGEQ450AR/8QVuGmhtEXegA/NQ0 dBkJIoVymZSy7J6m7Ims/VSIF1h0fwQMEiNIYhRIdQrghNvuQ3qI+bSnqPeKRZiF 3tOfpm4nzU95eeQSkc9PXb4Py5giXWIAiWaehtxx5viQiWXbFg+xfSpSv3zBJWiE LdmkZZ1rfWXTL+jMbxDA+l9SVOxSxdI= -----END CERTIFICATE-----Generated at Sat Apr 12 12:55:24 2025 by rpki-client