$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa File: 273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa (raw, json) Hash identifier: XpELsCq8X/cGpcDJyQ3jrZnz6nVNcLSImH16uEUakAE= Subject key identifier: 02:19:A2:F0:4D:EA:5C:84:BA:77:A6:FB:44:D4:89:9C:7C:4D:2E:7C Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F432858499829C2799A32A6007D44B6C0 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 2914 IP address blocks: 68.170.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c2:79:9a:32:a6:00:7d:44:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=94f8ce60-c1da-4e61-b0c4-7169ac244d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:de:24:6d:a5:64:05:ed:8d:e8:e8:b2:3a:6c: 40:7b:9c:f3:7f:07:77:d6:26:28:39:12:51:85:6e: c2:df:2d:ed:06:2c:72:95:64:d9:d2:90:28:7b:90: 82:1c:90:83:61:b9:c4:6c:07:8a:a8:5b:dc:c2:2c: f9:7c:aa:6f:58:ea:a6:31:06:90:68:54:0b:22:d0: 57:ae:3c:e3:fe:2b:ac:82:d6:dd:f0:3c:06:2a:40: 62:39:88:8e:ca:a7:7a:7c:d2:7a:a7:c5:86:9e:eb: 0a:e7:3a:c1:1d:4a:ad:6a:e9:29:f9:e7:09:72:6c: 14:18:ab:e2:17:ba:35:b2:10:7f:b4:75:45:b7:7b: 76:ff:f5:c7:82:7c:67:82:9b:e8:b2:3f:40:ed:1a: 26:c5:f5:c1:28:83:b0:50:dd:c0:65:09:2a:82:bc: d1:c1:61:b8:9c:48:ef:bb:b7:5d:b5:84:5c:33:45: 4b:03:0a:fb:ee:b6:6f:2d:ba:86:c5:74:f3:1a:79: 7f:f2:08:8d:85:b2:c2:3c:50:c9:48:8c:92:a8:0e: 89:19:28:55:21:42:85:91:fe:05:b9:42:60:32:43: 90:b1:a6:b3:e8:57:76:03:93:50:23:3a:53:23:75: 17:cd:74:d5:2c:60:34:7a:8d:48:12:be:0d:32:e4: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:19:A2:F0:4D:EA:5C:84:BA:77:A6:FB:44:D4:89:9C:7C:4D:2E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/273bd88c-151f-3eaa-82f6-e2859e3c86b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bf:b3:d3:f9:5c:d7:40:f1:fc:c0:6b:86:cd:49:2b:9d:c2: fa:cc:01:a9:90:62:16:fc:62:b6:75:e9:9f:21:99:35:2e:c2: 4e:ee:ad:c4:3e:95:a2:2f:97:28:ce:f1:06:23:6e:4c:7d:06: f2:55:33:a2:67:d7:e3:37:8e:ea:7f:2e:e7:85:25:74:db:e9: c2:0e:1f:30:83:45:c1:2b:dd:d6:23:27:36:0d:fc:25:9e:c8: 94:28:78:b3:7d:ba:38:40:a4:53:28:27:38:d9:25:1d:2f:ce: 61:96:ba:36:a4:4a:c3:48:69:92:d4:d3:41:ef:f8:24:ac:3d: 22:37:70:10:18:a7:6b:bf:52:b8:4e:46:89:23:36:f8:d5:cf: f4:3c:a3:a7:cf:5f:6a:bb:77:b5:27:5a:fa:85:61:09:38:aa: d5:92:07:f0:90:3d:13:9f:7f:74:54:a7:36:af:36:09:7a:11: b7:ea:62:e0:19:c3:3f:df:4f:a6:57:f2:d2:a7:ef:06:8c:50: b4:58:17:fe:a4:12:63:91:ae:67:dc:da:82:3c:29:8e:ee:d5: c8:f8:77:d3:ce:d8:6f:15:21:80:e0:2f:86:62:c0:db:5b:07: ab:62:6a:84:51:49:19:24:bc:ff:7e:1e:64:be:21:1a:82:cb: ff:ea:8d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcJ5mjKmAH1EtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OTRmOGNlNjAtYzFkYS00ZTYxLWIwYzQtNzE2OWFjMjQ0ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht4kbaVkBe2N6OiyOmxAe5zzfwd31iYoORJR hW7C3y3tBixylWTZ0pAoe5CCHJCDYbnEbAeKqFvcwiz5fKpvWOqmMQaQaFQLItBX rjzj/iusgtbd8DwGKkBiOYiOyqd6fNJ6p8WGnusK5zrBHUqtaukp+ecJcmwUGKvi F7o1shB/tHVFt3t2//XHgnxngpvosj9A7RomxfXBKIOwUN3AZQkqgrzRwWG4nEjv u7ddtYRcM0VLAwr77rZvLbqGxXTzGnl/8giNhbLCPFDJSIySqA6JGShVIUKFkf4F uUJgMkOQsaaz6Fd2A5NQIzpTI3UXzXTVLGA0eo1IEr4NMuTZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIZovBN6lyEunem+0TUiZx8TS58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMjczYmQ4OGMtMTUxZi0z ZWFhLTgyZjYtZTI4NTllM2M4NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu/s9P5XNdA8fzAa4bNSSudwvrMAamQYhb8YrZ16Z8hmTUuwk7urcQ+ laIvlyjO8QYjbkx9BvJVM6Jn1+M3jup/LueFJXTb6cIOHzCDRcEr3dYjJzYN/CWe yJQoeLN9ujhApFMoJzjZJR0vzmGWujakSsNIaZLU00Hv+CSsPSI3cBAYp2u/UrhO RokjNvjVz/Q8o6fPX2q7d7UnWvqFYQk4qtWSB/CQPROff3RUpzavNgl6EbfqYuAZ wz/fT6ZX8tKn7waMULRYF/6kEmORrmfc2oI8KY7u1cj4d9PO2G8VIYDgL4ZiwNtb B6tiaoRRSRkkvP9+HmS+IRqCy//qjU8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:33:07 2025 by rpki-client