$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa File: 85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa (raw, json) Hash identifier: 8sNYI9g9N0JAyx44KXAlIHc69vSFgWGrvXtz86J8E2k= Subject key identifier: E6:E2:82:4C:FD:58:FC:A0:AD:8A:0C:56:53:3F:E0:BF:FB:66:78:19 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584988CF1E03E734FF6B5FEBFB60 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 22280 IP address blocks: 69.173.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:1e:03:e7:34:ff:6b:5f:eb:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=9b2d3ee2-d370-4027-a5c7-92f1cbade3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:58:25:69:6c:09:c4:dd:6b:74:db:f1:24: 24:33:3d:73:84:b7:8c:b7:e2:5d:4b:6d:8d:d7:22: be:4e:79:e4:e2:09:c1:2e:65:a9:12:26:13:16:1a: 8a:d2:fc:c8:36:a8:ca:f4:d3:5f:01:a5:e2:aa:ad: 78:b3:ce:f4:50:88:8c:f2:c9:2d:5c:dd:3c:e6:ff: 49:fb:55:81:7b:bb:d4:1e:41:0f:a7:71:25:00:56: dc:af:d3:5d:5b:a6:e5:d6:40:1a:d7:ce:21:45:7a: c1:55:f9:25:b7:b4:a0:63:f5:3a:f6:9b:0d:f8:66: e4:62:a3:24:d6:a1:0e:ee:99:25:55:69:35:04:ca: 4e:8b:b9:5a:44:d2:2c:13:90:15:f6:1c:4c:d3:83: d8:2b:0d:a0:63:7a:a4:c4:30:73:7a:7a:f3:d7:a5: bd:cc:72:01:08:c5:64:a1:90:af:30:af:e8:e0:43: 36:5e:fd:e1:28:2b:e9:a5:06:e5:cf:0e:42:3d:05: 43:e8:63:ec:94:76:a8:9b:86:38:43:d6:0c:a5:62: c7:66:31:b8:9c:3f:ad:35:e3:ab:4e:0c:31:ca:41: 07:24:85:e4:50:bd:f7:4a:3b:c9:e1:20:1a:de:2d: 2e:53:6b:09:34:10:4d:b6:31:11:55:d4:1f:dd:ee: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E2:82:4C:FD:58:FC:A0:AD:8A:0C:56:53:3F:E0:BF:FB:66:78:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: 69.173.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:71:8b:b2:dc:5e:b3:c9:96:6d:80:9a:4c:2e:4c:95:de:a5: 8a:3b:98:a6:c2:cb:21:62:68:06:fb:16:ba:a6:c8:b8:d2:19: 3c:38:03:e1:0b:df:a2:b6:1a:93:12:6d:1f:de:d2:ae:a9:c1: 3b:17:12:43:f4:53:2f:03:03:1c:71:35:70:9f:de:b4:68:ee: c9:8e:ca:9c:ea:8b:9f:fb:e6:97:1f:1f:bf:26:02:ed:ea:36: 94:16:2d:d1:d5:4b:a3:09:db:52:e7:97:45:71:7c:c5:8d:d3: f4:c4:db:a3:50:32:27:48:33:87:e6:ec:71:61:32:08:49:5b: 2d:43:7e:2a:aa:8a:c7:b1:93:ea:d3:9c:e0:27:2b:5f:2c:71: 65:8c:60:85:87:09:32:fc:42:b3:80:39:a4:7e:ee:b9:88:71: 06:33:4e:07:9b:08:78:c1:c3:81:fb:90:e8:bb:9a:67:29:cf: 84:09:90:02:fc:73:13:a5:d1:65:b8:5d:fd:ca:9e:1e:5c:e6: 2a:f8:57:ea:0f:bc:a6:3f:70:f2:6f:78:f5:52:99:4e:5c:4c: 9b:21:84:8f:3e:b5:1c:af:cf:fc:9a:83:f6:6a:0b:ad:33:d0: 77:08:52:b2:94:77:40:3d:74:6b:e8:3c:8c:84:fb:cc:90:57: ad:e9:49:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzx4D5zT/a1/r+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk OWIyZDNlZTItZDM3MC00MDI3LWE1YzctOTJmMWNiYWRlM2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvRYJWlsCcTda3Tb8SQkMz1zhLeMt+JdS22N 1yK+Tnnk4gnBLmWpEiYTFhqK0vzINqjK9NNfAaXiqq14s870UIiM8sktXN085v9J +1WBe7vUHkEPp3ElAFbcr9NdW6bl1kAa184hRXrBVfklt7SgY/U69psN+GbkYqMk 1qEO7pklVWk1BMpOi7laRNIsE5AV9hxM04PYKw2gY3qkxDBzenrz16W9zHIBCMVk oZCvMK/o4EM2Xv3hKCvppQblzw5CPQVD6GPslHaom4Y4Q9YMpWLHZjG4nD+tNeOr TgwxykEHJIXkUL33SjvJ4SAa3i0uU2sJNBBNtjERVdQf3e6PBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObigkz9WPygrYoMVlM/4L/7ZngZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvODVlNmFkZWUtYjM4OS0z ZGM3LThkMzQtNmVmNGJjMmQ5ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRa3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBxi7LcXrPJlm2AmkwuTJXepYo7mKbCyyFiaAb7FrqmyLjSGTw4A+EL 36K2GpMSbR/e0q6pwTsXEkP0Uy8DAxxxNXCf3rRo7smOypzqi5/75pcfH78mAu3q NpQWLdHVS6MJ21Lnl0VxfMWN0/TE26NQMidIM4fm7HFhMghJWy1Dfiqqisexk+rT nOAnK18scWWMYIWHCTL8QrOAOaR+7rmIcQYzTgebCHjBw4H7kOi7mmcpz4QJkAL8 cxOl0WW4Xf3Knh5c5ir4V+oPvKY/cPJvePVSmU5cTJshhI8+tRyvz/yag/ZqC60z 0HcIUrKUd0A9dGvoPIyE+8yQV63pSaM= -----END CERTIFICATE-----Generated at Mon Apr 28 07:17:41 2025 by rpki-client