$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/eb5e48ca-dbce-3f34-a6f7-30defde64147.roa File: eb5e48ca-dbce-3f34-a6f7-30defde64147.roa (raw, json) Hash identifier: hmgCvjBGiRcV68r3CG+S+dhT3YppPcQ3v8lbas6l5gs= Subject key identifier: 7C:9D:42:13:22:38:AE:B3:9B:5E:C7:02:EA:69:7B:DA:E4:10:2D:45 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F43285848424AE348C601C32FD5929080 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/eb5e48ca-dbce-3f34-a6f7-30defde64147.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 26744 IP address blocks: 68.170.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:e3:48:c6:01:c3:2f:d5:92:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=d10f8bf4-d016-4e6d-9ff6-a5c73c69765e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:74:39:6a:ec:a7:fa:a5:92:de:6c:0e:97: b1:d2:2a:ea:e0:4e:96:c2:d3:80:76:1a:ca:62:88: 49:28:5e:09:6c:17:39:34:30:11:44:61:b1:2e:a6: 69:4d:50:da:aa:4c:f8:aa:14:bc:16:a3:76:f8:46: 50:77:7c:28:6a:8d:f9:17:c8:eb:7b:70:64:33:b0: 6c:93:f9:f5:0c:af:bb:c9:b7:b1:a2:73:d6:f5:ec: f7:d0:e0:77:92:91:87:d9:57:68:6c:91:17:e9:dd: 9c:09:78:e2:f3:01:70:20:2d:bc:2e:07:d5:66:64: 93:10:50:8d:13:ec:b2:1e:5b:d9:63:88:f2:34:c0: c4:7b:f4:79:51:e6:c9:14:60:28:83:47:8e:a3:72: 12:f0:2a:80:79:84:b2:c4:ab:5d:69:26:24:4b:16: 0c:74:b0:51:69:ec:23:c7:f4:e4:af:a6:50:c8:d5: 2b:32:b3:98:00:ca:ed:1f:3a:76:95:52:16:06:85: 95:6b:95:be:bb:32:11:4d:e5:79:8b:ad:bf:b3:10: 52:b6:56:7b:e3:22:f1:71:10:68:46:c0:56:f8:74: ab:93:b2:34:75:a4:72:dc:60:17:7c:4a:14:95:54: 6f:67:26:ee:ad:46:44:a6:36:be:69:0d:ae:d6:45: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9D:42:13:22:38:AE:B3:9B:5E:C7:02:EA:69:7B:DA:E4:10:2D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/eb5e48ca-dbce-3f34-a6f7-30defde64147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f2:b6:ef:f6:26:83:1e:ce:d0:b9:e7:15:42:a4:fa:ba:6c: 4b:96:3e:7f:41:b8:6c:82:d6:41:2c:b2:09:d1:29:63:ab:83: b2:83:03:71:47:38:f1:ec:ef:a1:62:ab:0d:fe:2d:52:b3:71: cc:39:fc:11:21:71:9c:47:0c:23:9a:86:80:b6:20:86:29:cd: 53:60:a8:57:21:f1:0b:16:ad:c8:10:4d:f0:87:b1:62:41:98: af:4c:d9:a2:c1:a4:05:df:4b:75:64:a0:04:c2:f1:41:6b:4b: 24:7e:20:35:c6:85:8d:03:61:95:bc:92:e6:a8:dd:94:c3:76: 34:eb:6e:06:1f:78:44:07:64:25:94:87:75:ab:e5:fe:82:d6: 06:05:c4:c5:f0:3d:1f:1f:ba:dc:b5:f7:e1:2c:4d:be:ec:fc: c8:59:02:03:3e:3e:62:18:d4:e1:82:74:1d:b7:61:83:a1:6e: a5:06:ba:e5:47:28:9a:c7:7f:c7:67:71:4b:2c:0e:24:4c:41: 25:77:b2:dc:de:27:9f:dd:ab:da:88:cd:c4:20:c2:4a:be:e3: 43:47:b0:42:55:77:db:87:e5:31:7e:da:c8:31:9d:b9:1c:e8: 10:99:74:44:17:40:7f:cd:1d:bc:93:f7:f4:39:3c:e7:7c:f5: b5:92:42:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSuNIxgHDL9WSkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDEwZjhiZjQtZDAxNi00ZTZkLTlmZjYtYTVjNzNjNjk3NjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ct0OWrsp/qlkt5sDpex0irq4E6WwtOAdhrK YohJKF4JbBc5NDARRGGxLqZpTVDaqkz4qhS8FqN2+EZQd3woao35F8jre3BkM7Bs k/n1DK+7ybexonPW9ez30OB3kpGH2VdobJEX6d2cCXji8wFwIC28LgfVZmSTEFCN E+yyHlvZY4jyNMDEe/R5UebJFGAog0eOo3IS8CqAeYSyxKtdaSYkSxYMdLBRaewj x/Tkr6ZQyNUrMrOYAMrtHzp2lVIWBoWVa5W+uzIRTeV5i62/sxBStlZ74yLxcRBo RsBW+HSrk7I0daRy3GAXfEoUlVRvZyburUZEpja+aQ2u1kUckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHydQhMiOK6zm17HAuppe9rkEC1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZWI1ZTQ4Y2EtZGJjZS0z ZjM0LWE2ZjctMzBkZWZkZTY0MTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLytu/2JoMeztC55xVCpPq6bEuWPn9BuGyC1kEssgnRKWOrg7KDA3FH OPHs76Fiqw3+LVKzccw5/BEhcZxHDCOahoC2IIYpzVNgqFch8QsWrcgQTfCHsWJB mK9M2aLBpAXfS3VkoATC8UFrSyR+IDXGhY0DYZW8kuao3ZTDdjTrbgYfeEQHZCWU h3Wr5f6C1gYFxMXwPR8futy19+EsTb7s/MhZAgM+PmIY1OGCdB23YYOhbqUGuuVH KJrHf8dncUssDiRMQSV3stzeJ5/dq9qIzcQgwkq+40NHsEJVd9uH5TF+2sgxnbkc 6BCZdEQXQH/NHbyT9/Q5POd89bWSQpk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:35 2025 by rpki-client