$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e6ecd0a5-7d6d-3d62-8fa1-8516ccdba937.roa File: e6ecd0a5-7d6d-3d62-8fa1-8516ccdba937.roa (raw, json) Hash identifier: dXk346qb4UesaNzirOtEMmUx+0CKcG8eYk5qkSJsK9M= Subject key identifier: 00:43:30:80:1C:22:A4:2B:44:C6:B5:80:6A:65:87:5F:39:F4:C6:20 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F43285849A4B9F61E92F31A43EB8BAEA0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e6ecd0a5-7d6d-3d62-8fa1-8516ccdba937.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14813 IP address blocks: 69.73.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:f6:1e:92:f3:1a:43:eb:8b:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=78ce8f19-2ac8-408f-a72c-2e9be9c5d701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:11:f1:64:16:94:8a:ec:0c:ed:85:09:f9: d4:84:5c:b7:7a:f2:43:09:ad:a5:fb:69:12:55:b9: 13:8d:e2:84:cb:9c:c8:fe:98:63:27:46:49:1b:67: 84:d9:00:31:be:39:19:c2:f0:97:35:c5:e3:89:b7: c3:84:6c:a3:8b:fc:a5:a7:9d:9a:31:d2:9d:d4:0a: 94:92:1d:1d:65:e4:0a:16:c6:24:6b:53:95:80:7e: 4c:9a:2a:e2:4b:8e:ff:a6:37:c6:3a:a1:99:69:b9: 16:ac:f6:b3:bc:03:7b:fa:2c:5a:84:0f:29:a2:d1: 20:52:b6:92:94:33:7f:ae:93:ce:a0:41:9d:a2:f9: 3c:32:e7:ed:af:40:35:f4:07:ef:81:02:01:37:a7: a1:75:10:e9:c3:e6:c2:bd:3c:ee:89:3a:cf:64:1a: 47:a5:b6:75:e3:5f:bc:c1:30:ae:36:18:e2:b4:67: 52:92:75:f4:97:55:2a:ef:37:3e:0d:43:22:ea:df: a2:11:fd:8f:b1:dc:5c:6c:2d:15:63:89:3e:9b:72: 5c:e7:42:e8:0b:1d:47:cc:fb:32:70:45:37:e3:9e: 0c:e8:75:81:34:70:a4:23:ae:a3:2e:48:d7:84:59: 5c:49:f5:27:16:e2:85:0a:44:86:dd:42:d0:4b:cb: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:43:30:80:1C:22:A4:2B:44:C6:B5:80:6A:65:87:5F:39:F4:C6:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/e6ecd0a5-7d6d-3d62-8fa1-8516ccdba937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 69.73.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:78:76:f5:44:1b:aa:3f:aa:79:9c:1b:52:ff:a4:4d:ee:eb: 62:c3:22:83:2f:17:8f:83:d3:55:48:15:85:55:6e:c8:17:79: 9e:80:56:13:a1:6b:8f:ba:35:10:fc:07:34:42:26:1a:24:75: 68:60:1e:e3:d8:a6:d6:c0:89:8e:ac:eb:ea:63:6a:7c:9c:97: a8:43:b7:80:8e:85:13:3e:1c:4f:a2:89:87:18:56:35:b4:46: 6a:f7:36:4a:c0:73:bd:b0:71:64:5c:8c:d2:46:c9:76:d4:17: 45:88:d6:54:d3:2d:3e:ec:d8:bd:16:66:40:12:60:ba:e2:c8: a0:62:03:3f:eb:db:aa:cc:e1:ec:59:1e:9b:55:6c:6f:f9:ac: f8:3a:03:37:f5:ad:76:bb:b9:0c:d7:98:33:ee:7f:50:bc:9e: f3:47:2e:3a:da:ae:95:9f:f5:95:2e:81:1a:bd:10:81:82:33: 85:13:81:c5:97:d9:cf:ba:cb:09:c3:e1:35:14:5a:c1:36:34: 5a:14:93:75:75:64:ad:99:ec:e2:ef:92:6b:cb:cc:39:3c:89: 90:30:e1:57:00:64:28:44:bd:65:c4:97:1d:2c:ab:59:5b:2e: 2e:53:b7:4a:98:b0:23:68:6b:a6:3f:9d:76:42:34:e6:09:dc: dd:fd:bd:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkufYekvMaQ+uLrqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzhjZThmMTktMmFjOC00MDhmLWE3MmMtMmU5YmU5YzVkNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwIR8WQWlIrsDO2FCfnUhFy3evJDCa2l+2kS VbkTjeKEy5zI/phjJ0ZJG2eE2QAxvjkZwvCXNcXjibfDhGyji/ylp52aMdKd1AqU kh0dZeQKFsYka1OVgH5MmiriS47/pjfGOqGZabkWrPazvAN7+ixahA8potEgUraS lDN/rpPOoEGdovk8Muftr0A19AfvgQIBN6ehdRDpw+bCvTzuiTrPZBpHpbZ141+8 wTCuNhjitGdSknX0l1Uq7zc+DUMi6t+iEf2PsdxcbC0VY4k+m3Jc50LoCx1HzPsy cEU3454M6HWBNHCkI66jLkjXhFlcSfUnFuKFCkSG3ULQS8vIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABDMIAcIqQrRMa1gGplh1859MYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZTZlY2QwYTUtN2Q2ZC0z ZDYyLThmYTEtODUxNmNjZGJhOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUn+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF4dvVEG6o/qnmcG1L/pE3u62LDIoMvF4+D01VIFYVVbsgXeZ6AVhOh a4+6NRD8BzRCJhokdWhgHuPYptbAiY6s6+pjanycl6hDt4COhRM+HE+iiYcYVjW0 Rmr3NkrAc72wcWRcjNJGyXbUF0WI1lTTLT7s2L0WZkASYLriyKBiAz/r26rM4exZ HptVbG/5rPg6Azf1rXa7uQzXmDPuf1C8nvNHLjrarpWf9ZUugRq9EIGCM4UTgcWX 2c+6ywnD4TUUWsE2NFoUk3V1ZK2Z7OLvkmvLzDk8iZAw4VcAZChEvWXElx0sq1lb Li5Tt0qYsCNoa6Y/nXZCNOYJ3N39vaQ= -----END CERTIFICATE-----Generated at Sun Apr 27 15:39:52 2025 by rpki-client