$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa File: 3b7be4db-845a-366c-83ad-948a2fb50b9e.roa (raw, json) Hash identifier: XkR9e25GdJbM3iac/LZAPpykromYiW0+QSl8K4jIHjA= Subject key identifier: CC:97:8E:72:7C:18:84:E3:57:F4:68:B7:72:87:21:5C:9D:83:12:E1 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F432858491246A5DA6FACD75FEB834A80 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 20454 IP address blocks: 69.160.46.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a5:da:6f:ac:d7:5f:eb:83:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=52302d35-60b1-4bd9-aa2e-b51e7fff0be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:e2:3e:8b:3f:75:81:ed:e3:36:01:00:ff: 05:19:4e:fa:3d:37:d4:18:51:08:24:5c:10:fb:f8: fe:e6:45:76:55:09:0f:70:d9:3f:ed:99:c9:77:be: 1b:cd:76:bf:04:2e:8c:18:98:24:88:2a:8c:e6:ce: 72:3d:b4:2e:20:e8:ae:32:06:5b:77:26:62:e2:17: 84:d3:06:a6:72:b4:94:96:6e:44:8a:ca:68:a2:33: be:49:71:8f:e5:ae:1b:cf:d2:77:0a:b2:f3:7b:19: ce:91:95:a5:29:38:6a:1e:e4:16:53:e5:4d:7c:98: b1:d3:f7:88:d9:36:b0:a2:a1:0a:57:76:3c:8d:ae: 22:3a:e6:02:b6:11:37:15:c3:db:f3:ee:6f:8e:58: e8:3a:1b:b4:00:2a:11:3b:d6:ba:8e:66:5d:91:6f: 3a:7e:03:06:bd:da:f3:6e:74:96:75:06:4f:ad:88: d2:5a:85:ed:24:9c:d1:bd:9d:94:44:0f:8a:ed:34: a2:1f:28:ba:b3:38:b1:c0:19:63:72:42:94:d9:85: d2:01:6c:c8:e8:69:82:90:0a:ad:c3:3c:fe:c3:d0: 4f:a7:0f:14:b9:9a:e9:1f:fa:af:4b:8f:78:b7:3c: 5c:1d:fb:01:4f:76:b8:b8:07:39:b5:37:cf:a3:23: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:8E:72:7C:18:84:E3:57:F4:68:B7:72:87:21:5C:9D:83:12:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/3b7be4db-845a-366c-83ad-948a2fb50b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv4: 69.160.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fb:5a:50:13:05:f6:3f:32:22:a9:51:5f:5e:18:b2:c3:bc: dc:ad:ac:ee:57:7f:48:64:da:51:c1:87:a8:25:38:7d:e5:dd: 93:46:78:86:34:5c:71:72:4f:6d:b3:eb:ff:11:71:08:4b:b5: 0c:f1:e7:7e:e5:98:45:3e:34:11:ee:09:11:08:b5:a1:11:b1: d3:51:a8:58:d5:ee:17:58:e9:0b:86:81:35:92:30:d3:a4:e1: 84:35:5e:ff:98:d7:28:65:b0:b8:1c:62:5e:57:2a:6c:ff:45: 14:c7:60:ba:51:e3:a2:3f:66:28:8d:39:1d:58:2f:e7:8b:00: f6:43:a0:91:b6:42:c3:5f:57:9f:df:c0:b1:f9:c8:32:30:72: 4c:f2:9e:a8:b5:62:cb:fa:09:52:48:c1:65:45:12:28:50:bb: 58:c1:e3:69:82:b1:78:c9:ee:9c:39:5d:15:1c:20:e0:a2:7c: f9:c0:b9:71:72:22:cd:0e:07:d4:9f:eb:e1:12:cb:37:5a:b8: b8:60:8c:12:3e:28:2f:15:20:1f:f3:8b:8d:b7:83:02:30:39: 46:83:6e:3d:b1:b0:0a:3e:2f:02:69:9a:26:73:66:5d:16:54: f0:97:13:a3:5b:08:9d:80:35:a6:e3:23:83:32:70:f5:f4:f4: fc:18:b2:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqXab6zXX+uDSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NTIzMDJkMzUtNjBiMS00YmQ5LWFhMmUtYjUxZTdmZmYwYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUriPos/dYHt4zYBAP8FGU76PTfUGFEIJFwQ +/j+5kV2VQkPcNk/7ZnJd74bzXa/BC6MGJgkiCqM5s5yPbQuIOiuMgZbdyZi4heE 0wamcrSUlm5EispoojO+SXGP5a4bz9J3CrLzexnOkZWlKThqHuQWU+VNfJix0/eI 2TawoqEKV3Y8ja4iOuYCthE3FcPb8+5vjljoOhu0ACoRO9a6jmZdkW86fgMGvdrz bnSWdQZPrYjSWoXtJJzRvZ2URA+K7TSiHyi6szixwBljckKU2YXSAWzI6GmCkAqt wzz+w9BPpw8UuZrpH/qvS494tzxcHfsBT3a4uAc5tTfPoyMhiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyXjnJ8GITjV/Rot3KHIVydgxLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvM2I3YmU0ZGItODQ1YS0z NjZjLTgzYWQtOTQ4YTJmYjUwYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRaAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr7WlATBfY/MiKpUV9eGLLDvNytrO5Xf0hk2lHBh6glOH3l3ZNGeIY0 XHFyT22z6/8RcQhLtQzx537lmEU+NBHuCREItaERsdNRqFjV7hdY6QuGgTWSMNOk 4YQ1Xv+Y1yhlsLgcYl5XKmz/RRTHYLpR46I/ZiiNOR1YL+eLAPZDoJG2QsNfV5/f wLH5yDIwckzynqi1Ysv6CVJIwWVFEihQu1jB42mCsXjJ7pw5XRUcIOCifPnAuXFy Is0OB9Sf6+ESyzdauLhgjBI+KC8VIB/zi423gwIwOUaDbj2xsAo+LwJpmiZzZl0W VPCXE6NbCJ2ANabjI4MycPX09PwYsog= -----END CERTIFICATE-----Generated at Tue May 6 12:12:35 2025 by rpki-client