$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa File: aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa (raw, json) Hash identifier: dxqUUdkoTXVwv+YgNkihwdo8pAUuG+OErE6XONpu75k= Subject key identifier: BD:07:37:1C:92:9C:65:67:77:DA:1B:E5:FA:76:16:EB:07:1A:CE:03 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F432858498A345E624DF76950B4B63CC0 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 11260 IP address blocks: 71.7.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5e:62:4d:f7:69:50:b4:b6:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=60beafcf-c973-43aa-a505-368f91176e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:20:3e:e2:66:2f:06:43:cb:0d:ad:4b:12: 6f:55:69:a5:78:48:3c:c6:8b:ff:75:78:c5:a5:77: 69:da:02:dc:57:4e:0f:cf:7a:7a:49:35:b4:f0:97: 7f:0d:1b:c9:dc:fe:2f:2c:b5:02:76:d1:fb:a2:05: a8:e8:a5:2a:5e:5c:bb:73:71:5d:42:3c:3f:2d:d9: 73:26:29:7a:46:c8:e0:0c:ed:ac:7b:55:66:ef:31: 49:b9:ab:6c:af:e5:de:5a:3a:ff:83:cd:4b:c0:02: 7a:94:b5:1f:47:de:ca:db:37:dd:45:d3:6b:fb:d0: 4d:2d:18:1d:75:4d:f4:d9:a1:d9:06:6e:23:75:b7: 10:1f:14:6c:a4:25:20:ef:93:3d:71:c0:a8:00:c4: ba:92:08:78:6b:9e:65:5b:bf:8d:66:80:83:a2:ad: 6e:d5:cc:a1:7e:97:a8:36:27:d5:ae:ae:61:f7:db: 02:e4:0c:70:78:c8:2a:82:d3:b8:f0:f9:55:2a:60: 2a:45:3f:37:b4:0e:cc:f8:42:9b:ad:3b:9b:01:84: 13:65:4f:fe:12:12:0a:cb:3e:9a:fc:3a:45:04:42: 25:0c:dc:9c:45:d9:77:da:01:f0:e0:25:99:fa:03: f7:89:07:b1:96:3b:60:34:3c:89:0f:ee:2b:17:73: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:37:1C:92:9C:65:67:77:DA:1B:E5:FA:76:16:EB:07:1A:CE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 71.7.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:47:dc:ba:32:07:1a:78:0a:c0:52:b3:e8:6c:3c:bf:1e:ba: d4:bc:29:ee:5a:3b:67:90:7a:e4:7b:81:2c:b2:73:22:28:29: 9f:69:2a:4f:2a:68:77:92:f2:24:e4:d6:2b:ef:3b:a3:fc:c1: f3:ca:f7:38:12:8d:84:d0:50:c8:99:06:6b:78:68:29:c7:32: 53:e2:ae:6a:55:c2:d4:df:22:b0:4b:24:2c:02:00:1e:59:6c: 0d:91:dc:68:36:d4:42:83:b5:9c:8c:5a:a7:85:2a:27:80:29: 78:d0:d1:45:21:b6:e8:30:51:c6:0e:a5:ba:68:80:b8:8c:6f: 65:69:c4:1a:1d:cc:0a:27:d7:4e:90:e8:61:7a:fd:e7:97:03: 00:a4:9c:65:d8:4f:f4:57:6c:40:38:cf:c2:39:46:3e:fb:f0: 32:b9:73:a7:2b:48:42:0d:56:3a:63:98:4d:a3:b5:c7:79:29: 3f:85:25:9b:55:01:fa:30:91:1a:dd:21:d9:b8:73:da:4a:29: 8b:40:50:ca:0b:14:7f:73:88:07:f9:5b:96:44:5f:18:3d:1d: 37:69:60:e8:2c:94:5e:38:b6:88:f5:a4:93:ba:f0:0d:2a:ef: 9f:0a:40:a1:52:a7:98:c5:fb:3a:b5:a1:2a:01:2b:27:fc:3b: 20:5d:df:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF5iTfdpULS2PMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NjBiZWFmY2YtYzk3My00M2FhLWE1MDUtMzY4ZjkxMTc2ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiIgPuJmLwZDyw2tSxJvVWmleEg8xov/dXjF pXdp2gLcV04Pz3p6STW08Jd/DRvJ3P4vLLUCdtH7ogWo6KUqXly7c3FdQjw/Ldlz Jil6RsjgDO2se1Vm7zFJuatsr+XeWjr/g81LwAJ6lLUfR97K2zfdRdNr+9BNLRgd dU302aHZBm4jdbcQHxRspCUg75M9ccCoAMS6kgh4a55lW7+NZoCDoq1u1cyhfpeo NifVrq5h99sC5AxweMgqgtO48PlVKmAqRT83tA7M+EKbrTubAYQTZU/+EhIKyz6a /DpFBEIlDNycRdl32gHw4CWZ+gP3iQexljtgNDyJD+4rF3ODEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0HNxySnGVnd9ob5fp2FusHGs4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYWE0MGYxZmItOGI4Yi0z NmFhLTg1YzQtNTQxN2VmZmRhYmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRwfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdH3LoyBxp4CsBSs+hsPL8eutS8Ke5aO2eQeuR7gSyycyIoKZ9pKk8q aHeS8iTk1ivvO6P8wfPK9zgSjYTQUMiZBmt4aCnHMlPirmpVwtTfIrBLJCwCAB5Z bA2R3Gg21EKDtZyMWqeFKieAKXjQ0UUhtugwUcYOpbpogLiMb2VpxBodzAon106Q 6GF6/eeXAwCknGXYT/RXbEA4z8I5Rj778DK5c6crSEINVjpjmE2jtcd5KT+FJZtV AfowkRrdIdm4c9pKKYtAUMoLFH9ziAf5W5ZEXxg9HTdpYOgslF44toj1pJO68A0q 758KQKFSp5jF+zq1oSoBKyf8OyBd3wE= -----END CERTIFICATE-----Generated at Mon May 5 11:47:50 2025 by rpki-client