$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa File: 97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa (raw, json) Hash identifier: i5xn/MsThuOJ6OladRIJp0bFV0x1R3NPGAVn9Tuy3M0= Subject key identifier: CC:DD:72:7F:76:8A:95:5D:2E:10:A6:DF:19:17:52:C9:16:57:DD:A6 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F43285849AE7F423D3C1EAB5403300D80 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 11260 IP address blocks: 173.212.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:42:3d:3c:1e:ab:54:03:30:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=d1040be4-d139-4103-b96f-eed86e8e3970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:e3:70:91:16:6e:ec:a1:6a:37:13:aa:6a: 76:b3:3e:4d:a8:79:19:a6:dd:9b:de:af:3a:15:8c: 51:99:8f:04:d1:dd:b7:56:dd:7d:df:4c:f5:80:49: cf:4a:43:63:ea:e6:77:ac:2f:e7:d0:16:12:42:65: b3:d8:b6:4c:ef:a9:a3:52:bf:f1:eb:2e:85:45:76: c0:14:75:b2:d5:6b:c5:28:fb:ef:72:09:75:e0:dd: 80:71:e4:b1:a8:f5:fd:1d:57:5e:b1:4a:d2:61:e3: 54:15:13:1d:0f:8c:07:1f:6e:39:38:02:90:31:30: 76:77:89:85:23:9e:7a:35:d3:29:be:4e:6b:fb:78: cd:68:09:78:18:fd:8f:f2:9c:b5:49:22:e5:37:e5: 57:90:ff:8b:00:0d:95:12:4f:a2:12:84:e4:29:83: 19:ff:c5:13:c5:89:58:85:d7:23:cc:18:3d:dc:88: 13:c5:d9:45:2f:af:ac:37:fa:83:e9:99:86:48:20: ac:36:70:b5:8a:1f:ab:48:a5:7c:96:93:e9:79:7a: a4:0d:50:fb:cc:03:62:5a:0d:a4:76:4c:be:0c:64: 78:f0:13:e4:92:53:0a:7f:ef:cc:15:0a:07:0c:cf: 0f:75:4d:c8:ac:d6:16:47:fa:7e:10:50:81:fc:95: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DD:72:7F:76:8A:95:5D:2E:10:A6:DF:19:17:52:C9:16:57:DD:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 173.212.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c6:5f:e9:3b:eb:29:58:d2:5c:55:ee:c5:ac:54:81:33:6d: 61:3b:d6:25:2f:96:d9:2f:ff:ff:9f:99:3d:a3:01:55:d7:4d: bc:22:63:7a:ab:12:0e:d6:92:5c:f7:4a:da:66:74:c2:b2:59: 75:bb:60:f3:5a:d2:9a:6d:8d:6c:77:f1:ad:39:67:1f:6b:b0: 8b:1f:58:c9:1e:03:b8:88:2e:4a:2d:07:fc:78:78:52:fd:cb: 46:b2:fb:f2:5f:9f:b9:07:25:57:cb:e2:6a:0f:61:8b:71:49: d6:3f:95:23:23:41:df:81:9c:51:4d:8d:4f:dc:45:b4:84:d6: f7:b8:90:44:68:20:26:8a:d3:9f:44:60:cf:12:0f:eb:5b:f5: 60:b1:5d:e3:84:32:ca:5b:ee:d2:89:09:d8:0c:44:66:22:99: 1e:d4:6f:39:0b:e0:3c:56:c9:c2:69:a7:7b:37:29:2b:cb:c6: b9:eb:ea:c8:28:0d:b9:30:39:97:0c:e1:29:63:6e:40:4f:51: fd:2b:2d:b4:42:e3:6c:26:3f:d4:35:0f:40:db:1b:20:ad:11: 81:97:79:a9:6e:ce:52:26:8f:32:62:77:47:ae:89:22:32:0d: fb:43:7d:c9:01:6e:7d:fb:c9:d7:51:92:a8:12:c2:9d:11:dd: 7a:02:6b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0I9PB6rVAMwDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk ZDEwNDBiZTQtZDEzOS00MTAzLWI5NmYtZWVkODZlOGUzOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZbjcJEWbuyhajcTqmp2sz5NqHkZpt2b3q86 FYxRmY8E0d23Vt1930z1gEnPSkNj6uZ3rC/n0BYSQmWz2LZM76mjUr/x6y6FRXbA FHWy1WvFKPvvcgl14N2AceSxqPX9HVdesUrSYeNUFRMdD4wHH245OAKQMTB2d4mF I556NdMpvk5r+3jNaAl4GP2P8py1SSLlN+VXkP+LAA2VEk+iEoTkKYMZ/8UTxYlY hdcjzBg93IgTxdlFL6+sN/qD6ZmGSCCsNnC1ih+rSKV8lpPpeXqkDVD7zANiWg2k dky+DGR48BPkklMKf+/MFQoHDM8PdU3IrNYWR/p+EFCB/JV6CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzdcn92ipVdLhCm3xkXUskWV92mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvOTdjMTNkY2ItMjY5Ni0z YWY2LTk5MWEtZmNjNTNjZDU1YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrdRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHGX+k76ylY0lxV7sWsVIEzbWE71iUvltkv//+fmT2jAVXXTbwiY3qr Eg7Wklz3StpmdMKyWXW7YPNa0pptjWx38a05Zx9rsIsfWMkeA7iILkotB/x4eFL9 y0ay+/Jfn7kHJVfL4moPYYtxSdY/lSMjQd+BnFFNjU/cRbSE1ve4kERoICaK059E YM8SD+tb9WCxXeOEMspb7tKJCdgMRGYimR7UbzkL4DxWycJpp3s3KSvLxrnr6sgo DbkwOZcM4SljbkBPUf0rLbRC42wmP9Q1D0DbGyCtEYGXealuzlImjzJid0euiSIy DftDfckBbn37yddRkqgSwp0R3XoCaws= -----END CERTIFICATE-----Generated at Mon May 5 07:09:35 2025 by rpki-client