$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa File: 558b5f3a-e791-3748-9943-fce0204ed7a7.roa (raw, json) Hash identifier: FAJ3168RGkOevdyMOQxsnw1HRVZloyzK9uIKifqUKyc= Subject key identifier: 7C:CC:C6:C2:DD:0C:90:FB:69:E6:AE:C5:1A:49:99:1D:AE:0D:F7:2A Certificate issuer: /CN=410cdbf9-164e-4f04-8897-d002dc917140 Certificate serial: 010D0C9F432858495C243C4CE247460935082935 Authority key identifier: 1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 393717 IP address blocks: 192.69.65.69/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3c:4c:e2:47:46:09:35:08:29:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=410cdbf9-164e-4f04-8897-d002dc917140 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=3f6df8d9-e945-46bc-ba77-932a08e61d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:ba:b3:cc:72:d4:e9:ad:c7:cc:22:0d:37: be:17:33:96:23:a3:e5:ca:7c:17:5c:a5:a2:2d:35: 7b:9d:7a:b4:80:26:2f:4e:15:3d:68:6b:93:5b:fb: 47:48:26:b9:4a:1c:14:4a:f1:4b:85:f0:c3:29:12: c9:03:0f:6e:5c:39:3a:ca:c7:25:6d:eb:a5:e9:41: 79:7e:fc:51:6e:02:39:8e:17:ce:16:21:ea:5c:c8: 07:dd:9b:0e:98:d5:94:f4:b8:38:1e:c2:e1:a4:ad: c6:2d:00:d2:d1:8d:ee:fc:33:7b:02:d0:f2:da:ae: be:39:30:37:05:37:00:64:42:8f:64:eb:b3:45:de: a3:95:e6:f9:df:a0:6b:e9:e3:b6:fd:e9:5a:9a:06: d5:64:a7:bb:fe:df:94:23:c3:8f:dc:5a:2f:7e:bd: 07:71:96:11:da:5d:c8:5a:b1:ee:e3:c0:60:0b:1d: fc:f1:82:de:cf:33:48:fd:cb:64:1e:27:a3:c4:8e: 2a:77:9d:74:6d:04:22:e5:c1:e6:90:32:c1:6a:65: 04:b9:d0:4b:48:f7:80:1a:5d:70:c4:39:c7:9d:b6: 0b:88:23:b0:a4:ce:77:19:c2:cf:5d:f0:70:dd:65: ad:78:c3:ac:5e:ba:d8:6b:3e:14:fd:35:b6:95:58: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:C6:C2:DD:0C:90:FB:69:E6:AE:C5:1A:49:99:1D:AE:0D:F7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.crl X509v3 Authority Key Identifier: keyid:1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer sbgp-ipAddrBlock: critical IPv4: 192.69.65.69/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a6:15:df:5c:a4:49:dc:0f:ba:2e:fe:56:ec:76:e9:c3:5b: 88:1a:c2:29:a8:b4:1b:e6:ea:0c:86:12:5b:f6:22:3a:9a:d4: 63:67:0a:4d:0d:ef:5a:5c:eb:9f:18:c7:88:cc:70:91:b7:b6: d2:a4:3f:e5:4a:1b:0e:9b:f4:3e:f1:2b:dc:b8:8f:6d:ca:d4: 29:ba:2b:d4:e8:40:c5:9b:3e:4e:6c:52:de:0c:46:e0:64:5d: 4d:e1:32:a1:28:5d:23:71:ed:f8:cf:55:4f:38:8b:c0:47:a4: 80:87:a0:94:6f:f2:19:1d:60:9c:e1:23:e9:ab:62:58:2a:7c: 6e:f9:ee:f4:6a:13:ae:44:1b:dd:bd:68:96:67:70:bb:44:35: fe:6f:89:08:6e:ee:a5:2d:2f:66:6e:9f:71:d2:05:04:fb:b7: b0:03:98:37:f8:ca:a1:79:24:af:5c:3d:ce:1c:f0:63:38:4f: d1:eb:95:38:7d:c6:bc:19:13:28:5c:b8:28:bc:5b:04:a5:91: 8d:bd:7c:ed:c0:ae:c5:08:c6:65:5e:9b:0d:41:2e:24:38:d7: 48:bd:33:cc:9b:cb:54:69:b7:64:ec:f3:cd:9a:eb:fc:46:56: c2:91:c1:60:41:e5:35:09:2b:f2:a8:93:d6:0d:11:e9:dc:9b: 8c:14:9c:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElcJDxM4kdGCTUIKTUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDEwY2RiZjktMTY0ZS00ZjA0LTg4OTctZDAwMmRjOTE3 MTQwMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk M2Y2ZGY4ZDktZTk0NS00NmJjLWJhNzctOTMyYTA4ZTYxZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2De6s8xy1Omtx8wiDTe+FzOWI6PlynwXXKWi LTV7nXq0gCYvThU9aGuTW/tHSCa5ShwUSvFLhfDDKRLJAw9uXDk6ysclbeul6UF5 fvxRbgI5jhfOFiHqXMgH3ZsOmNWU9Lg4HsLhpK3GLQDS0Y3u/DN7AtDy2q6+OTA3 BTcAZEKPZOuzRd6jleb536Br6eO2/elamgbVZKe7/t+UI8OP3Fovfr0HcZYR2l3I WrHu48BgCx388YLezzNI/ctkHiejxI4qd510bQQi5cHmkDLBamUEudBLSPeAGl1w xDnHnbYLiCOwpM53GcLPXfBw3WWteMOsXrrYaz4U/TW2lVgyzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHzMxsLdDJD7aeauxRpJmR2uDfcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTBj ZGJmOS0xNjRlLTRmMDQtODg5Ny1kMDAyZGM5MTcxNDAvNTU4YjVmM2EtZTc5MS0z NzQ4LTk5NDMtZmNlMDIwNGVkN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDEwY2RiZjktMTY0ZS00ZjA0LTg4 OTctZDAwMmRjOTE3MTQwLzQxMGNkYmY5LTE2NGUtNGYwNC04ODk3LWQwMDJkYzkx NzE0MC5jcmwwHwYDVR0jBBgwFoAUH4s7tLSzcA9J7wdjCNGir8W43pQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MTBjZGJmOS0xNjRlLTRmMDQtODg5Ny1kMDAy ZGM5MTcxNDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwEVBRTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJphXfXKRJ3A+6Lv5W7Hbpw1uIGsIpqLQb5uoMhhJb9iI6mtRjZwpN De9aXOufGMeIzHCRt7bSpD/lShsOm/Q+8SvcuI9tytQpuivU6EDFmz5ObFLeDEbg ZF1N4TKhKF0jce34z1VPOIvAR6SAh6CUb/IZHWCc4SPpq2JYKnxu+e70ahOuRBvd vWiWZ3C7RDX+b4kIbu6lLS9mbp9x0gUE+7ewA5g3+MqheSSvXD3OHPBjOE/R65U4 fca8GRMoXLgovFsEpZGNvXztwK7FCMZlXpsNQS4kONdIvTPMm8tUabdk7PPNmuv8 RlbCkcFgQeU1CSvyqJPWDRHp3JuMFJyT -----END CERTIFICATE-----Generated at Tue Apr 29 11:32:07 2025 by rpki-client