$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa File: caa81f92-b27f-32a1-bbda-f61104514b4d.roa (raw, json) Hash identifier: g8QjCPmcwXucwcXGKHhBIwxYmshDpAAhu9MmNmbboD4= Subject key identifier: 98:B2:A8:E2:8B:AF:65:E4:F7:D8:EA:70:D6:81:01:20:80:B7:C5:E5 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858492184102A7CC58F76B9822980 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26744 IP address blocks: 68.170.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:10:2a:7c:c5:8f:76:b9:82:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=5c2875fa-e8b5-434c-8187-f3604530abc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:88:7f:aa:37:89:e9:21:a4:81:e1:5d:fa: 84:f2:38:cf:55:f2:f4:3c:93:87:92:37:83:dd:be: 13:dd:bf:28:d8:a2:72:6d:d3:2f:41:67:a8:0a:f0: fe:c5:54:29:f0:4e:26:ff:ec:7a:da:46:f5:9d:d7: 8a:80:dd:c0:53:33:44:eb:bc:f9:a1:c4:8a:c7:e6: ae:76:23:ae:bf:cc:ff:32:b7:c7:1a:f9:77:1e:cd: d6:27:dd:0c:78:4a:9d:d6:cf:62:7e:df:3c:2d:31: cf:51:44:b0:d3:ae:d5:90:11:02:2a:54:b3:a5:af: dc:6d:08:17:91:75:87:06:07:fc:40:43:8e:d7:ea: f1:ba:11:70:42:8a:6a:06:26:fa:2a:4c:d5:52:f5: 23:d9:e5:b4:4b:0e:b9:e0:e6:02:23:ed:7c:1e:6f: 7e:20:78:d2:5a:8d:25:cf:ef:bc:dc:9a:72:c1:9d: 8a:68:5b:09:e9:eb:ef:d2:1b:30:2e:35:c6:ab:1d: ab:40:17:4e:da:af:dd:25:3b:61:27:69:96:99:66: a2:ae:8f:9f:cc:02:31:4b:ea:3a:2f:f5:61:cf:c3: 1b:22:11:96:50:38:8a:c9:1f:b8:88:b5:39:59:e5: 73:bc:53:2c:84:e0:4d:db:e9:d1:f4:ef:eb:76:79: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:A8:E2:8B:AF:65:E4:F7:D8:EA:70:D6:81:01:20:80:B7:C5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0e:c2:fd:7e:57:18:6b:9d:84:fe:ad:49:73:c3:85:20:75: 01:2a:0e:0a:91:45:d4:77:5d:02:b0:a6:6d:7c:09:98:f2:87: 36:e2:33:ce:06:fe:72:0c:4e:70:a7:2a:9d:cf:40:f0:e0:0d: 32:ab:3d:54:64:45:0d:54:9a:9d:95:66:06:56:19:3e:04:aa: 52:37:85:15:6a:e1:aa:52:2b:82:6f:35:0a:6e:9c:bc:1a:24: fe:df:54:d6:38:00:17:b5:f6:3b:f5:4b:1e:cf:99:8a:46:b8: f2:8a:f3:70:77:cb:1d:e0:ac:bd:bb:35:39:55:6b:e1:9a:1d: 81:49:8f:3e:70:29:27:98:32:0b:4b:7f:d1:42:de:dc:45:a4: 8f:85:3a:f3:46:21:8e:dd:fb:c0:f2:cb:12:56:5d:e7:14:a6: f4:5c:e3:7d:36:ba:3b:79:87:81:ce:63:2a:59:09:86:34:f5: 33:63:27:cc:d6:82:89:01:e3:55:0f:4a:d2:7e:f7:34:47:8e: 6e:71:7c:1a:2a:21:4a:b8:36:25:9d:28:65:6d:2f:1f:9d:40: f5:27:c9:b0:8c:c6:04:fd:41:16:86:e0:dd:65:45:cd:e0:37: cd:4a:f1:2c:e5:9f:6f:b5:3c:b1:ee:54:60:73:f4:e9:86:44: b0:1b:97:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBAqfMWPdrmCKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NWMyODc1ZmEtZThiNS00MzRjLTgxODctZjM2MDQ1MzBhYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKuIf6o3iekhpIHhXfqE8jjPVfL0PJOHkjeD 3b4T3b8o2KJybdMvQWeoCvD+xVQp8E4m/+x62kb1ndeKgN3AUzNE67z5ocSKx+au diOuv8z/MrfHGvl3Hs3WJ90MeEqd1s9ift88LTHPUUSw067VkBECKlSzpa/cbQgX kXWHBgf8QEOO1+rxuhFwQopqBib6KkzVUvUj2eW0Sw654OYCI+18Hm9+IHjSWo0l z++83JpywZ2KaFsJ6evv0hswLjXGqx2rQBdO2q/dJTthJ2mWmWairo+fzAIxS+o6 L/Vhz8MbIhGWUDiKyR+4iLU5WeVzvFMshOBN2+nR9O/rdnnGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiyqOKLr2Xk99jqcNaBASCAt8XlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvY2FhODFmOTItYjI3Zi0z MmExLWJiZGEtZjYxMTA0NTE0YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKr6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYOwv1+VxhrnYT+rUlzw4UgdQEqDgqRRdR3XQKwpm18CZjyhzbiM84G /nIMTnCnKp3PQPDgDTKrPVRkRQ1Ump2VZgZWGT4EqlI3hRVq4apSK4JvNQpunLwa JP7fVNY4ABe19jv1Sx7PmYpGuPKK83B3yx3grL27NTlVa+GaHYFJjz5wKSeYMgtL f9FC3txFpI+FOvNGIY7d+8DyyxJWXecUpvRc4302ujt5h4HOYypZCYY09TNjJ8zW gokB41UPStJ+9zRHjm5xfBoqIUq4NiWdKGVtLx+dQPUnybCMxgT9QRaG4N1lRc3g N81K8Szln2+1PLHuVGBz9OmGRLAblx8= -----END CERTIFICATE-----Generated at Sat Apr 12 12:50:37 2025 by rpki-client