$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa5b277e-16fc-34ff-bc83-82ab6f687b8c.roa File: aa5b277e-16fc-34ff-bc83-82ab6f687b8c.roa (raw, json) Hash identifier: lqyz43Bb5X4vL3QE+zB++LZWMVoogthkU4U8KADBHGw= Subject key identifier: A0:C5:F2:1C:C1:7D:AC:51:A2:28:74:0A:10:7E:BB:45:C2:7A:A5:B3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858492184101184D49EADEBCC6F08 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa5b277e-16fc-34ff-bc83-82ab6f687b8c.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 68.170.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:10:11:84:d4:9e:ad:eb:cc:6f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=0ec0997c-52d8-401c-9fe2-ae06eb235c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:ae:e8:a5:0f:79:7e:f1:7d:4b:d8:e7:89: 67:a0:b6:dd:0d:76:6c:b5:be:71:30:76:c2:28:ab: 3e:af:ea:71:49:d5:d8:cd:85:17:cb:e3:b2:da:e7: b3:53:89:2e:60:a7:ff:83:2d:2d:79:ee:a7:b0:fe: 2e:f6:6e:a2:ca:40:87:fb:ab:d3:a4:24:07:2d:b5: 3a:c7:a0:f3:fb:8c:07:52:4f:9a:79:3b:81:78:b7: cb:fd:dc:d9:6a:c2:cf:83:b1:4c:a6:df:ef:2a:42: 35:f1:fb:f4:b3:b9:f2:58:3c:6e:d2:ac:a5:d3:f3: 55:39:0c:e3:36:b0:86:dd:6e:95:7c:8f:44:dd:c2: ec:ae:b5:6a:9e:c4:1b:ef:18:2d:db:4e:d5:6a:1e: d2:ea:88:72:31:d2:19:7e:4a:f7:cc:01:dd:d9:fb: 33:3b:55:0c:a4:4a:fb:a8:2f:ec:87:7e:b6:29:da: 1b:3a:a9:8d:0f:ec:78:86:fa:dc:10:8d:e1:94:94: 7d:15:4c:4b:d2:b1:18:51:2e:6c:5a:64:f1:00:6c: 48:67:4f:5f:2b:1e:45:b3:7f:4d:52:90:d4:cd:b3: 57:db:ff:ed:84:56:67:6c:c3:cb:b0:94:06:3c:33: 46:43:1e:d2:6c:df:ed:d2:8c:c1:59:6a:c5:a6:af: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:F2:1C:C1:7D:AC:51:A2:28:74:0A:10:7E:BB:45:C2:7A:A5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa5b277e-16fc-34ff-bc83-82ab6f687b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f9:1e:01:65:33:7c:58:17:03:b3:5c:e8:f1:d1:c4:64:94: 28:eb:2c:0f:19:5c:81:8a:95:5f:fb:4f:8e:07:ad:a9:52:35: 5d:a6:b9:34:32:d2:d9:a5:5e:6a:1e:19:cf:a3:a1:54:fb:ac: 9c:17:3c:83:8c:13:f8:a3:03:ba:c8:12:d2:72:ba:c1:c4:11: eb:bc:03:34:b4:29:ec:c0:c0:fd:85:f6:42:32:12:45:80:fe: 97:e1:a8:35:3b:1e:ed:7d:1e:a5:31:c5:1d:4f:16:cc:ac:65: 0d:13:d6:f0:30:ef:65:d4:df:1b:59:cc:95:44:87:29:6a:7a: de:a6:17:7d:96:19:9a:6b:5c:cc:ae:49:92:68:23:c2:25:82: 02:0a:5c:70:20:c4:88:f5:f1:34:c5:ca:fa:46:bc:8c:34:53: a6:40:65:b5:cb:b3:4b:3e:30:b7:2f:b3:3f:7f:2b:12:9f:20: 12:1f:56:a5:4c:38:b0:6d:1e:33:a4:d1:90:ef:d6:69:56:d2: e2:4a:46:30:7f:83:c1:28:fe:73:f9:97:79:d2:8e:67:43:18: 0e:2f:fd:01:fd:30:09:f5:ff:13:cb:4f:7e:0b:01:ef:31:44: cc:79:82:f0:c5:22:b1:97:80:5a:11:b6:f3:53:0b:4f:be:ec: 7f:33:b6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBARhNSerevMbwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MGVjMDk5N2MtNTJkOC00MDFjLTlmZTItYWUwNmViMjM1YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2mu6KUPeX7xfUvY54lnoLbdDXZstb5xMHbC KKs+r+pxSdXYzYUXy+Oy2uezU4kuYKf/gy0tee6nsP4u9m6iykCH+6vTpCQHLbU6 x6Dz+4wHUk+aeTuBeLfL/dzZasLPg7FMpt/vKkI18fv0s7nyWDxu0qyl0/NVOQzj NrCG3W6VfI9E3cLsrrVqnsQb7xgt207Vah7S6ohyMdIZfkr3zAHd2fszO1UMpEr7 qC/sh362KdobOqmND+x4hvrcEI3hlJR9FUxL0rEYUS5sWmTxAGxIZ09fKx5Fs39N UpDUzbNX2//thFZnbMPLsJQGPDNGQx7SbN/t0ozBWWrFpq/XNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDF8hzBfaxRoih0ChB+u0XCeqWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYWE1YjI3N2UtMTZmYy0z NGZmLWJjODMtODJhYjZmNjg3YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf5HgFlM3xYFwOzXOjx0cRklCjrLA8ZXIGKlV/7T44HralSNV2muTQy 0tmlXmoeGc+joVT7rJwXPIOME/ijA7rIEtJyusHEEeu8AzS0KezAwP2F9kIyEkWA /pfhqDU7Hu19HqUxxR1PFsysZQ0T1vAw72XU3xtZzJVEhylqet6mF32WGZprXMyu SZJoI8IlggIKXHAgxIj18TTFyvpGvIw0U6ZAZbXLs0s+MLcvsz9/KxKfIBIfVqVM OLBtHjOk0ZDv1mlW0uJKRjB/g8Eo/nP5l3nSjmdDGA4v/QH9MAn1/xPLT34LAe8x RMx5gvDFIrGXgFoRtvNTC0++7H8ztjE= -----END CERTIFICATE-----Generated at Sat Apr 12 14:46:55 2025 by rpki-client