$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa File: f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa (raw, json) Hash identifier: JF8Y5WJ/5EpLcBpkFNj4yW9cJ7qpwMow4Loxm3eWMfc= Subject key identifier: 8B:26:10:CF:26:4B:D8:41:A4:96:62:5F:DD:7B:86:EE:38:8F:DC:AD Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584A2C2012E2889D052D6949B100 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 21803 IP address blocks: 69.39.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:12:e2:88:9d:05:2d:69:49:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=b88f3501-225a-4f3f-843d-8b44e30bb1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:7d:3b:14:b4:53:46:22:15:cf:2a:27:21: db:3a:aa:70:e6:bd:f6:74:2e:a2:96:af:9b:22:17: a6:ab:27:c2:b7:8d:30:40:e0:b9:d3:7e:79:c5:5b: 2f:1a:ea:82:9c:2d:74:38:3a:a4:81:b1:df:47:08: 35:b3:8d:a9:57:9c:22:65:74:2e:05:4f:b2:07:c8: be:e9:eb:e1:1b:bd:8d:37:4b:98:6d:af:0c:6f:14: 91:97:41:0d:9e:36:8e:83:67:3c:23:15:f4:ce:5d: 5c:cd:3e:a8:ef:cb:b4:1f:73:d3:87:aa:50:9d:74: 60:25:3d:bd:4e:87:a9:93:e9:37:0e:a7:b9:15:fc: 8f:9c:5b:f4:f1:75:3e:11:67:cd:a9:d6:51:a2:38: e4:3d:a2:a5:b2:6a:f7:f2:42:de:ea:72:18:23:3d: f1:d2:08:3a:57:08:da:dc:52:71:62:23:c8:9b:47: a5:50:6a:13:99:b5:6c:ca:11:85:ad:ba:00:07:c2: 58:31:09:e4:78:9e:e1:ad:c2:52:0d:41:95:6b:31: ce:5c:a4:b4:17:b0:6c:1b:86:14:10:61:f6:97:94: c8:aa:f9:e9:5a:d0:2c:e5:4c:35:2f:c3:81:6d:15: a0:54:1b:41:c1:ef:19:90:e5:b4:cb:d3:37:ab:49: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:26:10:CF:26:4B:D8:41:A4:96:62:5F:DD:7B:86:EE:38:8F:DC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 69.39.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:50:83:70:aa:2d:f5:2e:33:ef:0f:cf:18:fa:d3:25:25:01: 20:b5:b1:10:d4:7e:20:d4:07:ab:f7:16:8e:74:e7:b2:5a:53: e0:2e:63:66:58:99:03:18:a4:2d:50:76:d9:90:94:58:28:71: dd:d4:88:a1:21:22:b5:fc:42:7d:90:25:4c:5a:ce:09:36:a4: ae:98:39:d6:37:1a:4f:d6:24:97:d8:61:ad:e8:ff:31:6f:2a: 58:2b:57:09:aa:47:c2:4b:27:33:4d:12:f7:4c:48:35:f1:07: 83:9d:03:e7:61:55:ec:20:f9:c7:57:5f:74:d7:f8:00:22:24: 41:32:92:08:94:28:06:93:d6:4e:f1:21:04:5f:6c:62:20:6d: 91:1d:2a:a8:8d:17:fb:17:e8:92:76:a8:2f:e9:1c:7c:c7:c7: 4b:a6:40:06:9b:2a:c6:f1:23:0f:4b:33:db:17:f2:ae:dc:2a: 79:75:3e:16:5e:4b:49:b2:fe:3f:aa:90:bf:51:09:db:f3:45: 36:40:81:5a:d8:51:36:e4:2b:64:b0:a3:f6:b9:94:47:87:13: d0:00:f8:93:b4:15:f9:06:45:d6:2c:e5:0d:37:41:ef:d6:cc: a4:15:12:67:1f:0a:4c:49:48:0a:d9:74:9c:68:c5:20:d2:21: 63:1b:c7:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBLiiJ0FLWlJsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk Yjg4ZjM1MDEtMjI1YS00ZjNmLTg0M2QtOGI0NGUzMGJiMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqt9OxS0U0YiFc8qJyHbOqpw5r32dC6ilq+b IhemqyfCt40wQOC50355xVsvGuqCnC10ODqkgbHfRwg1s42pV5wiZXQuBU+yB8i+ 6evhG72NN0uYba8MbxSRl0ENnjaOg2c8IxX0zl1czT6o78u0H3PTh6pQnXRgJT29 Toepk+k3Dqe5FfyPnFv08XU+EWfNqdZRojjkPaKlsmr38kLe6nIYIz3x0gg6Vwja 3FJxYiPIm0elUGoTmbVsyhGFrboAB8JYMQnkeJ7hrcJSDUGVazHOXKS0F7BsG4YU EGH2l5TIqvnpWtAs5Uw1L8OBbRWgVBtBwe8ZkOW0y9M3q0l7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsmEM8mS9hBpJZiX917hu44j9ytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZjFmODBhN2EtNGU0Mi0z ZTdmLWIzZjItYzc2MDMyZmNlZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRScAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANQg3CqLfUuM+8Pzxj60yUlASC1sRDUfiDUB6v3Fo5057JaU+AuY2ZY mQMYpC1QdtmQlFgocd3UiKEhIrX8Qn2QJUxazgk2pK6YOdY3Gk/WJJfYYa3o/zFv KlgrVwmqR8JLJzNNEvdMSDXxB4OdA+dhVewg+cdXX3TX+AAiJEEykgiUKAaT1k7x IQRfbGIgbZEdKqiNF/sX6JJ2qC/pHHzHx0umQAabKsbxIw9LM9sX8q7cKnl1PhZe S0my/j+qkL9RCdvzRTZAgVrYUTbkK2Swo/a5lEeHE9AA+JO0FfkGRdYs5Q03Qe/W zKQVEmcfCkxJSArZdJxoxSDSIWMbxzc= -----END CERTIFICATE-----Generated at Mon Jun 16 15:43:45 2025 by rpki-client