$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa File: a6c46de6-44a0-300d-bf19-e635e93471d5.roa (raw, json) Hash identifier: t7al7HXXYFI6JgeStH1ngT3Uu2TV0OS8G4g9xBSbFc0= Subject key identifier: 2A:E3:82:CF:4D:30:B7:1D:FF:A3:75:E2:B9:F7:F2:DE:A1:D6:20:52 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584919418931AB6457CECA38CB00 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 68.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:89:31:ab:64:57:ce:ca:38:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=b4acf9d3-5d94-4cbe-81e1-c5e33a5f88a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:2f:c7:a0:75:b8:d9:dc:42:3f:7a:cc:09: c0:f8:79:b4:63:cf:bb:83:f1:25:2e:95:5e:17:c1: dc:c6:68:d8:7a:5f:94:39:3d:a8:1a:ea:03:59:79: cd:92:db:2d:41:a2:f8:e4:17:c7:a9:1d:e0:fb:ef: 33:00:b9:0e:6c:be:fe:67:00:00:8d:8a:57:7e:2a: ab:a1:8d:94:21:fa:9c:c4:34:3b:2a:49:64:c6:42: 07:66:86:be:ad:8f:cd:4c:50:e6:68:c8:2d:fa:96: d5:02:47:be:a8:7a:22:f7:9d:bc:13:c8:92:7d:fd: 95:61:17:8a:02:19:4d:65:5e:91:0c:2c:79:70:6e: fe:77:4a:88:7f:13:51:de:1e:35:b5:17:67:00:f3: 00:56:b8:03:1a:00:df:76:22:16:56:f4:a2:3a:b4: ff:89:2c:08:e9:62:41:d2:37:13:d5:9b:4c:59:87: cf:7b:20:53:be:6c:32:bb:f9:dd:11:e3:59:c7:ee: fc:27:03:03:c1:34:2c:63:50:77:ca:d3:63:d3:32: 67:2b:ed:f0:30:e6:25:74:f0:80:b3:05:91:30:ca: cd:f4:b7:f9:c8:32:5e:22:32:03:6a:ff:70:9f:5f: 46:7e:34:ac:38:0f:07:8d:47:1d:1a:49:a5:9f:0d: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E3:82:CF:4D:30:B7:1D:FF:A3:75:E2:B9:F7:F2:DE:A1:D6:20:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f7:66:42:a9:08:08:45:20:cd:81:df:e6:a9:ac:08:90:8f: e3:04:ab:a3:9b:a3:a5:02:53:5c:44:cb:37:92:89:84:18:4e: 6f:96:65:76:5d:36:6a:28:32:79:06:11:8e:ff:32:a0:79:7d: 3c:72:c8:bb:0f:ca:e5:f9:18:93:0f:46:c9:f6:6b:19:be:42: ec:06:a3:0c:0a:c4:5f:0e:67:c2:fc:e5:10:ee:23:53:26:dc: 0d:aa:7a:9b:d2:3b:c6:94:83:f8:12:63:c4:46:e8:16:e6:90: 1e:7d:ec:e7:1b:eb:59:79:81:b5:0a:3b:14:7c:c4:bf:a9:60: f2:b7:1d:2d:ff:d3:23:4a:81:4e:f9:b8:08:90:a3:5a:2e:7b: ca:d3:12:35:a1:1c:5e:47:f9:1e:29:7f:63:9d:af:92:46:df: dd:6a:96:5e:3c:cd:b8:e7:92:b0:a2:ed:70:c4:ff:f0:05:e2: 8d:a1:a5:4c:28:d2:c9:4b:14:bb:d5:0d:31:2b:3e:5c:df:23: 2b:6b:86:18:71:aa:32:9d:5f:03:a4:5e:88:60:44:fc:68:5d: a8:1a:e9:87:14:ab:72:38:19:31:85:6a:31:ac:bb:02:9a:94: bd:94:b8:d6:91:3d:e5:cd:7a:8b:8a:36:d7:76:59:43:4d:e8: 16:8a:0d:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYkxq2RXzso4ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YjRhY2Y5ZDMtNWQ5NC00Y2JlLTgxZTEtYzVlMzNhNWY4OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIvx6B1uNncQj96zAnA+Hm0Y8+7g/ElLpVe F8HcxmjYel+UOT2oGuoDWXnNktstQaL45BfHqR3g++8zALkObL7+ZwAAjYpXfiqr oY2UIfqcxDQ7KklkxkIHZoa+rY/NTFDmaMgt+pbVAke+qHoi9528E8iSff2VYReK AhlNZV6RDCx5cG7+d0qIfxNR3h41tRdnAPMAVrgDGgDfdiIWVvSiOrT/iSwI6WJB 0jcT1ZtMWYfPeyBTvmwyu/ndEeNZx+78JwMDwTQsY1B3ytNj0zJnK+3wMOYldPCA swWRMMrN9Lf5yDJeIjIDav9wn19GfjSsOA8HjUcdGkmlnw2CXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrjgs9NMLcd/6N14rn38t6h1iBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvYTZjNDZkZTYtNDRhMC0z MDBkLWJmMTktZTYzNWU5MzQ3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf3ZkKpCAhFIM2B3+aprAiQj+MEq6Obo6UCU1xEyzeSiYQYTm+WZXZd NmooMnkGEY7/MqB5fTxyyLsPyuX5GJMPRsn2axm+QuwGowwKxF8OZ8L85RDuI1Mm 3A2qepvSO8aUg/gSY8RG6BbmkB597Ocb61l5gbUKOxR8xL+pYPK3HS3/0yNKgU75 uAiQo1oue8rTEjWhHF5H+R4pf2Odr5JG391qll48zbjnkrCi7XDE//AF4o2hpUwo 0slLFLvVDTErPlzfIytrhhhxqjKdXwOkXohgRPxoXaga6YcUq3I4GTGFajGsuwKa lL2UuNaRPeXNeouKNtd2WUNN6BaKDUI= -----END CERTIFICATE-----Generated at Tue May 6 13:19:34 2025 by rpki-client