$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/42b3a0cb-986b-3a89-a8b8-4a55b8d6e0d9.roa File: 42b3a0cb-986b-3a89-a8b8-4a55b8d6e0d9.roa (raw, json) Hash identifier: k9C9bJhrOG/UqKvLi0zO6cligWM1Lt0es35gcTVmiCA= Subject key identifier: 29:9C:84:8A:C4:79:5C:DF:32:69:78:09:7A:F1:76:22:3C:CD:94:16 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F432858496A16186A2052495B34625E40 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/42b3a0cb-986b-3a89-a8b8-4a55b8d6e0d9.roa Signing time: Fri 04 Apr 2025 12:54:02 +0000 ROA not before: Fri 04 Apr 2025 12:54:02 +0000 ROA not after: Thu 03 Jul 2025 12:54:02 +0000 asID: 43260 IP address blocks: 68.170.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:16:18:6a:20:52:49:5b:34:62:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Apr 4 12:54:02 2025 GMT Not After : Jul 3 12:54:02 2025 GMT Subject: CN=5c2c5075-8d85-490f-b878-55f3f10ec004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:95:bd:14:28:a5:44:c8:a3:8e:a5:70:82: 83:98:dd:56:35:d0:7a:81:36:27:f6:82:19:c7:5d: e0:95:3a:c3:df:49:78:40:eb:b3:cc:18:b2:38:27: 27:90:62:cf:ba:27:b0:5d:0f:8c:a6:d7:fb:86:ba: 8a:8b:ee:a5:9e:7c:74:6b:c8:0b:e5:e4:73:d2:2f: f4:c2:fb:41:7a:a2:19:b1:76:11:7b:7e:60:df:86: c0:e8:5f:2c:3b:b9:ce:d7:d7:83:01:0d:22:86:68: 5a:6b:99:78:67:01:3b:12:15:f1:c8:e8:be:e6:1e: 07:a6:af:93:f7:0e:aa:35:ac:9a:ea:15:f5:94:45: 9e:e1:02:26:e5:3f:96:a9:a8:06:01:03:9e:5d:da: 43:1b:1f:63:34:40:75:db:c5:1e:e0:44:68:ee:60: ac:36:de:4c:96:01:31:57:a6:1f:af:9a:96:9b:95: 02:a9:44:3f:ed:eb:c1:18:85:1a:ec:da:8e:56:dd: af:38:2b:e2:73:c2:37:9a:db:1a:53:fa:d3:0b:50: 0c:ee:f6:1a:10:d3:9e:b2:6b:1e:f8:24:98:d5:bd: 92:e2:a1:b9:34:62:e1:39:1a:7d:2c:ac:bd:12:3d: 2b:3d:a3:48:3f:12:09:6d:c4:0f:a6:b4:f5:74:23: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:84:8A:C4:79:5C:DF:32:69:78:09:7A:F1:76:22:3C:CD:94:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/42b3a0cb-986b-3a89-a8b8-4a55b8d6e0d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2e:2b:ef:11:df:d1:91:b9:ab:45:04:ab:b7:31:42:b8:80: f1:82:c7:7b:2f:d8:72:96:4a:71:51:82:c9:32:eb:61:d2:cb: 7c:c2:25:15:62:bb:08:a4:e4:db:39:19:36:10:2a:10:66:41: cf:43:24:34:3f:9d:32:d4:07:52:86:9b:c7:9a:42:64:9b:11: fe:0e:0c:3f:f7:d6:d4:3e:72:42:54:27:98:1f:bd:d5:fd:af: 6c:fd:14:82:fe:81:b2:b1:4d:0d:55:6a:87:d1:e2:76:a9:e2: 2d:84:dc:fa:3d:27:44:9b:3e:ab:3e:2a:e2:6b:4d:07:ca:eb: 00:8f:f1:6e:c3:59:19:48:d5:6b:a5:08:89:52:e4:55:9b:70: 9f:33:c1:72:5a:c4:c1:a0:52:31:54:32:92:73:1e:dc:58:e8: 81:26:7f:05:ad:b4:3c:01:75:20:fe:a3:78:40:e0:6e:03:b0: 9d:f7:9d:37:ee:4d:41:a0:95:f6:80:f2:a6:84:c1:ea:91:89: d1:e0:0f:85:8a:43:df:aa:ca:bd:1c:dc:df:82:13:e1:91:fb: ec:68:9c:41:bc:27:42:97:9a:83:0b:0b:1e:48:61:9d:f6:e7: cd:55:d3:03:b3:d6:ff:66:be:b1:88:c8:05:e6:88:90:62:e9: a1:1a:7d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqFhhqIFJJWzRiXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MDQwNDEyNTQwMloXDTI1MDcwMzEyNTQwMlowLzEtMCsGA1UEAxMk NWMyYzUwNzUtOGQ4NS00OTBmLWI4NzgtNTVmM2YxMGVjMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKaVvRQopUTIo46lcIKDmN1WNdB6gTYn9oIZ x13glTrD30l4QOuzzBiyOCcnkGLPuiewXQ+Mptf7hrqKi+6lnnx0a8gL5eRz0i/0 wvtBeqIZsXYRe35g34bA6F8sO7nO19eDAQ0ihmhaa5l4ZwE7EhXxyOi+5h4Hpq+T 9w6qNaya6hX1lEWe4QIm5T+WqagGAQOeXdpDGx9jNEB128Ue4ERo7mCsNt5MlgEx V6Yfr5qWm5UCqUQ/7evBGIUa7NqOVt2vOCvic8I3mtsaU/rTC1AM7vYaENOesmse +CSY1b2S4qG5NGLhORp9LKy9Ej0rPaNIPxIJbcQPprT1dCPjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmchIrEeVzfMml4CXrxdiI8zZQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvNDJiM2EwY2ItOTg2Yi0z YTg5LWE4YjgtNGE1NWI4ZDZlMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkuK+8R39GRuatFBKu3MUK4gPGCx3sv2HKWSnFRgsky62HSy3zCJRVi uwik5Ns5GTYQKhBmQc9DJDQ/nTLUB1KGm8eaQmSbEf4ODD/31tQ+ckJUJ5gfvdX9 r2z9FIL+gbKxTQ1VaofR4nap4i2E3Po9J0SbPqs+KuJrTQfK6wCP8W7DWRlI1Wul CIlS5FWbcJ8zwXJaxMGgUjFUMpJzHtxY6IEmfwWttDwBdSD+o3hA4G4DsJ33nTfu TUGglfaA8qaEweqRidHgD4WKQ9+qyr0c3N+CE+GR++xonEG8J0KXmoMLCx5IYZ32 581V0wOz1v9mvrGIyAXmiJBi6aEafbA= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:39 2025 by rpki-client