$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa File: bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa (raw, json) Hash identifier: J/l1riF7vm7JTmJdOK4YqNTZsadkedoiPcwIwJOsQIA= Subject key identifier: 91:02:4B:3D:FC:43:C6:E4:FB:02:C3:ED:98:8B:B2:D2:FF:CC:77:B4 Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F432858489E6B6B667F9A4A16A36F9680 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 19318 IP address blocks: 68.168.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6b:66:7f:9a:4a:16:a3:6f:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=aa8a7b2e-a13e-4491-9b3f-a19cc9d41328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:1e:75:fd:94:52:61:01:90:32:77:e5:71: f4:44:6f:c9:da:8e:70:2f:0c:2a:25:b2:9f:30:5c: c4:86:76:93:38:0a:7a:68:bd:85:34:70:d8:9f:90: ab:42:11:32:e0:60:66:7c:4e:5a:34:cc:6c:00:55: 60:27:76:55:7a:b5:2e:33:cd:e9:d0:a4:e8:06:c5: 4c:d7:7c:72:9f:8b:f4:33:1f:09:90:bf:08:2b:76: 65:6a:cd:c1:b2:84:90:b5:c2:94:26:2c:db:5e:0a: 5a:5e:08:d1:36:2e:20:1c:ac:95:8e:7a:32:39:b2: 81:f8:c5:58:0e:d9:20:86:c0:e7:9c:99:45:35:46: ec:19:3b:84:eb:22:ce:69:6b:06:d0:c9:3c:62:7b: 77:85:b1:7e:86:5e:5d:c1:ee:34:b2:c8:47:bf:22: c5:2b:df:5c:6a:71:5b:80:25:16:a3:94:db:e0:63: 79:9c:d4:25:ea:c3:5f:dc:0c:3c:bd:53:41:f2:55: 38:cb:7c:aa:be:db:3e:89:dc:5b:dd:76:13:ad:00: 67:1a:b4:6a:82:22:f6:a9:70:6e:a2:be:10:5c:97: 21:03:c6:01:9c:ff:9d:8c:0f:e7:66:87:a5:9b:6c: f7:4b:a3:1e:02:96:c8:5b:f2:a5:fd:ef:30:8a:02: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:02:4B:3D:FC:43:C6:E4:FB:02:C3:ED:98:8B:B2:D2:FF:CC:77:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 68.168.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6f:1e:5c:d3:b8:9b:da:e5:21:25:19:7e:e9:85:86:a6:b2: 72:c2:63:da:8b:e5:fd:db:11:08:2d:2d:f9:c4:ee:97:fc:74: af:3d:cd:01:be:43:17:dc:11:ac:e8:37:2e:e1:91:c9:8d:01: 30:ae:bc:4d:9d:85:c8:9c:ef:a3:cf:d0:95:68:c3:3d:4b:fa: 83:62:26:86:83:53:28:19:23:16:0d:4d:f7:8f:15:38:79:e9: d7:ff:f1:7a:75:4d:24:23:b0:63:20:e1:62:39:24:b3:a4:f2: 2a:a3:7b:b0:a0:43:e0:ae:07:de:f3:d6:50:4e:88:49:e9:d1: 57:dc:a3:58:3d:3a:10:15:d4:81:be:da:8a:a2:65:4f:6e:7d: 90:8f:27:a2:d4:5b:14:81:9c:f7:05:36:3a:e0:90:93:b7:3b: 5a:3f:db:a4:dd:2a:07:7f:0c:76:ad:e5:f2:bc:d1:37:4f:71: 9d:60:76:42:2b:5d:d8:a6:f0:41:59:42:d8:d3:52:a7:30:b7: 42:f0:16:0a:f5:3c:22:0d:ff:7c:49:24:fb:31:01:53:b9:94: c2:f6:b6:bd:36:20:e1:3b:e0:22:10:0e:84:fa:3a:4c:07:f3: 2a:d6:25:dc:90:e0:56:0d:b3:ea:c8:9e:1f:85:b7:d5:93:0d: ed:ca:b8:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2tmf5pKFqNvloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YWE4YTdiMmUtYTEzZS00NDkxLTliM2YtYTE5Y2M5ZDQxMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBgedf2UUmEBkDJ35XH0RG/J2o5wLwwqJbKf MFzEhnaTOAp6aL2FNHDYn5CrQhEy4GBmfE5aNMxsAFVgJ3ZVerUuM83p0KToBsVM 13xyn4v0Mx8JkL8IK3Zlas3BsoSQtcKUJizbXgpaXgjRNi4gHKyVjnoyObKB+MVY DtkghsDnnJlFNUbsGTuE6yLOaWsG0Mk8Ynt3hbF+hl5dwe40sshHvyLFK99canFb gCUWo5Tb4GN5nNQl6sNf3Aw8vVNB8lU4y3yqvts+idxb3XYTrQBnGrRqgiL2qXBu or4QXJchA8YBnP+djA/nZoelm2z3S6MeApbIW/Kl/e8wigJ6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJECSz38Q8bk+wLD7ZiLstL/zHe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvYmJjN2EyMGUtMmI2NC0z ZDU5LThjNTgtODY2ZGI1Y2RjOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKjVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5vHlzTuJva5SElGX7phYamsnLCY9qL5f3bEQgtLfnE7pf8dK89zQG+ QxfcEazoNy7hkcmNATCuvE2dhcic76PP0JVowz1L+oNiJoaDUygZIxYNTfePFTh5 6df/8Xp1TSQjsGMg4WI5JLOk8iqje7CgQ+CuB97z1lBOiEnp0Vfco1g9OhAV1IG+ 2oqiZU9ufZCPJ6LUWxSBnPcFNjrgkJO3O1o/26TdKgd/DHat5fK80TdPcZ1gdkIr Xdim8EFZQtjTUqcwt0LwFgr1PCIN/3xJJPsxAVO5lML2tr02IOE74CIQDoT6OkwH 8yrWJdyQ4FYNs+rInh+Ft9WTDe3KuKo= -----END CERTIFICATE-----Generated at Sat Apr 5 22:27:06 2025 by rpki-client