$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7e65529f-ff31-339c-bf7e-86c6937f6a90.roa File: 7e65529f-ff31-339c-bf7e-86c6937f6a90.roa (raw, json) Hash identifier: XJq4VJv6Zv+mSSB7VqvICx/KJqhxZrwlI0cfyAU0z+E= Subject key identifier: FD:67:37:46:31:A7:E5:20:45:38:CE:2D:9C:7D:41:8C:E4:3A:F8:12 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F43285849A1EF770EA75864C14CF31D00 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7e65529f-ff31-339c-bf7e-86c6937f6a90.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 6079 IP address blocks: 69.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:77:0e:a7:58:64:c1:4c:f3:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=f561cd7f-7a8b-42d6-be13-b796db9c82cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:c1:8a:ea:58:c1:a6:f2:df:b4:5a:03:18: a1:1a:bd:7f:b5:22:6d:9b:91:18:da:5a:3e:e9:61: 28:b6:5a:8b:2a:db:80:95:93:19:31:a0:80:fc:ff: 38:c9:cf:cb:61:26:36:13:9f:5f:c1:7c:4a:47:69: 13:5d:7e:30:5d:c2:35:5c:6f:6b:8e:f9:68:d1:82: d2:29:d5:77:62:44:d5:06:b8:aa:cf:2d:31:18:50: e9:82:5b:10:e0:4d:e3:2d:e4:ed:cb:ea:2d:9e:34: 3c:ca:14:3e:1f:2c:97:c8:27:e3:98:26:2d:d5:e3: b7:14:4a:58:09:e9:3a:85:17:7a:df:6c:a7:1a:a4: ec:e9:fb:46:24:8b:c1:d4:41:75:ea:54:1e:ce:66: 02:e4:b3:35:2c:bf:7a:fd:d3:35:b9:d1:71:b8:94: 24:d2:03:71:7a:d2:7a:34:2a:bd:f9:f8:f8:2e:97: dd:cb:58:20:cd:19:80:4f:77:a2:d4:75:99:d8:37: bc:a3:24:24:02:b2:fd:be:ab:e7:a1:74:51:3c:e5: ac:d4:03:15:fa:1d:34:ab:27:5e:a2:61:56:f4:a6: 80:5b:68:d0:6d:a0:e5:78:a8:46:d2:8a:87:bf:30: b6:bc:f2:be:fb:bc:7a:8d:b4:22:a0:bf:2c:c4:2b: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:67:37:46:31:A7:E5:20:45:38:CE:2D:9C:7D:41:8C:E4:3A:F8:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/7e65529f-ff31-339c-bf7e-86c6937f6a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 69.47.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:47:f9:cf:ab:29:19:75:2f:1f:9d:6e:e3:b3:2e:25:82:4f: a4:b2:71:17:bd:23:bf:55:65:d1:43:67:09:d9:e4:b1:d8:7b: a6:79:5d:c6:28:69:63:21:11:c4:31:5b:d3:65:e5:62:34:cf: 34:28:3d:72:5e:3e:50:70:c5:d9:61:e0:ea:00:53:b5:71:af: 23:ae:c9:63:ec:a3:0e:28:f9:4e:7b:1a:52:e9:55:1a:70:4d: d6:08:00:93:cd:27:91:95:b5:e0:99:41:52:6a:53:da:b8:18: e5:55:a3:3a:f6:85:c9:c6:28:6c:28:aa:03:50:ae:cc:83:37: 90:59:bd:2f:b6:a3:5a:72:64:93:0c:b9:f1:9b:f1:c3:c6:4e: 87:d6:35:fb:75:0d:ec:73:12:2a:6c:ad:4b:2c:bb:f7:14:23: 78:04:b4:d2:d0:0f:e9:ae:37:ff:73:8f:5f:32:c8:62:05:7a: 12:99:87:19:67:12:92:a9:7b:96:a3:2b:bc:81:d6:14:5a:87: 01:02:54:fc:1c:58:12:63:6f:65:45:1b:fb:5c:fd:1e:a5:08: da:4c:b7:86:17:34:33:9c:10:fc:a8:95:21:d5:b8:a1:5a:be: 50:4e:4d:f4:b4:e1:f8:bc:5f:d6:70:b9:9a:41:bd:b4:a7:64: 70:fc:30:ee -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmh73cOp1hkwUzzHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZjU2MWNkN2YtN2E4Yi00MmQ2LWJlMTMtYjc5NmRiOWM4MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/DBiupYwaby37RaAxihGr1/tSJtm5EY2lo+ 6WEotlqLKtuAlZMZMaCA/P84yc/LYSY2E59fwXxKR2kTXX4wXcI1XG9rjvlo0YLS KdV3YkTVBriqzy0xGFDpglsQ4E3jLeTty+otnjQ8yhQ+HyyXyCfjmCYt1eO3FEpY Cek6hRd632ynGqTs6ftGJIvB1EF16lQezmYC5LM1LL96/dM1udFxuJQk0gNxetJ6 NCq9+fj4Lpfdy1ggzRmAT3ei1HWZ2De8oyQkArL9vqvnoXRRPOWs1AMV+h00qyde omFW9KaAW2jQbaDleKhG0oqHvzC2vPK++7x6jbQioL8sxCuvDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP1nN0Yxp+UgRTjOLZx9QYzkOvgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvN2U2NTUyOWYtZmYzMS0z MzljLWJmN2UtODZjNjkzN2Y2YTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARS8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAw0f5z6spGXUvH51u47MuJYJPpLJxF70jv1Vl0UNnCdnksdh7pnldxihp YyERxDFb02XlYjTPNCg9cl4+UHDF2WHg6gBTtXGvI67JY+yjDij5TnsaUulVGnBN 1ggAk80nkZW14JlBUmpT2rgY5VWjOvaFycYobCiqA1CuzIM3kFm9L7ajWnJkkwy5 8Zvxw8ZOh9Y1+3UN7HMSKmytSyy79xQjeAS00tAP6a43/3OPXzLIYgV6EpmHGWcS kql7lqMrvIHWFFqHAQJU/BxYEmNvZUUb+1z9HqUI2ky3hhc0M5wQ/KiVIdW4oVq+ UE5N9LTh+Lxf1nC5mkG9tKdkcPww7g== -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:43 2025 by rpki-client