$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa File: 35299397-9412-3901-bf6b-dd76cae9cadb.roa (raw, json) Hash identifier: lKMGep6yzpaxez3oJ2QZnNCOXPz3u1UWdK72DRE9ntg= Subject key identifier: 02:8F:F2:68:D5:2C:80:F0:1F:2E:58:59:64:C9:BD:6A:C4:BC:72:66 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F432858492CB20A94AC64403B15800A80 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 11260 IP address blocks: 173.252.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:0a:94:ac:64:40:3b:15:80:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=c65cac13-78e4-48c2-a4b4-f3be73e3affb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:20:7d:20:39:56:ac:f2:11:a3:ba:8c:1f:25: 5b:af:83:f9:60:0a:12:b5:ca:51:a6:33:b3:f0:d8: 23:eb:a1:17:15:99:36:19:82:60:f2:ee:71:d0:df: 64:d0:37:a6:b8:f7:dc:b8:6a:99:94:99:1a:6c:c7: 90:31:34:c4:c5:51:eb:e3:56:40:fd:c0:a5:16:b9: f2:ca:2d:08:d4:59:51:b6:33:41:bc:25:90:fc:bf: bc:72:74:6e:4b:5a:52:8b:1f:64:60:0b:04:a1:4e: 54:b5:0a:d6:50:25:b0:27:a4:ae:74:df:c2:aa:e2: 49:71:b9:95:83:cc:09:9d:48:fa:a9:3c:f3:1c:7b: 61:6c:8c:cc:26:e5:55:16:2d:20:bb:13:32:80:51: 1f:4f:ef:fe:92:25:ee:21:23:98:72:cb:1a:a7:2c: 95:88:c6:4c:24:25:3f:9c:f8:9a:7c:d4:da:9e:c7: b6:26:87:8a:41:1c:d9:1e:c3:5a:96:09:5c:5a:0c: 9e:48:bb:fb:56:07:47:5c:c2:ae:fe:00:c7:85:9e: 2f:fa:0c:7c:df:88:98:b8:32:80:a4:0c:95:fa:c0: 6b:da:25:b7:66:20:f1:1d:92:e2:0a:d1:c7:29:07: e4:f3:9a:5d:c9:fe:64:02:46:e2:5d:a8:58:ee:aa: d4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8F:F2:68:D5:2C:80:F0:1F:2E:58:59:64:C9:BD:6A:C4:BC:72:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 173.252.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5b:e1:98:79:b0:41:32:42:16:c9:ba:76:07:58:1e:cb:f6: eb:cc:fe:9c:8a:b1:ab:6f:0d:3a:31:c8:89:39:28:e4:a2:87: 75:04:89:ec:87:c5:e8:e9:a2:92:1f:00:ec:3b:40:85:fd:14: 3c:46:fd:a3:09:c9:1f:ee:48:a9:49:0a:df:94:9a:1f:eb:2c: a7:30:61:43:4a:e7:e1:27:59:1e:bd:8d:51:30:c6:cc:f5:7c: 92:3f:67:50:1d:0a:bf:36:2c:8d:bb:58:d4:b5:93:63:3f:a7: fb:f3:0b:05:1d:8c:fb:60:15:1c:83:28:93:72:e6:64:39:c9: 82:f2:30:2a:46:df:64:3e:29:a2:fa:f3:bb:bf:80:df:1d:d0: 72:82:2b:e8:46:80:0a:ab:35:9f:98:10:52:6e:0c:2c:a4:1d: 05:01:33:05:0b:91:ef:43:81:ea:f8:b2:77:dc:01:75:13:0c: 92:af:c0:14:ec:76:47:ba:b2:b4:c8:02:12:4b:27:d2:80:ee: 81:96:b9:f2:f8:b3:9e:1f:e7:6c:b9:81:00:5c:e5:8b:59:e5: 70:ae:d6:49:07:7e:9e:13:2a:77:ec:36:e9:97:58:b3:02:80: ba:72:25:50:5f:7d:ea:42:8d:39:cb:6d:7d:8e:6c:e1:ea:f1: a9:dc:af:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgqUrGRAOxWACoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YzY1Y2FjMTMtNzhlNC00OGMyLWE0YjQtZjNiZTczZTNhZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iB9IDlWrPIRo7qMHyVbr4P5YAoStcpRpjOz 8Ngj66EXFZk2GYJg8u5x0N9k0DemuPfcuGqZlJkabMeQMTTExVHr41ZA/cClFrny yi0I1FlRtjNBvCWQ/L+8cnRuS1pSix9kYAsEoU5UtQrWUCWwJ6SudN/CquJJcbmV g8wJnUj6qTzzHHthbIzMJuVVFi0guxMygFEfT+/+kiXuISOYcssapyyViMZMJCU/ nPiafNTanse2JoeKQRzZHsNalglcWgyeSLv7VgdHXMKu/gDHhZ4v+gx834iYuDKA pAyV+sBr2iW3ZiDxHZLiCtHHKQfk85pdyf5kAkbiXahY7qrUhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKP8mjVLIDwHy5YWWTJvWrEvHJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMzUyOTkzOTctOTQxMi0z OTAxLWJmNmItZGQ3NmNhZTljYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhb4Zh5sEEyQhbJunYHWB7L9uvM/pyKsatvDToxyIk5KOSih3UEieyH xejpopIfAOw7QIX9FDxG/aMJyR/uSKlJCt+Umh/rLKcwYUNK5+EnWR69jVEwxsz1 fJI/Z1AdCr82LI27WNS1k2M/p/vzCwUdjPtgFRyDKJNy5mQ5yYLyMCpG32Q+KaL6 87u/gN8d0HKCK+hGgAqrNZ+YEFJuDCykHQUBMwULke9Dger4snfcAXUTDJKvwBTs dke6srTIAhJLJ9KA7oGWufL4s54f52y5gQBc5YtZ5XCu1kkHfp4TKnfsNumXWLMC gLpyJVBffepCjTnLbX2ObOHq8ancrzI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:50:05 2025 by rpki-client