$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa File: 7effcfd6-71db-3402-9537-a1125bf61d60.roa (raw, json) Hash identifier: oRtJoRNDHbqnYh7hV1xsJi+WWkM9L7oEzH9uHdJl0lU= Subject key identifier: EC:2B:3F:AB:06:E2:28:E8:9C:EE:09:0D:09:6F:EF:0F:0D:92:CB:69 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285849AA4F6AA475D2D2C442E00A00 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 55293 IP address blocks: 69.48.168.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6a:a4:75:d2:d2:c4:42:e0:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=0fd68db0-5e53-4101-9d77-7126dfbe90ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:59:60:63:fb:bb:41:35:b1:cb:5e:dc:e6: e8:af:4e:cc:cc:df:37:82:62:75:5b:f7:42:83:54: c8:4c:ab:d4:b9:7b:62:8e:68:f3:30:fa:1c:89:ab: 09:85:52:e0:30:6f:c2:40:c3:ed:41:17:2a:eb:6f: df:c0:59:b8:33:ba:79:6d:85:0f:44:ee:bd:1f:f5: ae:20:20:c5:ac:32:95:40:86:63:a6:f1:37:51:43: f1:b7:e1:64:25:06:c9:59:a7:67:68:65:03:80:81: dd:79:b3:35:dc:dd:1c:fa:90:b3:90:6c:ce:16:f4: 08:17:02:7c:b6:ab:8f:50:a2:7d:d9:47:af:bc:15: 99:10:57:92:a0:b1:38:e1:53:1a:f0:ad:c3:97:92: 14:28:22:aa:f6:fb:b1:79:7d:84:56:f3:c6:75:86: 80:9a:80:6d:b1:85:97:a4:b8:7c:98:18:30:39:b8: a3:8b:40:5e:a9:7e:7c:b9:02:42:fd:8d:af:ef:8f: c3:34:e0:fd:56:85:84:70:59:11:7e:c5:09:f2:37: 6e:0b:08:15:9e:42:b0:f5:ab:32:f7:92:c3:f6:76: ba:f0:ff:58:71:23:cb:ea:33:5d:0a:98:7b:25:77: 22:ee:a9:2e:8a:f0:10:db:f1:fe:1e:56:49:5a:64: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2B:3F:AB:06:E2:28:E8:9C:EE:09:0D:09:6F:EF:0F:0D:92:CB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7effcfd6-71db-3402-9537-a1125bf61d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 69.48.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ba:88:79:14:46:58:79:56:ec:10:63:73:1e:93:d2:10:b7: 43:42:1f:bf:2c:c1:f8:8d:13:a7:06:95:88:85:29:37:39:4c: e3:84:e7:fe:43:06:8b:d7:4c:1a:f3:b9:00:8e:ff:4e:03:70: 2f:47:99:11:f1:c7:10:ff:45:57:f8:f6:43:67:c3:cf:5b:24: 80:a6:93:fd:eb:58:11:13:fb:0c:e6:38:2c:f9:02:73:c1:53: a7:06:33:ff:6a:6e:5d:3b:05:20:90:f2:4f:58:1d:59:9f:fd: 1c:42:40:ce:d7:cb:04:31:a7:7c:cc:9b:c2:9a:d0:c0:86:e7: e1:7c:53:f6:6a:5f:c0:b9:c6:a9:1d:36:bf:af:b0:52:e2:92: a3:63:e4:ae:5c:32:2b:10:43:54:fa:ef:0e:97:12:f5:83:b4: 11:ee:e6:61:f1:fb:b5:5c:49:8f:bc:f6:d1:d4:6a:a2:8e:0a: 34:70:71:95:31:eb:10:a8:da:99:1a:9d:f0:9e:54:bb:da:cc: 85:4e:07:07:80:61:16:98:7d:33:dd:24:98:7a:c8:c4:76:ec: 99:0b:12:8d:1e:60:30:ba:1f:74:83:36:01:9d:45:1f:2b:af: dc:2b:0d:f9:05:0c:b7:e2:26:78:c8:9d:3f:ad:df:28:cb:4d: fb:34:aa:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2qkddLSxELgCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MGZkNjhkYjAtNWU1My00MTAxLTlkNzctNzEyNmRmYmU5MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdFZYGP7u0E1scte3Obor07MzN83gmJ1W/dC g1TITKvUuXtijmjzMPociasJhVLgMG/CQMPtQRcq62/fwFm4M7p5bYUPRO69H/Wu ICDFrDKVQIZjpvE3UUPxt+FkJQbJWadnaGUDgIHdebM13N0c+pCzkGzOFvQIFwJ8 tquPUKJ92UevvBWZEFeSoLE44VMa8K3Dl5IUKCKq9vuxeX2EVvPGdYaAmoBtsYWX pLh8mBgwObiji0BeqX58uQJC/Y2v74/DNOD9VoWEcFkRfsUJ8jduCwgVnkKw9asy 95LD9na68P9YcSPL6jNdCph7JXci7qkuivAQ2/H+HlZJWmRRmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwrP6sG4ijonO4JDQlv7w8NkstpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvN2VmZmNmZDYtNzFkYi0z NDAyLTk1MzctYTExMjViZjYxZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRTCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG6iHkURlh5VuwQY3Mek9IQt0NCH78swfiNE6cGlYiFKTc5TOOE5/5D BovXTBrzuQCO/04DcC9HmRHxxxD/RVf49kNnw89bJICmk/3rWBET+wzmOCz5AnPB U6cGM/9qbl07BSCQ8k9YHVmf/RxCQM7XywQxp3zMm8Ka0MCG5+F8U/ZqX8C5xqkd Nr+vsFLikqNj5K5cMisQQ1T67w6XEvWDtBHu5mHx+7VcSY+89tHUaqKOCjRwcZUx 6xCo2pkanfCeVLvazIVOBweAYRaYfTPdJJh6yMR27JkLEo0eYDC6H3SDNgGdRR8r r9wrDfkFDLfiJnjInT+t3yjLTfs0qmY= -----END CERTIFICATE-----Generated at Sun Apr 27 21:08:16 2025 by rpki-client