$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa File: 34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa (raw, json) Hash identifier: EHFotCqpBaHQuSVSMA4LFQddscifuzcCew5kpPNGiVI= Subject key identifier: 65:5A:45:D1:78:B1:4A:84:93:C0:0D:8F:A9:F7:CF:B9:A4:58:79:A8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858496E498763B629D83F319C2F00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 211373 IP address blocks: 69.176.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:87:63:b6:29:d8:3f:31:9c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=d556f4ce-45a3-4178-afc4-9d9ea30f82a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:72:81:26:39:c3:c6:23:eb:9a:ec:86:d1: a5:d8:35:07:89:dd:c5:0f:c7:65:0b:d1:6a:80:14: 50:fb:16:e1:e2:eb:9b:f4:7b:d2:d1:98:23:7a:79: 43:43:cd:5f:13:78:75:92:59:59:ff:22:04:83:22: 06:da:3f:0c:d7:3e:38:5e:0a:7b:1c:13:f9:42:43: 46:08:54:95:58:cc:2e:b1:dd:4a:9d:b4:e7:15:95: 31:22:60:37:c3:9f:ac:a6:bd:9d:2b:1a:06:cf:66: 7d:e8:c5:8c:54:75:c6:8e:59:fa:84:bb:1a:ef:7c: 3a:34:08:82:f3:c2:50:94:a1:2e:bf:4a:40:ca:f5: 82:43:4c:01:40:ad:4f:ac:ae:44:97:22:cc:b2:94: 30:81:93:cd:21:c9:4a:ee:43:3f:50:1e:89:25:6b: ce:b5:b9:f4:8f:99:89:11:3b:bf:97:54:b8:99:36: e7:8c:dd:a8:22:84:4e:ed:60:95:a3:44:cb:0e:f7: b6:1e:3e:6e:ff:02:f9:64:5f:54:10:a9:09:f3:ec: 38:b7:1e:43:8f:ce:5d:fe:76:58:c9:0b:ce:d2:4d: d2:23:46:55:ab:b9:ed:a9:01:3e:89:63:d6:a1:4a: 7d:12:d0:08:c3:ef:f4:e8:21:48:5b:b8:10:88:ec: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:45:D1:78:B1:4A:84:93:C0:0D:8F:A9:F7:CF:B9:A4:58:79:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5b:3f:a7:d7:7b:5e:cb:3b:f5:30:ba:1d:74:97:f2:f2:cf: 8c:1c:ec:b8:c6:51:22:e1:17:aa:42:46:01:e5:b9:43:ad:0d: 04:0f:3c:75:65:6e:b9:be:5b:15:ee:1c:d2:46:09:93:92:a6: 83:37:3e:64:0d:a7:ed:f0:61:a4:9b:51:49:bf:7c:86:59:3f: 55:1e:03:5e:b9:3b:c1:5c:70:d0:57:b6:d3:ff:82:e1:19:20: 1e:a1:10:2c:55:f3:2a:df:57:fd:c4:0e:39:b3:a3:df:3e:90: 84:74:1b:4c:4c:04:bd:81:10:fb:28:53:f3:e8:1b:8c:bd:ae: dc:a2:71:10:0b:c9:79:79:40:c6:3e:ee:5e:18:a5:3d:6e:ec: b4:44:97:b6:47:56:6f:6f:76:1e:44:f8:41:b5:0a:75:30:e3: 09:a7:9e:51:0f:2d:30:b1:d7:2b:54:db:1a:73:8e:79:42:68: 7a:08:bd:99:83:95:3a:28:26:b6:9a:17:df:45:3c:bc:09:04: a5:ef:e4:37:a5:18:6a:f9:a7:cb:f7:c0:01:cf:bd:b9:49:5e: 05:a8:0f:2b:ef:69:7f:17:00:08:a4:04:60:f9:7c:b3:6d:0a: f8:e5:16:a9:68:30:d4:45:fc:1e:28:28:ca:b2:15:6f:3c:30: 0e:7c:00:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYdjtinYPzGcLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ZDU1NmY0Y2UtNDVhMy00MTc4LWFmYzQtOWQ5ZWEzMGY4MmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7dygSY5w8Yj65rshtGl2DUHid3FD8dlC9Fq gBRQ+xbh4uub9HvS0ZgjenlDQ81fE3h1kllZ/yIEgyIG2j8M1z44Xgp7HBP5QkNG CFSVWMwusd1KnbTnFZUxImA3w5+spr2dKxoGz2Z96MWMVHXGjln6hLsa73w6NAiC 88JQlKEuv0pAyvWCQ0wBQK1PrK5ElyLMspQwgZPNIclK7kM/UB6JJWvOtbn0j5mJ ETu/l1S4mTbnjN2oIoRO7WCVo0TLDve2Hj5u/wL5ZF9UEKkJ8+w4tx5Dj85d/nZY yQvO0k3SI0ZVq7ntqQE+iWPWoUp9EtAIw+/06CFIW7gQiOxAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVaRdF4sUqEk8ANj6n3z7mkWHmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzRhM2Q4MDYtODhjNy0z ZmJjLTg5YTEtZWM3NGU5Yzc0YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdbP6fXe17LO/Uwuh10l/Lyz4wc7LjGUSLhF6pCRgHluUOtDQQPPHVl brm+WxXuHNJGCZOSpoM3PmQNp+3wYaSbUUm/fIZZP1UeA165O8FccNBXttP/guEZ IB6hECxV8yrfV/3EDjmzo98+kIR0G0xMBL2BEPsoU/PoG4y9rtyicRALyXl5QMY+ 7l4YpT1u7LREl7ZHVm9vdh5E+EG1CnUw4wmnnlEPLTCx1ytU2xpzjnlCaHoIvZmD lTooJraaF99FPLwJBKXv5DelGGr5p8v3wAHPvblJXgWoDyvvaX8XAAikBGD5fLNt CvjlFqloMNRF/B4oKMqyFW88MA58AJI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:08 2025 by rpki-client