$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa File: a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa (raw, json) Hash identifier: a5CuLM446BZOHu7ydORKq+Kf4TxlrCa7cBpTF/LykPA= Subject key identifier: 69:14:6C:9B:25:D4:2E:F3:E0:0E:12:7C:F1:F5:E2:06:9D:45:2F:B6 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584981D452B35CBE58E4B38763E0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 6402 IP address blocks: 69.176.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:52:b3:5c:be:58:e4:b3:87:63:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=a6c59f99-529a-4194-8612-97b728a02061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:16:35:80:be:be:d4:69:fb:bd:d4:01:56: ae:f0:4e:0a:ca:16:07:bb:c3:b2:c2:61:53:23:29: 6a:d2:94:e4:48:77:c0:40:ee:2d:fc:41:6a:11:e1: 05:6d:57:12:fe:4c:ad:e0:9a:81:d4:19:98:b6:2b: d5:86:a9:7a:00:17:4b:cf:68:a5:6e:4b:44:93:bf: 7b:91:25:7f:e1:52:4f:b6:0c:fd:58:30:07:92:ff: 93:1e:57:fd:b3:b8:71:df:96:ab:bb:80:c9:42:08: 77:45:a7:66:62:84:10:ca:45:83:9a:da:75:f0:6a: 20:15:7a:c7:c0:e4:4e:27:7a:b3:31:41:93:fb:18: 67:1d:b0:ec:5a:63:36:06:3a:81:91:af:87:b0:b6: db:42:a6:b5:aa:45:62:17:71:29:38:a7:77:59:75: 44:47:06:0d:d5:a2:03:d0:ae:f1:dc:03:f9:be:83: 5c:9a:5a:dc:ad:9b:23:09:5e:6d:23:86:4a:53:f2: a0:3d:90:d6:24:41:09:30:bb:35:ac:ae:c1:27:2c: dc:a7:1e:04:e0:e6:88:a3:c5:c1:bd:43:de:e8:76: bd:f5:ce:88:4e:66:cd:51:a5:49:07:59:35:b4:c6: 45:84:0b:ab:00:74:29:8f:d8:ae:15:bb:cb:34:9f: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:14:6C:9B:25:D4:2E:F3:E0:0E:12:7C:F1:F5:E2:06:9D:45:2F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a1e82ba1-1e27-3adb-b1e7-e24032654fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:97:60:20:9a:93:d7:4a:58:7f:dd:9d:6e:20:26:27:c4:6d: a6:d6:e2:12:75:3d:ab:79:58:05:7e:0f:da:02:e5:65:91:cc: 86:95:bc:04:31:32:31:dc:b8:75:37:d4:8c:e6:b4:b6:24:60: b8:ea:3a:04:b2:cb:de:8b:1e:f5:56:d6:60:0b:13:8b:cb:5d: b3:ca:0c:ae:84:96:ae:c6:69:05:f5:e0:63:e7:4a:f1:da:62: 8a:1d:2d:ca:86:64:c2:eb:29:e7:01:ce:70:eb:32:05:4e:42: a9:a3:b0:5f:96:97:1e:94:81:ee:20:62:22:7e:db:47:90:a5: f5:b1:73:ec:21:39:da:8c:5b:7b:9a:22:47:51:36:ea:6e:5e: b3:39:ac:57:41:83:1f:43:6e:1e:da:44:d6:7c:d6:be:ba:42: fd:f2:ff:6b:e6:e1:be:0e:cf:11:7e:0f:52:2d:dc:37:59:f2: 4b:1f:56:7f:6f:f6:5a:11:b6:68:40:49:d9:89:d7:f5:a9:f0: 1c:c6:04:76:a4:16:d2:8a:d7:b7:e2:56:83:04:e9:ee:5d:fd: 81:6a:4b:fa:d2:5f:93:59:af:fd:8b:40:f1:bd:fb:2f:1d:78: 1a:f9:33:d4:c7:65:a3:7a:f3:69:cc:1d:ca:cc:3c:d7:76:8c: b7:47:fc:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FKzXL5Y5LOHY+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk YTZjNTlmOTktNTI5YS00MTk0LTg2MTItOTdiNzI4YTAyMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjsWNYC+vtRp+73UAVau8E4KyhYHu8OywmFT Iylq0pTkSHfAQO4t/EFqEeEFbVcS/kyt4JqB1BmYtivVhql6ABdLz2ilbktEk797 kSV/4VJPtgz9WDAHkv+THlf9s7hx35aru4DJQgh3RadmYoQQykWDmtp18GogFXrH wOROJ3qzMUGT+xhnHbDsWmM2BjqBka+HsLbbQqa1qkViF3EpOKd3WXVERwYN1aID 0K7x3AP5voNcmlrcrZsjCV5tI4ZKU/KgPZDWJEEJMLs1rK7BJyzcpx4E4OaIo8XB vUPe6Ha99c6ITmbNUaVJB1k1tMZFhAurAHQpj9iuFbvLNJ8YWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkUbJsl1C7z4A4SfPH14gadRS+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYTFlODJiYTEtMWUyNy0z YWRiLWIxZTctZTI0MDMyNjU0ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGXYCCak9dKWH/dnW4gJifEbabW4hJ1Pat5WAV+D9oC5WWRzIaVvAQx MjHcuHU31IzmtLYkYLjqOgSyy96LHvVW1mALE4vLXbPKDK6Elq7GaQX14GPnSvHa YoodLcqGZMLrKecBznDrMgVOQqmjsF+Wlx6Uge4gYiJ+20eQpfWxc+whOdqMW3ua IkdRNupuXrM5rFdBgx9Dbh7aRNZ81r66Qv3y/2vm4b4OzxF+D1It3DdZ8ksfVn9v 9loRtmhASdmJ1/Wp8BzGBHakFtKK17fiVoME6e5d/YFqS/rSX5NZr/2LQPG9+y8d eBr5M9THZaN682nMHcrMPNd2jLdH/GU= -----END CERTIFICATE-----Generated at Sun Apr 27 09:03:15 2025 by rpki-client