$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa File: bd85e14a-a941-3190-81ec-819309f5fa0e.roa (raw, json) Hash identifier: fm7KUJ/Ah/HeUPU00LC6JY3H3r0QbWaw8CoDtyG1zdg= Subject key identifier: EE:36:3E:2D:60:BF:1C:2C:78:B6:E9:12:B4:1F:D8:12:C6:EE:3A:0F Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F43285849955F118E746D85BAE26A2800 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 69.67.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:11:8e:74:6d:85:ba:e2:6a:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=b885703d-2961-49fe-a7f7-04e570d9f737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:3e:ff:4d:88:2d:b9:f6:06:40:6f:c9:d6: 01:11:b0:54:ae:7d:74:ac:d1:d1:21:0a:3c:4e:ec: f7:e7:b3:47:90:80:bb:ff:c9:22:57:d8:49:c7:a6: 44:f2:f9:ca:d4:9a:b7:d4:95:46:32:7f:3f:45:5d: bb:74:77:fa:78:8e:4e:6b:48:57:42:23:21:aa:3a: 9d:6b:e8:28:da:2b:e3:e0:98:88:95:7d:bb:90:da: 73:c1:25:e1:32:35:09:88:f4:e4:62:ec:8e:a6:22: 56:46:d5:b1:77:86:c7:33:e8:d5:c8:49:95:9d:82: 24:1f:c8:41:e6:56:bb:f5:c2:07:f6:ee:09:6c:4a: ba:87:06:9b:9f:62:97:4b:c6:64:02:ad:58:b6:70: d7:da:fc:a2:10:53:4d:37:f3:e0:80:87:45:4a:df: f9:3e:30:10:5e:fe:70:4e:c0:dd:6a:c3:92:0d:ea: 75:26:8a:77:ef:ba:43:91:63:3e:07:41:b7:f9:65: db:03:5d:0f:c0:22:3d:46:50:ab:b7:4c:8f:c3:2a: a5:89:52:8c:35:cb:81:78:13:c8:5d:85:aa:32:95: 8b:49:0a:92:15:d2:01:8b:66:78:5d:d5:29:20:5f: 38:70:a6:a4:96:56:77:99:f5:21:a9:a3:e9:9d:c1: dc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:36:3E:2D:60:BF:1C:2C:78:B6:E9:12:B4:1F:D8:12:C6:EE:3A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 69.67.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:10:6f:91:a2:9d:a4:36:d1:b0:1b:08:3d:d2:53:53:0d:40: 26:84:82:8c:5e:bf:cc:1d:af:23:84:37:4b:26:17:e7:3d:2a: 48:17:55:d3:33:b1:76:95:30:d2:37:a2:c5:ba:ab:2e:96:0b: 89:ba:8b:b3:97:8f:bf:73:d7:c6:75:43:50:0e:b3:70:b0:80: d8:fe:26:63:b8:13:7f:1f:01:a9:7b:ba:2b:17:5d:66:5a:0a: 88:96:1f:55:b3:cc:84:4a:4e:bc:3c:df:05:d4:a4:10:2e:c4: 97:6e:e0:93:d9:e1:24:4b:51:e3:2b:17:7d:59:86:1b:32:bb: 1a:85:b8:2d:2b:f2:c6:16:70:dc:13:a4:35:4d:51:1b:88:80: 8a:9e:41:c0:03:6b:d1:a7:76:6c:b9:4d:e8:35:39:94:1c:e7: 3d:f3:75:12:2f:04:3d:05:6b:42:42:01:d4:41:b9:8f:1d:3c: c2:85:6c:43:61:40:b1:4a:c1:85:3f:28:e9:41:34:e7:d6:67: 0f:2f:2a:fd:da:5d:d7:79:02:dc:bc:4c:fa:58:1a:b9:6d:a8: 46:05:6c:6d:8d:7c:b6:23:cd:51:eb:8d:80:6e:2f:ec:e3:03: 5a:17:30:89:16:60:d5:6c:1f:64:6a:27:42:46:9e:23:aa:4d: bc:d0:4f:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxGOdG2FuuJqKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk Yjg4NTcwM2QtMjk2MS00OWZlLWE3ZjctMDRlNTcwZDlmNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqo+/02ILbn2BkBvydYBEbBUrn10rNHRIQo8 Tuz357NHkIC7/8kiV9hJx6ZE8vnK1Jq31JVGMn8/RV27dHf6eI5Oa0hXQiMhqjqd a+go2ivj4JiIlX27kNpzwSXhMjUJiPTkYuyOpiJWRtWxd4bHM+jVyEmVnYIkH8hB 5la79cIH9u4JbEq6hwabn2KXS8ZkAq1YtnDX2vyiEFNNN/PggIdFSt/5PjAQXv5w TsDdasOSDep1Jop377pDkWM+B0G3+WXbA10PwCI9RlCrt0yPwyqliVKMNcuBeBPI XYWqMpWLSQqSFdIBi2Z4XdUpIF84cKakllZ3mfUhqaPpncHc1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO42Pi1gvxwseLbpErQf2BLG7joPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvYmQ4NWUxNGEtYTk0MS0z MTkwLTgxZWMtODE5MzA5ZjVmYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoQb5GinaQ20bAbCD3SU1MNQCaEgoxev8wdryOEN0smF+c9KkgXVdMz sXaVMNI3osW6qy6WC4m6i7OXj79z18Z1Q1AOs3CwgNj+JmO4E38fAal7uisXXWZa CoiWH1WzzIRKTrw83wXUpBAuxJdu4JPZ4SRLUeMrF31ZhhsyuxqFuC0r8sYWcNwT pDVNURuIgIqeQcADa9Gndmy5Teg1OZQc5z3zdRIvBD0Fa0JCAdRBuY8dPMKFbENh QLFKwYU/KOlBNOfWZw8vKv3aXdd5Aty8TPpYGrltqEYFbG2NfLYjzVHrjYBuL+zj A1oXMIkWYNVsH2RqJ0JGniOqTbzQT4c= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:01 2025 by rpki-client