$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa File: 5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa (raw, json) Hash identifier: prZX0N9YdDMgsSz/U6fnBzqaZkvfzeXyVTA4f1rq5xM= Subject key identifier: A8:49:35:7E:D7:AE:E8:8A:39:76:4C:5B:45:4E:75:37:0D:4A:6F:4B Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F4CF8C6FCC30B7CA52CC Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 69.73.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f4:cf:8c:6f:cc:30:b7:ca:52:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ec2bff58-4ada-426e-9e95-f8a070bb6db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:d2:34:5b:9e:fb:d9:49:e5:ef:ae:69:f4: 50:92:a6:57:9e:2b:04:42:db:67:61:f6:29:68:9e: 0a:e1:42:bd:75:fc:94:3d:cf:be:ad:b0:6d:38:4c: c6:af:59:7d:63:a0:e3:f7:0d:11:a8:32:10:6c:e2: 34:60:67:3e:38:15:80:08:6f:ee:bb:e1:3c:bd:e3: 5b:95:15:df:2a:dd:c2:5e:88:35:91:d2:0a:53:75: 48:19:f5:be:05:aa:ed:a5:b7:3f:1c:21:05:ff:32: 59:6c:6c:5e:57:61:ca:1f:3f:60:63:09:4a:fd:52: e0:91:cc:a0:33:a9:be:13:16:ce:94:12:f5:12:fb: 7e:75:48:20:c1:8a:33:6a:f3:73:1f:58:b7:6d:ae: 7a:c4:cf:68:32:34:94:1e:39:9a:5d:d7:c5:fa:d0: 9c:cb:9e:1c:ad:99:ee:75:53:97:c3:d6:17:c9:76: ba:ba:32:b2:8e:4b:73:a1:0e:51:03:e8:d8:17:95: f7:06:1e:ed:df:80:31:46:d3:bb:fb:07:cd:c3:e9: 7f:23:0c:f7:67:1a:62:b5:f8:f1:10:bc:19:36:33: 67:b4:50:ed:b6:66:4b:ad:69:e1:6d:58:0c:bc:5a: 2b:12:a4:f8:9d:69:c1:75:72:c9:7a:9d:db:aa:9f: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:49:35:7E:D7:AE:E8:8A:39:76:4C:5B:45:4E:75:37:0D:4A:6F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 69.73.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7b:18:75:dc:a5:4e:24:0d:c3:94:2a:5d:4d:3f:39:2b:f0: 71:5e:b6:29:b0:4c:f6:b0:34:14:54:42:03:98:3d:3e:d4:06: 30:e5:a0:ec:5c:35:fa:4f:81:d8:a5:19:4d:68:5f:1e:37:1f: 08:cf:a7:53:e3:a7:b3:8d:ad:5f:38:c0:69:53:50:8d:05:05: c6:1e:f9:47:7b:92:32:df:e2:e3:7d:ee:fe:0a:c5:d5:fb:65: 6a:d9:e6:7f:35:ae:77:a3:b9:10:48:74:1d:0d:c2:b4:f4:75: 66:19:20:fc:8a:cc:f8:63:96:8a:4c:33:1f:8a:5d:92:fe:29: 8c:28:79:7d:2b:5a:77:28:e7:dc:f8:8c:09:bd:4c:b9:67:f3: 45:fb:ed:f9:31:5f:a9:1f:43:f9:4b:e5:18:65:1d:cb:2b:75: d1:43:d7:8e:f2:21:5b:aa:5f:0f:1d:b5:73:83:4b:74:9c:99: 2e:9a:ec:42:93:a5:50:a3:d7:32:96:df:41:e7:16:19:ed:23: b0:15:93:c3:d7:40:71:3a:fd:25:69:80:ec:51:99:c0:58:49: 73:b8:43:ce:1d:7f:3f:b4:6a:3e:1d:9e:f5:e6:f0:8a:36:de: 78:42:c5:ed:f7:1b:72:45:98:54:3c:2a:c9:d6:47:7c:be:aa: d8:6f:77:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufTPjG/MMLfKUswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWMyYmZmNTgtNGFkYS00MjZlLTllOTUtZjhhMDcwYmI2ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg/SNFue+9lJ5e+uafRQkqZXnisEQttnYfYp aJ4K4UK9dfyUPc++rbBtOEzGr1l9Y6Dj9w0RqDIQbOI0YGc+OBWACG/uu+E8veNb lRXfKt3CXog1kdIKU3VIGfW+Bartpbc/HCEF/zJZbGxeV2HKHz9gYwlK/VLgkcyg M6m+ExbOlBL1Evt+dUggwYozavNzH1i3ba56xM9oMjSUHjmaXdfF+tCcy54crZnu dVOXw9YXyXa6ujKyjktzoQ5RA+jYF5X3Bh7t34AxRtO7+wfNw+l/Iwz3Zxpitfjx ELwZNjNntFDttmZLrWnhbVgMvForEqT4nWnBdXLJep3bqp+z3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhJNX7XruiKOXZMW0VOdTcNSm9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNWFmZjg3MTgtMTU0NS0z YWJlLThjOGMtMWVmOGVhNDZlMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUnsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl7GHXcpU4kDcOUKl1NPzkr8HFetimwTPawNBRUQgOYPT7UBjDloOxc NfpPgdilGU1oXx43HwjPp1Pjp7ONrV84wGlTUI0FBcYe+Ud7kjLf4uN97v4KxdX7 ZWrZ5n81rnejuRBIdB0NwrT0dWYZIPyKzPhjlopMMx+KXZL+KYwoeX0rWnco59z4 jAm9TLln80X77fkxX6kfQ/lL5RhlHcsrddFD147yIVuqXw8dtXODS3ScmS6a7EKT pVCj1zKW30HnFhntI7AVk8PXQHE6/SVpgOxRmcBYSXO4Q84dfz+0aj4dnvXm8Io2 3nhCxe33G3JFmFQ8KsnWR3y+qthvd+Y= -----END CERTIFICATE-----Generated at Sun Jun 15 12:06:04 2025 by rpki-client