$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa File: a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa (raw, json) Hash identifier: y1hpUWBa09vI2mb1zgSy4S2m3drUzVX5JPk/2TR7sQM= Subject key identifier: F6:3F:1F:B9:68:FF:A8:3A:52:9C:BA:D8:3B:FA:77:9B:AD:11:E1:DA Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F43285849F17FB054A01687A859910F80 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 20454 IP address blocks: 69.160.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:b0:54:a0:16:87:a8:59:91:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=f49f5173-1b33-4dc1-acf3-a32bb87e70db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:0f:4c:09:ab:23:a8:c0:a6:e1:75:7b:59: 95:77:f0:6c:01:c9:65:74:c2:2a:16:4a:51:7d:28: f4:75:7b:03:14:f9:a8:0a:0b:b5:73:22:24:3d:eb: 8d:f1:a0:77:93:eb:d1:10:97:3e:60:64:9c:66:c4: 22:45:4d:fe:f8:f5:41:2c:fa:8e:74:34:d9:d7:8d: 0a:30:9b:77:4c:62:4c:2c:f9:08:e0:05:a4:2c:3f: 3c:db:a5:d5:ec:2a:50:ca:3d:14:1f:3f:b2:6f:e0: 6c:2d:0d:70:5e:df:33:79:53:b4:67:a0:66:22:c1: 6f:40:da:9b:76:3c:34:cd:de:0f:56:43:40:7a:ef: c8:0f:b1:d1:62:b5:42:ca:d4:cc:e8:07:81:48:90: 97:bb:cd:78:9a:1d:c8:3f:c6:f7:8f:d1:ee:9e:fd: 89:70:47:60:c8:d0:dc:78:9b:69:b4:b9:2f:69:02: 3f:38:37:f7:92:97:57:06:ae:d3:46:05:3b:30:7a: dc:97:96:98:61:a0:a8:5b:e6:5c:79:b1:dc:ab:87: 45:55:b4:4f:25:15:4a:39:6a:62:8b:09:64:4d:bc: 94:59:e2:8e:63:5e:c0:5f:a2:e9:cd:56:80:8e:4a: 1c:d9:ee:34:aa:4a:c7:e8:27:e3:d1:e5:06:7f:d2: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:1F:B9:68:FF:A8:3A:52:9C:BA:D8:3B:FA:77:9B:AD:11:E1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/a0ee70a9-8a34-3815-bf5a-4c9e0641ef7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv4: 69.160.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ff:96:79:c3:6f:cf:45:ea:8e:31:04:28:83:75:3e:a5:a2: 44:84:0f:88:ae:85:d5:5d:a7:dd:4c:f7:10:3f:9b:31:ef:a8: 59:63:01:fe:a7:85:4e:b4:40:99:79:a3:f8:c0:cb:cf:e1:12: 82:00:6d:d2:cc:b9:90:e2:7f:70:02:66:ff:1d:13:29:e2:9f: 3f:e3:66:e0:21:14:7d:f3:a6:ee:88:e9:86:96:a6:ff:4f:70: ee:53:eb:14:e3:0b:c9:73:b7:a8:39:cd:b8:84:a0:36:d7:6e: 28:c6:91:0c:45:1a:e3:8f:75:ce:24:79:20:12:b1:23:04:e3: a3:5e:51:a9:4e:fc:58:5a:83:4f:10:93:77:74:1a:f5:e4:9e: 95:20:81:8c:47:40:77:95:89:b3:90:96:08:76:c9:c1:2e:1a: 1c:f1:42:ae:3d:b6:f6:96:64:ac:f7:4f:97:f2:1c:13:6b:42: a0:c5:00:9f:19:a5:7e:ad:70:21:f4:48:2d:23:13:86:95:a6: d4:4a:c8:41:08:4a:9a:08:98:68:3a:62:14:bb:56:87:89:aa: af:c8:6b:3f:b5:56:d9:18:05:bf:d4:17:b5:84:70:ae:18:d4: f4:70:77:c7:1c:38:67:db:9c:fc:7e:99:01:21:40:46:68:36: 30:60:38:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7BUoBaHqFmRD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZjQ5ZjUxNzMtMWIzMy00ZGMxLWFjZjMtYTMyYmI4N2U3MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV4PTAmrI6jApuF1e1mVd/BsAclldMIqFkpR fSj0dXsDFPmoCgu1cyIkPeuN8aB3k+vREJc+YGScZsQiRU3++PVBLPqOdDTZ140K MJt3TGJMLPkI4AWkLD8826XV7CpQyj0UHz+yb+BsLQ1wXt8zeVO0Z6BmIsFvQNqb djw0zd4PVkNAeu/ID7HRYrVCytTM6AeBSJCXu814mh3IP8b3j9Hunv2JcEdgyNDc eJtptLkvaQI/ODf3kpdXBq7TRgU7MHrcl5aYYaCoW+ZcebHcq4dFVbRPJRVKOWpi iwlkTbyUWeKOY17AX6LpzVaAjkoc2e40qkrH6Cfj0eUGf9LwuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY/H7lo/6g6Upy62Dv6d5utEeHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvYTBlZTcwYTktOGEzNC0z ODE1LWJmNWEtNGM5ZTA2NDFlZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRaAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL/lnnDb89F6o4xBCiDdT6lokSED4iuhdVdp91M9xA/mzHvqFljAf6n hU60QJl5o/jAy8/hEoIAbdLMuZDif3ACZv8dEyninz/jZuAhFH3zpu6I6YaWpv9P cO5T6xTjC8lzt6g5zbiEoDbXbijGkQxFGuOPdc4keSASsSME46NeUalO/Fhag08Q k3d0GvXknpUggYxHQHeVibOQlgh2ycEuGhzxQq49tvaWZKz3T5fyHBNrQqDFAJ8Z pX6tcCH0SC0jE4aVptRKyEEISpoImGg6YhS7VoeJqq/Iaz+1VtkYBb/UF7WEcK4Y 1PRwd8ccOGfbnPx+mQEhQEZoNjBgOBg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:35:56 2025 by rpki-client