$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa File: aa02e257-c6fb-3776-8bcf-70c533addabd.roa (raw, json) Hash identifier: aWh95h1Z2sWLFBF4gnqG5HALXq5SFmDRO/TFmvbBDUA= Subject key identifier: 15:AD:9E:5E:7A:E6:8C:F7:FF:B3:F2:F3:36:EE:77:81:DF:72:A1:AB Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584921841074C5B4CF83F4C7C200 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 68.170.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:10:74:c5:b4:cf:83:f4:c7:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=c95dd516-7bff-4c53-9fe0-01d60ba6c9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:89:b1:9f:9b:52:72:f6:36:5b:84:02:0d: 8d:8b:43:dd:63:0c:5d:75:2b:c5:37:dd:b8:66:07: a8:2e:94:81:44:df:d3:42:4c:04:c4:f7:85:3d:06: d4:11:32:f9:af:eb:fc:03:ad:78:56:28:40:79:90: a1:9d:0a:aa:01:db:b0:70:30:57:1c:2e:bb:86:bf: 94:f9:5f:8d:fd:33:0b:ea:3a:e5:68:15:95:ba:db: 77:37:69:b6:51:39:ae:6a:6b:c0:3a:11:2e:d3:02: 64:59:f1:da:5a:7f:56:84:00:8e:94:b1:98:65:5d: f1:8d:09:da:31:63:30:dd:9a:bb:5a:ff:68:3a:b7: 6a:1f:56:35:88:de:84:76:e3:82:34:83:62:e8:e4: d4:d0:3f:e0:2c:be:2b:8e:fb:aa:48:a7:c2:5e:21: 8e:90:c7:f2:f6:de:f9:de:af:f8:c6:bd:43:39:91: 7e:6e:17:43:42:c0:89:38:39:d2:8c:22:c4:ce:b5: 50:ba:02:32:a9:15:d1:8c:b8:c9:50:5e:e8:62:7e: b1:b6:fb:25:a8:41:7f:3f:b2:6f:d3:29:0a:d6:cd: e1:74:a8:b5:d0:f9:31:49:bd:20:ba:92:eb:a4:38: c1:e3:1a:97:35:35:88:5d:01:4a:c1:68:8b:e5:4c: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AD:9E:5E:7A:E6:8C:F7:FF:B3:F2:F3:36:EE:77:81:DF:72:A1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8a:0c:2b:46:69:3d:9b:0e:4c:62:8d:d7:89:48:8c:d7:a9: 7b:d8:09:99:a4:04:07:fd:19:67:e3:29:4f:59:82:a8:7f:0b: f5:97:f1:51:d7:71:5f:0b:d6:dc:d6:2c:fe:30:bd:35:ec:49: 19:42:cb:0f:6e:b5:92:d5:c4:c0:42:72:9e:d3:15:ce:f2:6c: fd:48:63:b7:7b:f4:d7:0f:3b:27:ea:51:69:18:e5:d2:15:0a: 97:d0:48:2d:46:6a:a0:7d:e6:c8:ab:22:64:6c:aa:cb:b9:97: 9c:6c:3a:9f:8d:58:18:64:cc:20:5f:c6:d6:87:b8:22:17:ef: 4d:9f:63:c7:c8:1c:58:5c:03:a9:78:23:6b:30:90:51:be:b7: 92:60:19:7a:0e:3d:f4:52:3a:33:a4:35:83:a1:ca:cb:94:4d: 05:73:03:14:f7:e5:7b:b9:a4:fd:da:c5:41:c9:75:41:e6:fb: 5c:b8:91:93:89:f8:b7:da:b9:ee:fb:8b:41:50:ef:35:a6:8e: c5:60:bb:bd:94:a1:1c:cc:8d:00:00:f4:a0:10:58:90:17:95: c4:4b:e2:88:d7:9d:ee:25:8d:29:19:7c:2c:21:a2:f5:57:70: a4:f3:33:57:b2:74:d6:68:54:3f:42:6f:c4:97:42:f2:db:3d: 2d:69:a0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBB0xbTPg/THwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk Yzk1ZGQ1MTYtN2JmZi00YzUzLTlmZTAtMDFkNjBiYTZjOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih6JsZ+bUnL2NluEAg2Ni0PdYwxddSvFN924 ZgeoLpSBRN/TQkwExPeFPQbUETL5r+v8A614VihAeZChnQqqAduwcDBXHC67hr+U +V+N/TML6jrlaBWVutt3N2m2UTmuamvAOhEu0wJkWfHaWn9WhACOlLGYZV3xjQna MWMw3Zq7Wv9oOrdqH1Y1iN6EduOCNINi6OTU0D/gLL4rjvuqSKfCXiGOkMfy9t75 3q/4xr1DOZF+bhdDQsCJODnSjCLEzrVQugIyqRXRjLjJUF7oYn6xtvslqEF/P7Jv 0ykK1s3hdKi10PkxSb0gupLrpDjB4xqXNTWIXQFKwWiL5UwSsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWtnl565oz3/7Py8zbud4HfcqGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYWEwMmUyNTctYzZmYi0z Nzc2LThiY2YtNzBjNTMzYWRkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaKDCtGaT2bDkxijdeJSIzXqXvYCZmkBAf9GWfjKU9Zgqh/C/WX8VHX cV8L1tzWLP4wvTXsSRlCyw9utZLVxMBCcp7TFc7ybP1IY7d79NcPOyfqUWkY5dIV CpfQSC1GaqB95sirImRsqsu5l5xsOp+NWBhkzCBfxtaHuCIX702fY8fIHFhcA6l4 I2swkFG+t5JgGXoOPfRSOjOkNYOhysuUTQVzAxT35Xu5pP3axUHJdUHm+1y4kZOJ +Lfaue77i0FQ7zWmjsVgu72UoRzMjQAA9KAQWJAXlcRL4ojXne4ljSkZfCwhovVX cKTzM1eydNZoVD9Cb8SXQvLbPS1poLc= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:25 2025 by rpki-client