$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d6f434b2-39de-3455-abad-f17a680c1a4f.roa File: d6f434b2-39de-3455-abad-f17a680c1a4f.roa (raw, json) Hash identifier: a0InRiNXQq8I4OgJSAnb9vMXYbI6NvzQ/Nshn/76EKk= Subject key identifier: 6D:E7:C8:BB:90:4F:5B:75:62:44:BB:92:65:0E:67:C8:54:A9:0E:5C Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858494CC9469273C41AB5BC849A60 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d6f434b2-39de-3455-abad-f17a680c1a4f.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 26744 IP address blocks: 68.170.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:46:92:73:c4:1a:b5:bc:84:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=584da326-947e-479a-8fa3-ffebb1088f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:70:7e:5e:02:91:ef:6b:0e:2b:94:2b:15:c2: e2:83:70:4b:ca:f2:1d:d0:70:3f:f8:40:55:01:2b: 71:8a:cf:95:ef:bd:f1:af:0d:08:e2:18:cf:b1:0d: 73:04:fb:d8:30:f7:04:52:3b:2a:f2:8c:64:80:82: 9f:fe:72:79:28:8e:d4:cc:35:a4:63:7d:41:8b:5f: e2:94:df:6c:cc:54:aa:c7:0c:84:23:e6:c9:68:f4: af:55:10:8a:f6:d5:4b:f2:37:45:ab:06:ad:cc:5e: 7a:1f:a7:07:ab:7b:b2:0b:56:df:64:48:db:cb:e4: 28:32:af:d6:91:0c:69:75:67:ab:9a:18:e3:da:30: ca:30:0a:a6:be:a0:94:34:94:a2:41:b4:9e:00:86: b1:66:24:b6:18:fb:f2:b4:27:ae:b4:b3:db:2a:1b: 75:86:0c:d3:2f:57:22:2d:06:d4:52:47:90:b4:90: c5:7d:28:23:32:8f:f5:63:02:6f:47:22:bc:53:1d: ae:dc:78:7f:cb:65:32:80:33:1b:c4:5c:14:00:96: 4d:04:e7:de:a5:93:90:df:05:94:ed:89:57:a2:d4: 9f:0a:12:d9:b0:8e:1e:49:f1:6f:4c:38:10:ee:72: 91:ab:19:26:11:5b:bc:e4:02:92:97:94:b9:2b:df: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E7:C8:BB:90:4F:5B:75:62:44:BB:92:65:0E:67:C8:54:A9:0E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d6f434b2-39de-3455-abad-f17a680c1a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7c:fe:ad:75:cb:7d:9b:9d:63:05:35:db:4b:06:a7:be:97: 49:8d:38:78:af:fc:e6:b2:df:80:a0:a4:21:5b:09:ab:7a:1f: 2f:e3:fc:7d:bd:e8:33:df:e8:70:10:83:87:0d:68:45:2d:15: cb:14:60:1b:f1:e2:3b:53:c0:c7:5f:41:8f:86:9e:00:28:70: be:14:6a:10:90:32:6c:2e:77:59:cf:73:7a:12:b6:01:f0:13: 9c:e6:88:94:08:ac:67:7e:5a:53:f4:ed:7c:04:92:5e:da:31: 15:c0:4b:3c:b8:db:6a:34:e6:0b:5c:ab:77:f3:31:0b:c7:2f: f3:7a:26:92:a3:7e:dc:ae:7b:5c:6e:4d:83:20:48:fd:e9:68: 67:5e:bc:4a:2a:91:90:bd:64:a3:73:6d:2a:48:b1:50:e8:24: 73:55:65:83:8a:a4:eb:3e:d0:c9:2f:52:3b:92:5f:67:82:a6: 0e:c4:a4:9d:e6:fe:3f:b4:65:f3:7c:a7:47:33:8b:37:25:14: 7e:63:ef:d7:94:77:f2:6d:b7:4d:8f:e2:50:a6:f4:b2:57:09: d5:12:0b:b8:fc:f6:03:fd:3b:1f:9e:0d:71:66:eb:bd:85:60: 94:c8:b8:5d:0f:86:0e:d1:04:c0:6d:f6:82:f8:25:11:c1:08: 82:b5:59:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUaSc8QatbyEmmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTg0ZGEzMjYtOTQ3ZS00NzlhLThmYTMtZmZlYmIxMDg4ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHB+XgKR72sOK5QrFcLig3BLyvId0HA/+EBV AStxis+V773xrw0I4hjPsQ1zBPvYMPcEUjsq8oxkgIKf/nJ5KI7UzDWkY31Bi1/i lN9szFSqxwyEI+bJaPSvVRCK9tVL8jdFqwatzF56H6cHq3uyC1bfZEjby+QoMq/W kQxpdWermhjj2jDKMAqmvqCUNJSiQbSeAIaxZiS2GPvytCeutLPbKht1hgzTL1ci LQbUUkeQtJDFfSgjMo/1YwJvRyK8Ux2u3Hh/y2UygDMbxFwUAJZNBOfepZOQ3wWU 7YlXotSfChLZsI4eSfFvTDgQ7nKRqxkmEVu85AKSl5S5K9+YIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3nyLuQT1t1YkS7kmUOZ8hUqQ5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZDZmNDM0YjItMzlkZS0z NDU1LWFiYWQtZjE3YTY4MGMxYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ8/q11y32bnWMFNdtLBqe+l0mNOHiv/Oay34CgpCFbCat6Hy/j/H29 6DPf6HAQg4cNaEUtFcsUYBvx4jtTwMdfQY+GngAocL4UahCQMmwud1nPc3oStgHw E5zmiJQIrGd+WlP07XwEkl7aMRXASzy422o05gtcq3fzMQvHL/N6JpKjftyue1xu TYMgSP3paGdevEoqkZC9ZKNzbSpIsVDoJHNVZYOKpOs+0MkvUjuSX2eCpg7EpJ3m /j+0ZfN8p0czizclFH5j79eUd/Jtt02P4lCm9LJXCdUSC7j89gP9Ox+eDXFm672F YJTIuF0Phg7RBMBt9oL4JRHBCIK1WVI= -----END CERTIFICATE-----Generated at Sun Apr 13 01:32:39 2025 by rpki-client