$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa File: 8de3435f-e6ea-387d-ae03-f28b14654e4a.roa (raw, json) Hash identifier: tbbF24Y0W+AAZZF8pyOCSasu/OpZOtX18gOdbJIaw04= Subject key identifier: BB:CA:3D:F9:88:64:A0:DE:44:5B:F0:A5:62:02:AF:6F:C4:88:F6:09 Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Certificate serial: 010D0C9F432858495C2436F5BAAB54B093571300 Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 401307 IP address blocks: 69.58.58.0/23 maxlen: 24 69.58.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:36:f5:ba:ab:54:b0:93:57:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=28419a96-8bdc-4916-8532-952fbb9906ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:71:b2:6d:07:2d:e6:a1:5d:42:ca:09:cd: 19:43:40:58:ab:fe:9f:cd:86:d3:4d:72:e2:3e:8e: 6d:74:7b:2c:08:68:67:b0:bd:cb:3a:5e:fd:f1:20: bf:c8:0b:94:c6:1e:f3:91:7c:6d:31:b9:59:47:ec: 08:f1:08:f7:ad:57:b1:e8:3a:88:e4:30:84:73:82: 24:03:ae:60:fb:26:62:36:63:61:b0:75:c7:80:4a: 7e:e4:e9:7a:dc:fc:ef:13:44:e3:9e:a0:e2:28:d3: f3:57:bc:44:23:12:e7:af:f1:6d:b5:dd:51:1f:ed: 9f:3f:54:ea:cc:98:61:9b:f8:39:22:b8:b5:4f:5b: 7b:66:57:cf:81:e1:3f:6f:9f:cd:c4:1c:5b:f1:af: 44:dc:e9:09:55:bf:2b:98:37:6c:43:a7:c3:5d:4c: cd:2b:d3:8f:ca:3a:a3:44:ef:21:ad:a5:c8:29:fa: 60:42:5a:db:e8:3b:f1:05:39:18:1e:22:17:14:a7: 24:ae:26:08:bb:ab:8b:02:4b:16:47:1e:bd:d7:51: fe:b4:e0:1f:03:92:03:71:50:b6:7b:48:7f:71:71: 56:50:03:b7:e3:00:74:fc:ad:72:4d:3d:49:3b:2f: 4d:5c:fd:d2:a0:d7:34:48:14:f5:3a:52:df:1a:b1: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:3D:F9:88:64:A0:DE:44:5B:F0:A5:62:02:AF:6F:C4:88:F6:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl X509v3 Authority Key Identifier: keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer sbgp-ipAddrBlock: critical IPv4: 69.58.58.0-69.58.60.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:34:d1:f7:81:dc:1b:3d:b3:e4:fa:90:1f:30:3a:fe:06:f9: 29:09:35:26:13:bd:bb:18:7d:fc:c0:5d:fa:51:41:a7:9d:b5: 14:6f:a7:1f:7d:47:eb:7c:4b:ce:d4:52:7d:fa:52:9a:10:25: 11:09:2b:a3:42:bc:96:52:76:1e:bd:61:fd:22:8c:41:f9:b2: 05:91:5e:dc:1e:95:63:b0:5c:07:ce:97:96:1b:d0:ce:c8:83: 76:85:9e:3f:43:14:78:0f:2f:d0:4e:d5:9b:54:64:03:71:3c: 35:3e:87:c1:db:7d:eb:1d:d6:ef:07:f2:76:ed:c8:4e:dc:5c: bd:fd:6d:f1:97:a9:2e:21:e7:3a:2a:46:d1:fd:85:2a:93:da: 85:ff:6a:a8:4b:59:f9:12:44:03:c2:dc:7e:3e:07:97:39:66: 06:fe:b8:7d:a8:e8:9f:d2:70:6d:89:0b:6e:03:5a:12:93:be: bd:85:4a:56:89:ae:99:0e:b9:3b:21:8d:74:a3:61:55:98:75: 70:a0:cb:8c:18:65:f7:bf:0c:80:63:e4:e8:93:9d:e3:4b:64: 86:51:75:c3:da:33:cd:d9:3e:c7:b6:6d:e8:35:89:d5:41:ea: 43:0e:a6:6b:a9:23:e4:2e:8e:6b:b3:38:34:59:d7:b0:bd:b7: 11:73:de:7b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElcJDb1uqtUsJNXEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0 NmZmMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk Mjg0MTlhOTYtOGJkYy00OTE2LTg1MzItOTUyZmJiOTkwNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Opxsm0HLeahXULKCc0ZQ0BYq/6fzYbTTXLi Po5tdHssCGhnsL3LOl798SC/yAuUxh7zkXxtMblZR+wI8Qj3rVex6DqI5DCEc4Ik A65g+yZiNmNhsHXHgEp+5Ol63PzvE0TjnqDiKNPzV7xEIxLnr/Fttd1RH+2fP1Tq zJhhm/g5Iri1T1t7ZlfPgeE/b5/NxBxb8a9E3OkJVb8rmDdsQ6fDXUzNK9OPyjqj RO8hraXIKfpgQlrb6DvxBTkYHiIXFKckriYIu6uLAksWRx6911H+tOAfA5IDcVC2 e0h/cXFWUAO34wB0/K1yTT1JOy9NXP3SoNc0SBT1OlLfGrGAuQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLvKPfmIZKDeRFvwpWICr2/EiPYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5 NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvOGRlMzQzNWYtZTZlYS0z ODdkLWFlMDMtZjI4YjE0NjU0ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0 NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2 N2ZmNDQ2ZmYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFFOjoD BABFOjwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAajTR94HcGz2z5PqQHzA6/gb5KQk1JhO9uxh9/MBd+lFB p521FG+nH31H63xLztRSffpSmhAlEQkro0K8llJ2Hr1h/SKMQfmyBZFe3B6VY7Bc B86XlhvQzsiDdoWeP0MUeA8v0E7Vm1RkA3E8NT6Hwdt96x3W7wfydu3ITtxcvf1t 8ZepLiHnOipG0f2FKpPahf9qqEtZ+RJEA8Lcfj4HlzlmBv64fajon9JwbYkLbgNa EpO+vYVKVomumQ65OyGNdKNhVZh1cKDLjBhl978MgGPk6JOd40tkhlF1w9ozzdk+ x7Zt6DWJ1UHqQw6ma6kj5C6Oa7M4NFnXsL23EXPeew== -----END CERTIFICATE-----Generated at Sun Apr 27 06:20:46 2025 by rpki-client