$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d6f434b2-39de-3455-abad-f17a680c1a4f.roa File: d6f434b2-39de-3455-abad-f17a680c1a4f.roa (raw, json) Hash identifier: NmBAC9TfbVfqsng42kdVFWcifFHfKo+Tuj+qLYM7GW4= Subject key identifier: DC:79:1B:1A:E0:BA:B9:D9:D7:49:A8:C1:86:9C:C6:AB:7D:9D:A6:77 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858486D9052FA2E53212B1031D1B0 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d6f434b2-39de-3455-abad-f17a680c1a4f.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 26744 IP address blocks: 68.170.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:52:fa:2e:53:21:2b:10:31:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=a9cb9444-8f0d-4f92-9d45-746dd74b161b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fb:97:0d:6a:10:ef:7c:2b:0d:46:f3:8b:95: b8:f1:f1:53:4d:e2:df:52:43:a4:58:c0:57:ea:41: 93:4a:d9:04:5a:54:da:ce:3d:dd:c2:d3:87:93:dc: ad:a3:61:ef:4e:38:58:22:91:dd:84:c8:a7:01:5b: b0:36:fe:43:dd:37:2c:90:84:c7:32:0c:45:d6:6e: 25:b0:08:83:38:b6:2d:cb:29:db:3f:21:4d:ed:da: e8:f6:c5:0e:36:c8:fd:40:71:15:f2:bb:8b:38:d5: 84:42:c4:f6:59:ce:a2:f3:a0:e9:23:40:1f:a5:cf: f1:34:79:7a:0b:4f:b1:de:b6:c7:af:b5:79:08:26: 5b:70:b4:a9:c6:ca:96:b6:34:a4:49:a7:6d:05:0d: d5:c5:ad:ee:19:db:5a:42:9d:5d:42:6e:b3:97:f5: b5:75:51:c1:a4:85:fc:86:8d:fe:56:2f:65:5c:c6: ff:43:21:38:e3:03:3b:9f:25:4c:7e:c8:b8:83:3d: b5:09:b5:f0:50:de:81:41:1f:01:50:9b:3e:aa:c4: 5b:8e:55:dd:a5:7e:cf:70:f2:0f:e9:30:4f:d0:29: dc:1d:e2:a9:d7:99:47:bc:60:3c:d6:b4:9d:f3:af: 01:18:76:b9:38:78:17:e3:f0:19:b2:f0:33:ea:10: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:79:1B:1A:E0:BA:B9:D9:D7:49:A8:C1:86:9C:C6:AB:7D:9D:A6:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d6f434b2-39de-3455-abad-f17a680c1a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:25:be:e4:4c:04:44:28:b6:f0:b0:3f:ae:44:6b:dd:b1:08: 0e:94:f1:1d:3e:c5:b2:e1:aa:23:cf:fe:5f:85:87:05:65:42: d9:d2:ee:d0:f9:ea:ac:1a:6d:fb:6d:24:18:1c:06:75:5c:99: a1:8b:cb:19:a9:db:45:d6:96:89:49:d7:55:43:6e:f1:80:16: de:06:68:05:6b:b3:da:34:90:53:fb:41:ad:0a:00:0b:a6:bd: 84:ed:0f:a9:3c:49:41:e3:e3:e9:62:ca:51:aa:6b:f1:32:de: 84:79:db:ab:ea:38:30:66:12:c8:1d:a1:e8:10:85:ad:a7:a4: 10:7b:84:82:c2:52:25:19:ca:3c:e0:4d:ed:df:c0:02:fa:ec: a3:bf:06:1c:b6:93:aa:ae:14:34:7f:0c:f0:5e:78:bf:66:1a: 18:7a:cb:9b:f9:95:87:dc:79:df:e1:f0:5b:43:bf:dc:be:6c: 4c:a0:1e:e3:c5:46:8f:a3:a0:df:cd:7a:f1:bd:88:ed:5d:b7: 5a:9a:96:a8:8b:53:4b:0f:32:77:dd:d9:bc:a5:44:c6:4d:0f: bc:29:aa:0e:e5:29:3f:fc:15:be:a0:f5:09:76:94:37:2e:ce: a5:e2:14:c0:ee:b0:85:eb:9e:6c:5f:b2:b6:91:08:b4:67:64: ba:c2:f4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFL6LlMhKxAx0bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk YTljYjk0NDQtOGYwZC00ZjkyLTlkNDUtNzQ2ZGQ3NGIxNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfuXDWoQ73wrDUbzi5W48fFTTeLfUkOkWMBX 6kGTStkEWlTazj3dwtOHk9yto2HvTjhYIpHdhMinAVuwNv5D3TcskITHMgxF1m4l sAiDOLYtyynbPyFN7dro9sUONsj9QHEV8ruLONWEQsT2Wc6i86DpI0Afpc/xNHl6 C0+x3rbHr7V5CCZbcLSpxsqWtjSkSadtBQ3Vxa3uGdtaQp1dQm6zl/W1dVHBpIX8 ho3+Vi9lXMb/QyE44wM7nyVMfsi4gz21CbXwUN6BQR8BUJs+qsRbjlXdpX7PcPIP 6TBP0CncHeKp15lHvGA81rSd868BGHa5OHgX4/AZsvAz6hDwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx5GxrgurnZ10mowYacxqt9naZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZDZmNDM0YjItMzlkZS0z NDU1LWFiYWQtZjE3YTY4MGMxYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAlvuRMBEQotvCwP65Ea92xCA6U8R0+xbLhqiPP/l+FhwVlQtnS7tD5 6qwabfttJBgcBnVcmaGLyxmp20XWlolJ11VDbvGAFt4GaAVrs9o0kFP7Qa0KAAum vYTtD6k8SUHj4+liylGqa/Ey3oR526vqODBmEsgdoegQha2npBB7hILCUiUZyjzg Te3fwAL67KO/Bhy2k6quFDR/DPBeeL9mGhh6y5v5lYfced/h8FtDv9y+bEygHuPF Ro+joN/NevG9iO1dt1qalqiLU0sPMnfd2bylRMZND7wpqg7lKT/8Fb6g9Ql2lDcu zqXiFMDusIXrnmxfsraRCLRnZLrC9MU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:45 2025 by rpki-client