$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa File: 8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa (raw, json) Hash identifier: p2CV/xlcBOXtevSYoOWFwPcfFU0PhhyjQSUX1pfyNxs= Subject key identifier: A7:C7:70:76:9B:97:19:E5:40:34:D5:CA:70:7A:DB:5F:EF:82:DA:23 Certificate issuer: /CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Certificate serial: 010D0C9F432858494CC93ECC70A0B530D0ECB200 Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 21709 IP address blocks: 69.54.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3e:cc:70:a0:b5:30:d0:ec:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=6be779f6-acf9-4a7d-9b0b-21cab678b221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:84:3d:d1:e1:26:13:5c:57:17:85:50:77: 39:3d:3d:33:c1:78:44:62:31:06:d7:08:54:ee:9c: 6e:f5:13:c1:ec:ba:80:e4:b4:0b:df:d4:d1:ec:41: 18:0a:b4:dc:50:19:ac:f4:7b:e2:c0:c0:52:da:13: a6:9c:a0:99:a7:10:80:11:df:21:b9:d5:c2:77:3b: 3f:2a:bf:53:c0:86:27:5b:e5:7c:26:d6:c6:b4:e1: 38:14:ad:c4:89:44:a3:19:fa:01:ef:13:32:cd:ba: c4:22:15:d3:30:d1:5a:c9:96:39:23:fd:69:8f:9c: 16:31:5f:9c:48:1b:ee:98:b5:87:13:06:16:23:49: f9:d0:c6:2b:da:43:e7:a7:96:de:eb:f0:99:31:4b: 9a:9c:6a:e8:4f:29:c1:ef:00:15:2f:34:e8:00:89: fa:d8:41:7c:54:17:4c:94:d5:80:66:c1:bf:f9:47: 5a:56:ef:46:ae:b3:de:5f:3b:45:b9:86:10:61:fb: 50:15:46:a0:1f:66:90:00:06:7e:61:cd:ee:7b:5d: dc:fb:91:24:32:91:0c:59:71:df:ca:d7:9f:ac:5c: 79:2e:ea:b2:20:9e:74:80:a4:e1:37:1d:ef:fc:5e: c1:52:29:ad:98:78:3e:52:98:2f:e2:b3:a4:49:a9: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:70:76:9B:97:19:E5:40:34:D5:CA:70:7A:DB:5F:EF:82:DA:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl X509v3 Authority Key Identifier: keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer sbgp-ipAddrBlock: critical IPv4: 69.54.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8f:8d:4f:c9:4e:9c:ae:10:5e:a5:9e:b6:dc:f8:be:dd:a8: 70:6b:ac:17:06:8f:ed:f2:ea:32:0b:9f:8b:77:ef:d6:f2:bd: 23:3a:ec:f0:79:28:ef:e6:cc:a6:93:31:ae:5a:40:8a:fb:52: 1e:00:86:bb:0f:59:a2:f1:72:08:55:96:c8:34:78:6e:84:7d: 0f:81:1d:05:85:27:6d:01:f5:2b:93:6a:12:0d:9f:e9:84:89: 9c:d2:7a:08:d8:2f:74:95:9a:65:59:ed:cc:10:d4:74:64:8f: ba:af:8d:5e:ac:27:be:5f:64:d9:2a:a6:c5:c0:8f:9f:0b:f3: f1:6e:af:9e:f7:2f:0d:f6:51:d6:53:8f:c3:1b:c6:72:88:31: f6:88:ba:9f:38:a6:4f:ae:7f:cb:89:fb:6f:93:95:04:66:3f: 4b:be:35:52:70:f5:64:a2:92:4b:f4:04:4e:25:a7:f1:ec:21: 5e:c4:00:3a:c4:b6:41:98:46:a1:0a:71:03:7d:a7:01:13:b9: 2e:c1:59:69:43:ea:f5:52:b9:be:e7:ff:b1:86:99:bd:25:87: c4:a5:b4:64:34:90:17:dc:49:3a:6c:58:6f:60:00:33:7e:c4: c3:a6:40:03:5c:c2:8b:7b:90:a1:7f:66:21:95:14:4e:6d:68: 69:ff:28:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT7McKC1MNDssgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI4ZTQ5NjUtZGYxYS00ZWUwLTkxZjgtMjRjNzI3Nzlh ZjczMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NmJlNzc5ZjYtYWNmOS00YTdkLTliMGItMjFjYWI2NzhiMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu+EPdHhJhNcVxeFUHc5PT0zwXhEYjEG1whU 7pxu9RPB7LqA5LQL39TR7EEYCrTcUBms9HviwMBS2hOmnKCZpxCAEd8hudXCdzs/ Kr9TwIYnW+V8JtbGtOE4FK3EiUSjGfoB7xMyzbrEIhXTMNFayZY5I/1pj5wWMV+c SBvumLWHEwYWI0n50MYr2kPnp5be6/CZMUuanGroTynB7wAVLzToAIn62EF8VBdM lNWAZsG/+UdaVu9GrrPeXztFuYYQYftQFUagH2aQAAZ+Yc3ue13c+5EkMpEMWXHf ytefrFx5LuqyIJ50gKThNx3v/F7BUimtmHg+Upgv4rOkSamJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfHcHablxnlQDTVynB621/vgtojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhl NDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3Mjc3OWFmNzMvOGM4ZDBiMTctNWY5Ni0z YjJlLWI4ODgtOTVmZGM5NWYxODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDI4ZTQ5NjUtZGYxYS00ZWUwLTkx ZjgtMjRjNzI3NzlhZjczL2QyOGU0OTY1LWRmMWEtNGVlMC05MWY4LTI0YzcyNzc5 YWY3My5jcmwwHwYDVR0jBBgwFoAUE9xsJyQD94mC1LDU6G59N6ygji8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMjhlNDk2NS1kZjFhLTRlZTAtOTFmOC0yNGM3 Mjc3OWFmNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6PjU/JTpyuEF6lnrbc+L7dqHBrrBcGj+3y6jILn4t379byvSM67PB5 KO/mzKaTMa5aQIr7Uh4AhrsPWaLxcghVlsg0eG6EfQ+BHQWFJ20B9SuTahINn+mE iZzSegjYL3SVmmVZ7cwQ1HRkj7qvjV6sJ75fZNkqpsXAj58L8/Fur573Lw32UdZT j8MbxnKIMfaIup84pk+uf8uJ+2+TlQRmP0u+NVJw9WSikkv0BE4lp/HsIV7EADrE tkGYRqEKcQN9pwETuS7BWWlD6vVSub7n/7GGmb0lh8SltGQ0kBfcSTpsWG9gADN+ xMOmQANcwot7kKF/ZiGVFE5taGn/KMk= -----END CERTIFICATE-----Generated at Mon Apr 28 07:51:25 2025 by rpki-client