$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa File: b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa (raw, json) Hash identifier: JPSHzCOUIWitnyXmdzmR5tW7HdV2CRS0X8xeQ+YS8N0= Subject key identifier: E1:22:FA:6C:4E:7A:FD:F1:D4:90:30:CC:8A:53:6D:00:91:E7:7B:F4 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584A2C201B0B3E7DFE9A9C1A8780 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 26744 IP address blocks: 68.170.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:1b:0b:3e:7d:fe:9a:9c:1a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=d69bce87-1c1e-4409-b6ce-4de0da316940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:16:0e:3c:ea:47:f2:f8:0b:b4:c5:fb:a3: 1f:5e:c5:39:82:35:89:c3:82:77:e2:83:01:ea:26: c6:63:27:d4:04:48:e5:b1:98:93:ee:e2:f8:a3:00: 4e:35:cf:94:2e:fd:df:82:4c:fc:67:1b:1d:47:cf: 3e:aa:d9:e5:e0:74:43:21:4e:49:d6:e9:9e:35:96: 04:97:a8:94:25:d2:a3:24:71:ef:c3:90:34:54:5b: db:76:89:90:09:01:1a:e9:0c:99:a2:d5:3c:d4:a0: 8f:cf:64:1a:bb:c5:1e:a4:29:77:80:68:39:4c:47: 03:dc:f7:d4:20:c9:a2:6c:15:c8:a4:48:08:66:7e: 90:6b:16:04:41:dd:d5:5d:d4:0c:2f:e7:fb:2e:31: a4:d9:00:3c:a9:6e:69:c7:a6:6a:5b:05:a9:b3:04: 81:00:6e:77:f5:34:a5:d9:1a:a0:5f:f2:ae:7f:95: 62:28:80:4b:84:02:ab:f7:ab:a1:25:da:c5:e7:4f: 1e:3e:b6:c3:29:53:eb:a3:c1:31:d8:55:0a:a1:42: 62:4d:fb:f4:21:c0:55:a0:90:f9:16:9c:a5:72:35: 01:1c:3d:99:c1:e0:54:d1:4e:d5:ee:b4:de:b0:6f: 3e:da:8d:07:85:02:1b:7e:65:ad:5f:6c:96:db:55: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:22:FA:6C:4E:7A:FD:F1:D4:90:30:CC:8A:53:6D:00:91:E7:7B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c2:f2:74:70:93:1b:af:bf:31:de:74:61:5d:4f:85:47:69: 16:e0:36:89:ce:57:38:f7:74:ca:44:d7:19:2f:1f:1a:d6:ea: 85:f7:ac:d5:02:e9:cc:28:9f:19:4f:81:9c:d5:99:30:92:a2: 9d:ee:ec:91:da:1e:33:6c:9a:e3:42:1d:b3:e9:60:7a:54:38: bf:fc:1b:57:d2:35:f9:aa:ef:5b:73:cc:58:68:d7:b5:95:eb: 49:ab:92:7b:36:c0:59:c4:a8:cd:fa:0e:68:3d:ad:ef:ae:9c: 3b:a7:9c:d2:dc:63:37:bf:11:24:46:d8:d2:36:93:1a:cd:e3: 3d:d3:bd:2f:20:9b:79:30:c4:bf:ba:ab:45:5c:77:8f:c6:17: c4:54:b3:5c:3b:0a:6c:a9:02:f7:ed:ed:6f:d3:e1:8f:e4:36: c2:c3:54:51:97:e5:f9:39:6b:7c:09:5e:ac:58:da:1c:41:79: 9b:d3:e0:b6:6a:81:78:b7:f8:ac:81:f1:39:85:ed:70:e8:25: 63:d6:7a:01:8d:58:0b:4c:65:a2:20:20:eb:d0:26:ca:fc:96: 14:4a:ba:a7:7f:42:b8:c7:00:a7:92:84:23:a1:3f:38:e1:37: 2c:36:0b:e9:9b:e6:de:47:89:e3:30:6c:14:74:94:a5:6f:08: fb:0e:b4:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBsLPn3+mpwah4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZDY5YmNlODctMWMxZS00NDA5LWI2Y2UtNGRlMGRhMzE2OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEMWDjzqR/L4C7TF+6MfXsU5gjWJw4J34oMB 6ibGYyfUBEjlsZiT7uL4owBONc+ULv3fgkz8ZxsdR88+qtnl4HRDIU5J1umeNZYE l6iUJdKjJHHvw5A0VFvbdomQCQEa6QyZotU81KCPz2Qau8UepCl3gGg5TEcD3PfU IMmibBXIpEgIZn6QaxYEQd3VXdQML+f7LjGk2QA8qW5px6ZqWwWpswSBAG539TSl 2RqgX/Kuf5ViKIBLhAKr96uhJdrF508ePrbDKVPro8Ex2FUKoUJiTfv0IcBVoJD5 FpylcjUBHD2ZweBU0U7V7rTesG8+2o0HhQIbfmWtX2yW21XdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEi+mxOev3x1JAwzIpTbQCR53v0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYjFkYmRkZTgtYjFkMS0z MjQxLWJjNjktYTFmNDJkOTM5MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3C8nRwkxuvvzHedGFdT4VHaRbgNonOVzj3dMpE1xkvHxrW6oX3rNUC 6cwonxlPgZzVmTCSop3u7JHaHjNsmuNCHbPpYHpUOL/8G1fSNfmq71tzzFho17WV 60mrkns2wFnEqM36Dmg9re+unDunnNLcYze/ESRG2NI2kxrN4z3TvS8gm3kwxL+6 q0Vcd4/GF8RUs1w7CmypAvft7W/T4Y/kNsLDVFGX5fk5a3wJXqxY2hxBeZvT4LZq gXi3+KyB8TmF7XDoJWPWegGNWAtMZaIgIOvQJsr8lhRKuqd/QrjHAKeShCOhPzjh Nyw2C+mb5t5HieMwbBR0lKVvCPsOtHI= -----END CERTIFICATE-----Generated at Tue Jun 17 15:44:24 2025 by rpki-client