$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa File: be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa (raw, json) Hash identifier: YJVf4JlYGbZEzj3OFBqTujET9XVJPxq2gJSaq327ZAk= Subject key identifier: 8F:47:4F:E9:85:79:3A:79:A6:96:79:92:98:41:65:A4:DE:75:52:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490021702E6E629ECED6610B20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 69.192.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:70:2e:6e:62:9e:ce:d6:61:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=38889ce6-7a52-4733-a816-0e8603ba2a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:df:7b:8d:2f:fb:d8:71:29:48:75:ce:67: 0e:52:7b:d5:69:c4:a4:a5:23:b4:1c:f9:39:22:2c: ee:23:96:28:9b:2a:d5:fb:35:4e:54:a5:d0:42:d9: 53:06:08:6d:8f:1c:5d:68:67:e1:c1:df:99:7b:b1: 87:b6:5c:19:37:26:1c:66:50:04:af:0e:c5:f5:3d: 00:2f:72:a2:86:0e:b1:d9:91:ed:78:5f:2d:06:27: fb:79:33:8b:bc:6f:de:8b:64:42:e5:9e:a7:ce:d9: b2:4f:f8:ee:52:9b:54:9b:15:da:09:2e:9b:66:1a: 1c:a8:c3:47:f7:d6:20:24:16:b6:1d:70:4e:c8:39: 82:30:94:62:f8:7d:b2:f9:35:09:9e:a4:92:b7:80: 15:3a:25:69:85:1f:5b:6f:84:76:87:69:df:c0:0a: fa:1e:6e:d2:06:0c:9e:ac:e8:fd:19:97:1a:68:a4: 97:27:87:5e:fa:8c:d0:52:19:db:4c:dc:8b:01:a5: 7a:e7:73:61:05:30:99:72:3a:30:e9:db:d9:9d:e9: 8c:8a:92:b0:59:05:f6:e9:bd:43:5d:3e:91:18:23: b1:dd:f4:93:2a:06:a8:bb:21:c2:df:0d:5b:90:9e: 2e:70:e5:57:ad:83:fd:a2:68:bc:d7:74:6f:37:8b: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:47:4F:E9:85:79:3A:79:A6:96:79:92:98:41:65:A4:DE:75:52:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 69.192.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a0:9b:a4:06:b4:b9:25:51:43:8c:03:13:f4:75:3f:c2:0e: f1:c0:e7:aa:80:02:63:34:93:6b:f5:59:80:ad:4f:7a:b5:97: a4:93:c4:d1:e0:a5:19:be:cf:c7:9b:4c:2d:3e:73:3b:78:91: 52:18:dc:7e:29:dc:f6:6e:14:76:c5:bf:2f:19:3e:be:5b:59: ed:85:0e:c7:45:f7:f3:6a:db:40:8e:b2:dc:f1:c9:33:c5:f4: 62:ca:d0:1a:c5:32:93:4b:4d:18:87:06:df:9d:71:3b:68:9f: 30:13:5f:39:c8:6b:25:df:5c:40:12:02:75:ba:63:5f:52:8d: 28:b6:fb:36:9a:af:80:34:18:da:b0:10:ed:aa:6b:09:76:ce: e4:58:7c:99:22:e6:6f:59:2f:cb:67:4f:81:ec:0e:c2:43:80: 3e:66:57:9f:ca:46:29:45:e0:3a:a2:20:d4:10:ca:d6:ad:ce: ed:b8:de:1c:bb:51:06:ca:4b:2e:cc:bb:75:2e:a4:fd:ca:06: 9a:cb:00:1c:f9:53:6a:d1:47:1a:37:8b:78:1e:e8:bb:ce:01: 61:6f:69:cd:d4:28:ee:a3:e2:e2:e7:bd:43:aa:a0:cb:89:13: 20:f8:aa:c1:4a:67:fa:52:d1:0b:0b:30:66:62:e1:c8:c8:3f: 0e:4c:10:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIXAubmKeztZhCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk Mzg4ODljZTYtN2E1Mi00NzMzLWE4MTYtMGU4NjAzYmEyYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti3fe40v+9hxKUh1zmcOUnvVacSkpSO0HPk5 IizuI5YomyrV+zVOVKXQQtlTBghtjxxdaGfhwd+Ze7GHtlwZNyYcZlAErw7F9T0A L3Kihg6x2ZHteF8tBif7eTOLvG/ei2RC5Z6nztmyT/juUptUmxXaCS6bZhocqMNH 99YgJBa2HXBOyDmCMJRi+H2y+TUJnqSSt4AVOiVphR9bb4R2h2nfwAr6Hm7SBgye rOj9GZcaaKSXJ4de+ozQUhnbTNyLAaV653NhBTCZcjow6dvZnemMipKwWQX26b1D XT6RGCOx3fSTKgaouyHC3w1bkJ4ucOVXrYP9omi813RvN4t/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9HT+mFeTp5ppZ5kphBZaTedVJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmU3YjBiMDAtM2UwNi0z YTQxLWFhYzQtMjQ0OWVkMzZiMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARcCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKgm6QGtLklUUOMAxP0dT/CDvHA56qAAmM0k2v1WYCtT3q1l6STxNHg pRm+z8ebTC0+czt4kVIY3H4p3PZuFHbFvy8ZPr5bWe2FDsdF9/Nq20COstzxyTPF 9GLK0BrFMpNLTRiHBt+dcTtonzATXznIayXfXEASAnW6Y19SjSi2+zaar4A0GNqw EO2qawl2zuRYfJki5m9ZL8tnT4HsDsJDgD5mV5/KRilF4DqiINQQytatzu243hy7 UQbKSy7Mu3UupP3KBprLABz5U2rRRxo3i3ge6LvOAWFvac3UKO6j4uLnvUOqoMuJ EyD4qsFKZ/pS0QsLMGZi4cjIPw5MEHA= -----END CERTIFICATE-----Generated at Sun Apr 27 03:21:16 2025 by rpki-client