$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/688da940-336a-3e24-8d9c-1dc4b81a64c6.roa File: 688da940-336a-3e24-8d9c-1dc4b81a64c6.roa (raw, json) Hash identifier: NUfDlXHt87gsULjqKSCLvtJNFlRVLS8224IeqxmTWds= Subject key identifier: A9:A8:A6:94:03:87:55:D1:C5:34:6D:6B:39:53:7A:76:82:64:16:A5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849A4BA4C3CC8E5D5CD7B169F80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/688da940-336a-3e24-8d9c-1dc4b81a64c6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 397630 IP address blocks: 69.58.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4c:3c:c8:e5:d5:cd:7b:16:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=76be3f05-e7bf-4243-8d23-f56d4b22ea0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:8d:da:e2:6e:0e:e2:37:41:e2:1b:cd:24: 16:c0:6d:23:5e:49:62:49:60:54:3e:b8:ca:fa:80: 25:c5:b1:8d:05:8c:95:84:20:97:26:d7:b9:e2:16: cc:b7:ca:9a:3d:b9:94:7d:54:2d:84:9d:3f:a0:6e: 3b:bb:6c:4f:31:eb:2e:5b:3d:21:02:de:3d:57:c9: 8d:67:02:66:d4:59:62:33:6b:e4:5f:be:ae:9a:bf: 4e:ee:69:15:ff:49:79:43:c6:c6:f6:c5:7c:8e:86: e0:37:1b:6d:db:a4:f9:8d:f1:d7:c6:47:1d:a2:b1: 29:1f:de:3c:80:2c:b1:bc:36:ae:7b:d2:19:b3:8a: ae:64:1e:5c:a9:73:fc:de:1f:a1:42:32:34:b9:1d: 51:56:24:f5:3e:1d:8e:18:37:6b:78:39:7d:f1:76: 1a:0a:1f:8d:1f:bd:77:98:11:1a:dd:bc:3a:38:a4: e9:ad:4f:c8:fa:f2:a1:0e:83:d3:18:4e:f2:ce:7e: 6d:2b:34:fd:aa:54:8e:ed:31:b3:55:05:da:89:e3: a7:1a:1e:70:bf:78:c1:5b:8c:f5:fb:42:f2:16:30: 80:ab:3b:de:44:88:49:a3:d2:99:80:70:9d:f6:e6: 01:1a:0e:8c:f8:18:68:59:dd:be:04:75:c4:fd:fe: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:A6:94:03:87:55:D1:C5:34:6D:6B:39:53:7A:76:82:64:16:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/688da940-336a-3e24-8d9c-1dc4b81a64c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 69.58.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:6b:cc:e3:cb:6f:02:4e:22:c2:81:8d:8b:bd:11:c3:96:b9: 25:82:10:c2:b8:68:b6:0d:34:55:89:be:66:25:5d:2e:71:6b: 8a:8b:e4:24:5b:7e:20:35:4e:3f:33:e7:36:65:68:39:ee:95: ce:e5:85:f7:89:51:fb:5c:29:72:46:6c:fe:46:e4:7a:0e:29: 11:8d:23:47:c4:3f:61:d8:65:95:24:c8:fb:d7:2b:86:68:44: ec:45:58:5b:84:05:42:2d:3f:ce:2b:ee:f6:30:0d:2b:01:54: 87:b0:cd:9d:a7:03:cd:0a:fb:26:32:8a:fe:7a:58:8a:6e:8c: bf:77:e8:98:25:1d:ec:22:51:c8:da:c6:f9:53:a4:1a:cd:9a: 13:19:39:5a:c8:8c:90:22:c5:e0:98:d0:91:25:8d:39:fd:95: b6:67:ed:66:8a:58:6d:87:36:42:dc:09:96:b5:0e:f6:22:43: 9a:00:07:23:cf:1d:40:c1:ff:e6:8a:3d:ac:8d:f0:4a:bc:ec: 53:5f:ef:c0:c7:47:a6:dc:5a:90:40:dc:6b:4f:c0:04:f0:01: c4:0c:99:1f:79:38:ce:29:88:d8:5e:0f:1f:15:aa:31:5e:c9: 21:9f:2f:de:c8:c9:81:79:0e:c7:bb:06:15:79:2e:bb:d8:de: 31:10:34:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukw8yOXVzXsWn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzZiZTNmMDUtZTdiZi00MjQzLThkMjMtZjU2ZDRiMjJlYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKuN2uJuDuI3QeIbzSQWwG0jXkliSWBUPrjK +oAlxbGNBYyVhCCXJte54hbMt8qaPbmUfVQthJ0/oG47u2xPMesuWz0hAt49V8mN ZwJm1FliM2vkX76umr9O7mkV/0l5Q8bG9sV8jobgNxtt26T5jfHXxkcdorEpH948 gCyxvDaue9IZs4quZB5cqXP83h+hQjI0uR1RViT1Ph2OGDdreDl98XYaCh+NH713 mBEa3bw6OKTprU/I+vKhDoPTGE7yzn5tKzT9qlSO7TGzVQXaieOnGh5wv3jBW4z1 +0LyFjCAqzveRIhJo9KZgHCd9uYBGg6M+BhoWd2+BHXE/f7FMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmoppQDh1XRxTRtazlTenaCZBalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjg4ZGE5NDAtMzM2YS0z ZTI0LThkOWMtMWRjNGI4MWE2NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNrzOPLbwJOIsKBjYu9EcOWuSWCEMK4aLYNNFWJvmYlXS5xa4qL5CRb fiA1Tj8z5zZlaDnulc7lhfeJUftcKXJGbP5G5HoOKRGNI0fEP2HYZZUkyPvXK4Zo ROxFWFuEBUItP84r7vYwDSsBVIewzZ2nA80K+yYyiv56WIpujL936JglHewiUcja xvlTpBrNmhMZOVrIjJAixeCY0JEljTn9lbZn7WaKWG2HNkLcCZa1DvYiQ5oAByPP HUDB/+aKPayN8Eq87FNf78DHR6bcWpBA3GtPwATwAcQMmR95OM4piNheDx8VqjFe ySGfL97IyYF5Dse7BhV5LrvY3jEQNJU= -----END CERTIFICATE-----Generated at Sun May 11 10:20:13 2025 by rpki-client