$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa File: a6c46de6-44a0-300d-bf19-e635e93471d5.roa (raw, json) Hash identifier: RUgzOXTEgibLPDwdA4VossySTEYXZIWkT5GjPLdQgTU= Subject key identifier: 47:D2:CC:4C:48:F4:70:F6:BD:FD:37:A2:0C:B9:96:E7:12:81:70:AD Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F43285849F87A8E42CC4DCCC2F09C4100 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 16509 IP address blocks: 68.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8e:42:cc:4d:cc:c2:f0:9c:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=ad4d701d-586a-4492-93d8-405adaaaf91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8b:4e:ec:05:cc:37:fe:86:3f:cf:fc:97:12: d4:e1:11:12:65:ec:b5:fe:df:8b:2f:cc:2a:8c:da: c0:84:8c:60:91:16:ca:a7:8c:87:2f:74:d9:5a:fe: 96:e0:59:4d:9a:7c:60:90:53:04:38:18:e3:8f:61: 97:2e:46:df:b7:c9:84:c3:c4:7a:56:db:1a:2a:c8: 32:e4:da:6e:6c:e5:94:b0:f6:3a:50:50:e9:38:40: ba:f4:3d:85:2e:6b:42:db:27:32:f8:46:bc:ac:43: 7c:ea:25:4f:83:15:b6:df:59:08:32:39:af:9f:44: 47:c2:d0:da:85:ac:5b:a9:d6:74:cc:e7:ab:17:56: e9:3a:0c:5c:a3:00:12:da:71:20:94:63:2c:af:ba: 87:d4:12:5c:9d:8a:16:86:29:96:15:b6:a6:0c:f5: b5:fa:21:a6:d3:b5:36:f7:88:cc:9e:e2:85:01:91: dc:04:a6:e6:6b:63:24:27:9f:a7:96:9f:54:50:c0: 17:d4:e5:39:aa:7d:33:4c:75:be:45:04:8d:80:b8: 3f:49:54:47:cc:a2:66:47:95:28:9c:47:77:3a:81: a3:3f:bc:c9:12:fd:c5:1a:82:fc:f0:bb:93:71:79: 2e:6d:2b:e5:fc:14:53:43:fb:50:a2:46:40:10:a3: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:CC:4C:48:F4:70:F6:BD:FD:37:A2:0C:B9:96:E7:12:81:70:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:98:e6:a6:02:22:15:00:75:b0:a4:7b:44:1a:67:85:6c:4e: e8:d2:28:b4:d8:42:ea:8d:a1:c9:31:5e:af:11:ae:22:fe:df: 92:59:bc:52:c3:e1:e1:b4:68:27:82:bf:da:13:e3:78:da:89: 4b:93:b6:5a:50:52:c6:b2:3c:ae:df:ed:ca:19:35:a6:96:9a: 9f:2d:5d:8a:25:18:f9:cb:af:b5:8f:33:e6:bd:c7:18:f5:7e: 96:8f:11:fa:c4:b2:2e:e1:3a:c8:fa:42:e1:55:c0:2f:bb:bf: 7a:21:b9:7b:bc:4e:07:5c:7d:51:2f:cb:f7:e4:dd:2c:8f:38: e2:cb:3c:bf:45:ac:6a:bc:17:d5:7b:d3:f1:5f:88:4b:4d:d2: 80:15:69:16:14:ef:1b:a3:6d:5f:73:29:c0:b0:39:d0:fe:1b: 2b:45:86:55:14:60:63:cb:50:12:d2:2b:fd:75:26:90:71:16: bb:26:a4:16:ee:a5:02:08:83:aa:04:fd:89:cd:05:ad:ca:1d: 04:e6:f2:71:32:01:45:80:cc:6f:a2:97:d4:a3:bd:5a:46:80: af:d0:4f:b7:c9:d0:86:09:d5:7e:5f:29:b1:ac:20:20:99:7b: 8a:00:40:7b:da:6e:ef:d7:71:12:6d:9f:82:88:b5:86:03:31: 79:3d:9d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eo5CzE3MwvCcQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YWQ0ZDcwMWQtNTg2YS00NDkyLTkzZDgtNDA1YWRhYWFmOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYtO7AXMN/6GP8/8lxLU4RESZey1/t+LL8wq jNrAhIxgkRbKp4yHL3TZWv6W4FlNmnxgkFMEOBjjj2GXLkbft8mEw8R6VtsaKsgy 5NpubOWUsPY6UFDpOEC69D2FLmtC2ycy+Ea8rEN86iVPgxW231kIMjmvn0RHwtDa haxbqdZ0zOerF1bpOgxcowAS2nEglGMsr7qH1BJcnYoWhimWFbamDPW1+iGm07U2 94jMnuKFAZHcBKbma2MkJ5+nlp9UUMAX1OU5qn0zTHW+RQSNgLg/SVRHzKJmR5Uo nEd3OoGjP7zJEv3FGoL88LuTcXkubSvl/BRTQ/tQokZAEKPTUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfSzExI9HD2vf03ogy5lucSgXCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvYTZjNDZkZTYtNDRhMC0z MDBkLWJmMTktZTYzNWU5MzQ3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+Y5qYCIhUAdbCke0QaZ4VsTujSKLTYQuqNockxXq8RriL+35JZvFLD 4eG0aCeCv9oT43jaiUuTtlpQUsayPK7f7coZNaaWmp8tXYolGPnLr7WPM+a9xxj1 fpaPEfrEsi7hOsj6QuFVwC+7v3ohuXu8TgdcfVEvy/fk3SyPOOLLPL9FrGq8F9V7 0/FfiEtN0oAVaRYU7xujbV9zKcCwOdD+GytFhlUUYGPLUBLSK/11JpBxFrsmpBbu pQIIg6oE/YnNBa3KHQTm8nEyAUWAzG+il9SjvVpGgK/QT7fJ0IYJ1X5fKbGsICCZ e4oAQHvabu/XcRJtn4KItYYDMXk9nZg= -----END CERTIFICATE-----Generated at Sat Jun 14 06:22:06 2025 by rpki-client