$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa File: 59e9e4d5-f96a-3852-913b-f97813ffedfa.roa (raw, json) Hash identifier: V8qq6krgF72AD9tOizAbYPskPEUHWwDL/rb6iVBYbwY= Subject key identifier: 43:48:55:A7:D5:03:2F:E6:60:70:39:2B:96:ED:82:89:58:37:26:74 Certificate issuer: /CN=223a4b84-939d-437b-85a8-9ff465d0541e Certificate serial: 010D0C9F4328584A023FC5DA559897C1D5F24600 Authority key identifier: B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa Signing time: Thu 29 May 2025 01:00:50 +0000 ROA not before: Thu 29 May 2025 01:00:50 +0000 ROA not after: Wed 27 Aug 2025 01:00:50 +0000 asID: 8075 IP address blocks: 69.72.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:3f:c5:da:55:98:97:c1:d5:f2:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=223a4b84-939d-437b-85a8-9ff465d0541e Validity Not Before: May 29 01:00:50 2025 GMT Not After : Aug 27 01:00:50 2025 GMT Subject: CN=852efc73-7377-4aaf-8139-56c546133140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:3b:52:b0:0f:80:9b:d2:25:d1:a0:98:3b: 47:31:61:62:b7:a4:0a:3d:b5:4f:d1:18:71:c1:ec: 85:26:53:34:c3:53:1b:d8:11:10:ae:58:b5:c2:ba: 7c:8d:60:24:49:fb:3d:2d:68:1f:4a:82:7a:8f:5b: 8b:46:07:74:8d:ec:bd:5a:d5:94:1d:7b:1e:3a:28: 91:8a:61:a0:4e:d8:fb:bf:44:f3:f0:b2:61:b7:db: 9e:f7:7b:30:35:d9:24:99:98:cd:ec:3d:05:2c:cd: d1:58:2d:f7:6a:38:dc:fc:e7:75:7e:17:a1:6d:7c: be:b1:3c:d0:2b:71:3f:6e:e4:0f:1e:0d:37:37:dc: 20:6f:67:a6:6c:d3:6c:cf:dd:24:b3:ba:20:7e:40: eb:0d:ed:9d:5c:82:1d:dd:10:a8:1c:4c:c0:0f:a2: a2:ed:8c:ef:b5:30:27:e7:d7:f8:58:a0:29:5b:1a: fa:90:b4:5b:4f:94:f7:c8:be:82:0f:21:96:86:83: 62:d9:64:1d:60:e6:7b:20:d2:80:c5:e9:c6:b5:a3: 40:9e:1e:35:4c:14:94:82:0b:be:9c:dd:df:ca:92: bc:9e:98:ad:d4:e6:be:0b:be:5f:67:92:3b:dc:cf: a0:d8:82:d9:a0:03:e9:6a:45:c2:21:10:79:93:a2: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:55:A7:D5:03:2F:E6:60:70:39:2B:96:ED:82:89:58:37:26:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl X509v3 Authority Key Identifier: keyid:B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer sbgp-ipAddrBlock: critical IPv4: 69.72.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:93:f1:52:a4:19:40:64:87:78:4c:25:64:6c:2b:6f:05:28: 02:c3:29:09:8a:94:1b:f8:f5:eb:85:e9:18:c6:f2:ba:67:8a: 28:45:4c:4d:66:3d:b1:5e:0d:cb:10:db:15:bc:31:d2:b6:be: 15:97:6d:64:a6:5a:13:f1:d6:26:72:f8:31:bd:03:7f:bc:3d: 83:40:31:bd:44:c0:b0:82:45:78:c9:20:75:09:4c:0a:23:98: ba:ce:7c:0e:f4:e1:b9:1c:04:1f:5b:e5:a3:42:d8:a0:4d:fe: ee:d0:b6:f0:15:4b:f0:76:58:db:f7:af:03:73:39:fc:c4:ff: 55:8e:6b:31:f8:d7:40:96:34:9a:02:c3:3e:c4:e7:f3:6b:d5: 58:0d:ce:8d:ce:44:f4:3c:c9:ee:1d:36:eb:de:fa:36:4a:81: 59:e6:2c:4e:3f:fe:f9:02:a0:04:77:6f:01:85:03:e5:10:00: c1:9e:d7:80:8f:54:43:3a:29:87:6c:12:3e:f1:ce:c2:16:ae: 76:6d:1e:dc:90:43:45:06:34:d3:a0:f8:e8:92:d7:2e:e3:f8: 2f:24:f1:5e:19:78:68:9e:57:1a:2e:15:c3:e9:9c:5c:b7:ba: 2f:39:9c:64:4c:97:59:d2:d7:09:16:c6:d3:e5:c9:c0:02:61: a6:a9:33:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoCP8XaVZiXwdXyRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIzYTRiODQtOTM5ZC00MzdiLTg1YTgtOWZmNDY1ZDA1 NDFlMB4XDTI1MDUyOTAxMDA1MFoXDTI1MDgyNzAxMDA1MFowLzEtMCsGA1UEAxMk ODUyZWZjNzMtNzM3Ny00YWFmLTgxMzktNTZjNTQ2MTMzMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHk7UrAPgJvSJdGgmDtHMWFit6QKPbVP0Rhx weyFJlM0w1Mb2BEQrli1wrp8jWAkSfs9LWgfSoJ6j1uLRgd0jey9WtWUHXseOiiR imGgTtj7v0Tz8LJht9ue93swNdkkmZjN7D0FLM3RWC33ajjc/Od1fhehbXy+sTzQ K3E/buQPHg03N9wgb2embNNsz90ks7ogfkDrDe2dXIId3RCoHEzAD6Ki7YzvtTAn 59f4WKApWxr6kLRbT5T3yL6CDyGWhoNi2WQdYOZ7INKAxenGtaNAnh41TBSUggu+ nN3fypK8npit1Oa+C75fZ5I73M+g2ILZoAPpakXCIRB5k6KXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENIVafVAy/mYHA5K5btgolYNyZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNh NGI4NC05MzlkLTQzN2ItODVhOC05ZmY0NjVkMDU0MWUvNTllOWU0ZDUtZjk2YS0z ODUyLTkxM2ItZjk3ODEzZmZlZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjIzYTRiODQtOTM5ZC00MzdiLTg1 YTgtOWZmNDY1ZDA1NDFlLzIyM2E0Yjg0LTkzOWQtNDM3Yi04NWE4LTlmZjQ2NWQw NTQxZS5jcmwwHwYDVR0jBBgwFoAUty2YvxMnHjhhqY5/W/c+SXA3684wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMjNhNGI4NC05MzlkLTQzN2ItODVhOC05ZmY0 NjVkMDU0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUhHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOT8VKkGUBkh3hMJWRsK28FKALDKQmKlBv49euF6RjG8rpniihFTE1m PbFeDcsQ2xW8MdK2vhWXbWSmWhPx1iZy+DG9A3+8PYNAMb1EwLCCRXjJIHUJTAoj mLrOfA704bkcBB9b5aNC2KBN/u7QtvAVS/B2WNv3rwNzOfzE/1WOazH410CWNJoC wz7E5/Nr1VgNzo3ORPQ8ye4dNuve+jZKgVnmLE4//vkCoAR3bwGFA+UQAMGe14CP VEM6KYdsEj7xzsIWrnZtHtyQQ0UGNNOg+OiS1y7j+C8k8V4ZeGieVxouFcPpnFy3 ui85nGRMl1nS1wkWxtPlycACYaapM+c= -----END CERTIFICATE-----Generated at Mon Jun 30 21:47:58 2025 by rpki-client