$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa File: 308c77f3-049f-350a-ba83-1535cc6dfb51.roa (raw, json) Hash identifier: 76KtaKxfh/wsejSpfHvfYPLlnFCzU7KTJLUVZ6nUB8Y= Subject key identifier: F2:DE:41:5F:B3:1A:09:85:FA:51:63:BD:BC:E6:0F:F9:3F:09:8B:BD Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584A00DACADC44A0768FCC94A000 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 26744 IP address blocks: 68.170.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:ca:dc:44:a0:76:8f:cc:94:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=c5c48d8c-8a74-4ae8-95bc-72fc233e3332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:80:e2:9c:94:a0:8c:bf:cd:e7:df:f3:cc: e2:95:ed:d9:55:04:72:d3:48:a1:0a:f3:43:a4:b7: df:c4:f6:b8:6c:5b:eb:fa:29:3d:ea:ef:75:7d:5d: f5:a3:06:99:b7:d7:72:46:14:86:5c:90:52:2f:ac: f6:28:a1:4c:0b:96:fc:ae:2a:d4:63:ec:44:60:c5: 38:c1:2b:d3:94:85:e7:8f:71:4e:d9:bb:8c:02:42: f8:d9:06:3d:e5:99:5f:73:d2:77:7e:d7:c7:99:a6: ff:31:68:7d:f0:57:74:ba:39:09:d2:2c:e4:ca:81: 2b:c8:36:19:e0:7c:6e:af:39:e3:95:9c:f2:00:10: f2:4b:e5:38:e4:e5:33:44:98:29:3c:0b:f0:55:ae: a4:2b:c7:0a:2c:2b:be:aa:8e:86:e0:91:98:bd:e0: e8:85:b2:bc:ab:a0:f6:cd:32:49:bf:8f:70:0b:e4: d9:b5:6c:8c:9d:82:73:62:d5:cc:52:80:7c:0d:f0: 11:74:9e:14:13:6f:a3:16:20:4f:81:08:ae:75:93: 23:27:6b:39:4a:0d:1a:74:13:2c:01:e9:a6:eb:9c: f0:35:40:33:ad:df:75:81:74:5b:38:c3:0f:85:b8: 33:cd:01:ae:23:59:e8:da:b8:61:87:6a:2c:e5:b8: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:41:5F:B3:1A:09:85:FA:51:63:BD:BC:E6:0F:F9:3F:09:8B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9d:b8:65:65:9d:0c:65:45:b6:ec:53:a2:0d:d8:4c:73:2e: 15:f8:3a:f5:15:70:a8:33:51:73:35:0a:d3:3b:fb:4d:74:8c: 40:a2:92:77:98:80:d6:cb:41:66:cb:7f:c8:4c:64:e5:ca:b1: 84:13:56:38:26:ce:bd:5d:97:8a:e8:82:14:3a:30:61:20:63: ad:84:37:e2:9f:a7:04:23:0b:61:c2:d0:ed:5e:5c:57:7f:f2: ee:9f:2a:74:9a:92:da:e2:90:85:e9:fe:51:94:cd:87:9a:9a: 5f:2f:bf:de:06:ef:b5:6d:8a:60:80:f0:f6:86:ee:78:b1:82: 7c:06:2a:5c:e7:92:5f:0b:52:84:78:8d:92:5d:29:93:6f:7a: 66:d1:81:ec:f2:f7:14:cf:c2:e4:0d:90:37:28:4b:e5:55:0e: 71:aa:f4:48:8e:0b:f6:b3:02:ef:07:c9:e1:e4:28:39:c2:b9: 69:b2:06:f6:80:c0:8e:6b:65:16:27:0e:ed:fe:74:85:bb:ce: af:f7:84:f9:31:34:9c:59:00:26:92:64:88:30:b3:b0:6f:ca: a2:db:9b:91:f4:8a:03:d2:fa:ab:32:b4:09:c3:a1:64:a8:26: 25:62:87:b2:91:f9:d0:99:88:29:ed:a1:07:42:d8:c5:c6:05: 8d:49:41:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2srcRKB2j8yUoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YzVjNDhkOGMtOGE3NC00YWU4LTk1YmMtNzJmYzIzM2UzMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopOA4pyUoIy/zeff88zile3ZVQRy00ihCvND pLffxPa4bFvr+ik96u91fV31owaZt9dyRhSGXJBSL6z2KKFMC5b8rirUY+xEYMU4 wSvTlIXnj3FO2buMAkL42QY95Zlfc9J3ftfHmab/MWh98Fd0ujkJ0izkyoEryDYZ 4HxurznjlZzyABDyS+U45OUzRJgpPAvwVa6kK8cKLCu+qo6G4JGYveDohbK8q6D2 zTJJv49wC+TZtWyMnYJzYtXMUoB8DfARdJ4UE2+jFiBPgQiudZMjJ2s5Sg0adBMs Aemm65zwNUAzrd91gXRbOMMPhbgzzQGuI1no2rhhh2os5bjkOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLeQV+zGgmF+lFjvbzmD/k/CYu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzA4Yzc3ZjMtMDQ5Zi0z NTBhLWJhODMtMTUzNWNjNmRmYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeduGVlnQxlRbbsU6IN2ExzLhX4OvUVcKgzUXM1CtM7+010jECikneY gNbLQWbLf8hMZOXKsYQTVjgmzr1dl4roghQ6MGEgY62EN+KfpwQjC2HC0O1eXFd/ 8u6fKnSaktrikIXp/lGUzYeaml8vv94G77VtimCA8PaG7nixgnwGKlznkl8LUoR4 jZJdKZNvembRgezy9xTPwuQNkDcoS+VVDnGq9EiOC/azAu8HyeHkKDnCuWmyBvaA wI5rZRYnDu3+dIW7zq/3hPkxNJxZACaSZIgws7BvyqLbm5H0igPS+qsytAnDoWSo JiVih7KR+dCZiCntoQdC2MXGBY1JQQk= -----END CERTIFICATE-----Generated at Tue Jun 17 01:49:19 2025 by rpki-client