$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa File: ae68d36c-45dd-3d00-aef2-523dceb603d4.roa (raw, json) Hash identifier: nUI3EuxQXo5ERlPfeZzL2m48UGGwj2iTrht68VzUQLE= Subject key identifier: BE:E8:A1:27:D3:9D:BF:6E:C6:B4:67:18:CA:D6:0F:BD:CE:60:7D:22 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858494CC947C4C1DDC1DBF95B7B40 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 26744 IP address blocks: 68.170.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:47:c4:c1:dd:c1:db:f9:5b:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=c26c36b8-bddb-4a14-aa19-90245d03c73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:31:4f:25:b4:39:fb:1b:4b:2c:7c:96:1d: ef:de:a8:2a:10:a6:d2:9d:c3:6a:76:c0:91:7c:00: ea:e5:04:24:91:a0:91:6f:67:41:53:92:4b:fa:ad: 4a:19:02:58:27:65:41:15:df:b5:55:e1:a7:6d:e8: a2:ca:7b:47:ee:8b:29:63:16:a3:5f:70:4a:d3:08: b1:29:94:0b:fd:28:03:8e:4d:2f:0b:ee:e3:d3:a4: a2:2e:f1:1b:4a:14:ef:09:9f:aa:5d:74:0a:bc:c9: 55:30:ca:33:fe:d0:a5:b8:a6:d3:a3:62:2f:16:17: a8:ae:7f:6c:01:de:51:28:a9:c1:e6:6b:cd:13:c4: e1:95:dc:dd:5d:ab:a2:14:98:fc:d7:89:0d:d8:e9: 42:60:8e:45:77:43:4d:b8:44:b6:6d:f9:68:61:f8: 5c:a7:62:9b:b2:a2:f3:f8:94:ba:56:21:83:24:bc: fb:4b:a6:81:12:79:ee:e6:97:5e:6e:fe:ba:09:0e: be:de:fc:7a:28:fe:5e:f9:94:5f:26:97:e9:9e:da: 3c:be:8d:4e:23:cb:3f:9d:0a:7e:22:d3:96:1e:16: 41:ed:20:3d:85:81:3b:75:97:39:aa:59:1f:48:c8: 83:d3:92:a9:a3:89:2b:ac:f3:d3:c3:58:69:69:92: c0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E8:A1:27:D3:9D:BF:6E:C6:B4:67:18:CA:D6:0F:BD:CE:60:7D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:8f:57:32:00:92:e2:22:6c:9b:12:74:1f:7a:78:eb:75:2d: d2:af:a7:0e:e2:78:3d:a4:f4:1c:e6:eb:5e:77:a4:ec:2f:f1: fe:15:af:f3:55:46:50:8a:27:58:2d:59:d8:d4:bc:8b:4d:34: 56:9c:1a:b5:b5:66:94:24:d7:99:ad:7c:41:61:c3:de:dd:e3: cf:f6:22:b6:82:47:84:6e:45:56:5c:3d:29:40:28:a4:05:ba: 4c:53:32:6d:ac:53:d0:42:41:09:9b:f9:fe:d3:57:48:e0:09: 19:86:45:df:0d:16:9b:29:d5:bb:0f:a5:fd:5f:20:c9:de:a3: a9:06:f6:3c:76:57:54:b6:21:68:a7:6a:7d:86:cf:ed:80:0e: c0:86:08:74:35:32:fa:b4:e5:04:ca:58:b6:b6:c4:c5:48:a7: 79:0b:08:77:1c:52:3b:20:03:ea:e5:ed:f9:4e:06:fc:70:d4: da:63:8f:e2:e2:8f:8b:b5:44:ab:a5:c2:ed:7c:44:76:2f:23: 0f:73:05:b3:90:ad:9b:ca:7f:fc:c8:e1:d7:da:6f:b1:97:8b: 88:c2:ca:40:72:72:99:c8:2f:e0:d6:47:ae:22:73:23:2f:73: cd:fb:8a:0e:ee:c8:89:b2:4d:7d:a9:bf:cf:f6:59:33:15:4f: 47:95:05:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUfEwd3B2/lbe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YzI2YzM2YjgtYmRkYi00YTE0LWFhMTktOTAyNDVkMDNjNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGQxTyW0OfsbSyx8lh3v3qgqEKbSncNqdsCR fADq5QQkkaCRb2dBU5JL+q1KGQJYJ2VBFd+1VeGnbeiiyntH7ospYxajX3BK0wix KZQL/SgDjk0vC+7j06SiLvEbShTvCZ+qXXQKvMlVMMoz/tCluKbTo2IvFheorn9s Ad5RKKnB5mvNE8ThldzdXauiFJj814kN2OlCYI5Fd0NNuES2bfloYfhcp2KbsqLz +JS6ViGDJLz7S6aBEnnu5pdebv66CQ6+3vx6KP5e+ZRfJpfpnto8vo1OI8s/nQp+ ItOWHhZB7SA9hYE7dZc5qlkfSMiD05Kpo4krrPPTw1hpaZLA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7ooSfTnb9uxrRnGMrWD73OYH0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYWU2OGQzNmMtNDVkZC0z ZDAwLWFlZjItNTIzZGNlYjYwM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaPVzIAkuIibJsSdB96eOt1LdKvpw7ieD2k9Bzm6153pOwv8f4Vr/NV RlCKJ1gtWdjUvItNNFacGrW1ZpQk15mtfEFhw97d48/2IraCR4RuRVZcPSlAKKQF ukxTMm2sU9BCQQmb+f7TV0jgCRmGRd8NFpsp1bsPpf1fIMneo6kG9jx2V1S2IWin an2Gz+2ADsCGCHQ1Mvq05QTKWLa2xMVIp3kLCHccUjsgA+rl7flOBvxw1Npjj+Li j4u1RKulwu18RHYvIw9zBbOQrZvKf/zI4dfab7GXi4jCykBycpnIL+DWR64icyMv c837ig7uyImyTX2pv8/2WTMVT0eVBRQ= -----END CERTIFICATE-----Generated at Sun Apr 13 03:51:28 2025 by rpki-client