$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa File: edb4852e-2acb-3ef9-b789-dceddea23eee.roa (raw, json) Hash identifier: YcYDGmrFQysdhOkVTdx4ONJHlTC6/zEoKTpKKINFOAo= Subject key identifier: 4B:91:BE:8F:56:95:49:C0:30:33:A3:13:13:92:D3:32:8B:6E:B6:3F Certificate issuer: /CN=69ae5b34-c59f-40db-9452-6e21ecb81731 Certificate serial: 010D0C9F43285848F926B0DB420C0600B95A2A20 Authority key identifier: 08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 32748 IP address blocks: 208.66.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:b0:db:42:0c:06:00:b9:5a:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ae5b34-c59f-40db-9452-6e21ecb81731 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a90c08c5-d37a-40f9-b984-b74afb505d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:37:b4:f3:a7:c3:a1:9c:fb:f3:f4:9d:0f: cf:76:b3:24:dc:bd:d8:46:bf:0e:05:9c:8a:00:ca: d4:31:2f:b8:d2:9d:f8:77:05:96:7a:73:a3:6a:c5: 21:4a:61:82:12:81:57:75:28:45:bb:fd:0a:fe:f2: 0b:ba:cd:a8:a7:14:09:7a:92:8b:30:df:ab:64:de: c1:b0:0e:d1:09:2e:0e:c9:55:64:45:71:48:02:e8: 96:a5:4d:d9:86:d9:3d:cd:64:bd:55:a6:6f:de:90: 09:c0:4a:69:cb:b6:28:c2:91:ae:ad:fd:11:8e:7b: 0c:45:6a:53:90:61:c9:cd:30:9b:1e:30:5e:6c:10: 86:4b:bd:42:1f:a3:57:c5:94:97:46:96:bf:1b:92: 74:5a:b0:b6:83:77:ed:f3:fc:5c:40:25:f8:b6:ab: 5f:93:d3:d0:e6:30:3d:96:d5:97:24:f3:75:d6:1f: a4:b1:2f:11:24:ad:ac:cc:63:82:08:18:19:01:c9: 8c:ce:f3:50:a3:fe:cb:eb:3d:ae:80:2a:bc:05:ad: 79:15:2a:c8:16:04:58:c3:28:eb:21:e0:53:4e:44: e7:2c:ba:07:59:f1:72:b9:ad:bd:d7:0a:1f:d4:cb: 6c:3b:c4:51:29:4d:28:f8:a4:7d:e8:5f:19:15:e3: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:91:BE:8F:56:95:49:C0:30:33:A3:13:13:92:D3:32:8B:6E:B6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl X509v3 Authority Key Identifier: keyid:08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer sbgp-ipAddrBlock: critical IPv4: 208.66.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2b:2b:f0:ae:a0:3c:da:c4:3d:a3:e0:7f:fc:d9:53:ef:6c: e2:65:73:9d:9e:96:ba:27:41:b7:ff:8e:f4:d0:59:af:b0:65: 05:34:e9:68:bc:64:38:f2:f9:be:58:5d:d2:96:99:12:37:6a: dc:7d:1d:dd:e8:17:83:10:ac:0f:8b:e8:20:77:0a:5e:01:97: cc:e5:e5:5d:bf:6d:56:bb:71:63:4c:db:a8:93:59:b5:8c:f5: 3a:21:79:56:75:c0:ee:7a:21:fd:64:11:70:47:04:48:cc:8b: 4a:23:c7:ba:39:91:01:69:5c:fe:cf:1e:49:07:bd:ce:ae:65: 27:7d:8f:8d:58:f4:f9:fd:71:5f:a0:4f:f8:24:5e:5d:32:97: 35:0d:fa:d3:d3:73:c4:11:29:23:c7:c5:27:c1:60:ec:5d:da: ff:21:98:4b:11:d9:44:0c:3d:60:1c:42:7a:5a:97:2b:11:48: d6:d2:6b:32:59:bd:d1:c8:db:b2:2a:f3:42:35:8a:2f:b4:ae: b2:51:e9:89:60:40:f7:5e:36:55:ef:08:88:81:94:a2:34:95: d2:89:c6:6e:14:e3:b8:ab:e9:41:ac:f3:45:17:bc:08:a0:e8: 0e:49:2c:43:5b:9e:d1:00:8c:6d:af:1b:fd:af:e6:6f:de:f1: 66:95:52:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrDbQgwGALlaKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhZTViMzQtYzU5Zi00MGRiLTk0NTItNmUyMWVjYjgx NzMxMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTkwYzA4YzUtZDM3YS00MGY5LWI5ODQtYjc0YWZiNTA1ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEQ3tPOnw6Gc+/P0nQ/PdrMk3L3YRr8OBZyK AMrUMS+40p34dwWWenOjasUhSmGCEoFXdShFu/0K/vILus2opxQJepKLMN+rZN7B sA7RCS4OyVVkRXFIAuiWpU3Zhtk9zWS9VaZv3pAJwEppy7YowpGurf0RjnsMRWpT kGHJzTCbHjBebBCGS71CH6NXxZSXRpa/G5J0WrC2g3ft8/xcQCX4tqtfk9PQ5jA9 ltWXJPN11h+ksS8RJK2szGOCCBgZAcmMzvNQo/7L6z2ugCq8Ba15FSrIFgRYwyjr IeBTTkTnLLoHWfFyua291wof1MtsO8RRKU0o+KR96F8ZFeOzTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuRvo9WlUnAMDOjExOS0zKLbrY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OWFl NWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIxZWNiODE3MzEvZWRiNDg1MmUtMmFjYi0z ZWY5LWI3ODktZGNlZGRlYTIzZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjlhZTViMzQtYzU5Zi00MGRiLTk0 NTItNmUyMWVjYjgxNzMxLzY5YWU1YjM0LWM1OWYtNDBkYi05NDUyLTZlMjFlY2I4 MTczMS5jcmwwHwYDVR0jBBgwFoAUCNptqRxEgPAchKfrXaTD8Nh1GjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82OWFlNWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIx ZWNiODE3MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8rK/CuoDzaxD2j4H/82VPvbOJlc52elronQbf/jvTQWa+wZQU06Wi8 ZDjy+b5YXdKWmRI3atx9Hd3oF4MQrA+L6CB3Cl4Bl8zl5V2/bVa7cWNM26iTWbWM 9ToheVZ1wO56If1kEXBHBEjMi0ojx7o5kQFpXP7PHkkHvc6uZSd9j41Y9Pn9cV+g T/gkXl0ylzUN+tPTc8QRKSPHxSfBYOxd2v8hmEsR2UQMPWAcQnpalysRSNbSazJZ vdHI27Iq80I1ii+0rrJR6YlgQPdeNlXvCIiBlKI0ldKJxm4U47ir6UGs80UXvAig 6A5JLENbntEAjG2vG/2v5m/e8WaVUiE= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:59 2025 by rpki-client