$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa File: 565d44ec-bec4-3ec2-934f-75404fa3de9f.roa (raw, json) Hash identifier: XECgsz8Lx4lzY0uKt93mmqMh9SK2AVIc6Jl8kCIB2Qs= Subject key identifier: 79:09:6D:40:8A:94:78:00:BF:5B:1A:ED:AC:4A:BD:C4:34:6D:EB:C3 Certificate issuer: /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6 Certificate serial: 010D0C9F4328584921840016DDC3A995F8856900 Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 3257 IP address blocks: 68.69.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:00:16:dd:c3:a9:95:f8:85:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=486bf432-5271-45a1-aad3-bd4db6548550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:97:5a:5f:0a:1e:19:a0:b7:3a:ca:52:cb: 0e:1b:19:f1:d0:b2:c6:ff:9c:ed:9c:37:5f:e3:04: 4c:3c:46:89:95:29:64:dc:dd:dc:14:0e:e9:8a:1c: ca:ef:de:94:33:69:20:41:9e:9c:04:c9:1b:a1:37: e6:c2:96:7c:53:07:0b:70:58:aa:ed:dd:3f:99:16: a0:ac:c0:db:d6:c4:58:d3:74:df:ca:ee:e1:ab:6f: 5d:fb:ac:18:69:9f:34:67:0b:b5:18:da:f3:71:3d: 59:49:0b:d0:df:4d:47:81:85:87:af:be:7a:80:60: 03:db:f8:a1:50:73:05:4a:87:ea:de:cc:48:eb:6c: 18:d3:90:2b:ac:be:c3:d3:9b:3f:d9:26:d8:f2:cb: e0:9c:1d:cc:6b:d7:63:3e:9f:51:a5:f7:a7:26:2a: 57:a6:57:71:1e:4b:d2:ee:d4:1e:f5:e6:b5:6e:99: 25:ce:b6:78:07:f0:ed:92:3c:16:ed:78:74:38:59: 01:86:b1:25:8f:c6:ed:ff:d0:34:a5:03:63:d4:ef: 8a:57:8a:bc:12:71:83:db:6f:fb:81:82:5f:10:a5: 28:02:37:55:30:52:1d:b8:42:e5:cd:f8:15:dd:91: 00:2f:01:02:c6:b7:60:32:0f:9f:d4:61:8b:38:bb: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:09:6D:40:8A:94:78:00:BF:5B:1A:ED:AC:4A:BD:C4:34:6D:EB:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl X509v3 Authority Key Identifier: keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer sbgp-ipAddrBlock: critical IPv4: 68.69.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:39:1d:e4:1f:b0:54:ee:e3:e4:64:4b:be:08:86:9f:c2:4e: 9b:9f:57:9c:6a:9c:cb:b7:3b:27:c9:ad:eb:40:1c:5e:d3:83: e5:f8:dc:d0:8f:9e:ea:4b:16:6b:8f:e1:a0:0e:36:06:c2:ac: 72:d3:c1:fa:8f:b8:f7:c6:da:a4:01:9e:06:03:cc:2d:2c:90: ec:64:b5:f1:1c:ee:35:06:78:3c:44:3a:27:7d:8b:8c:eb:d4: 0d:c5:f0:dc:c7:6b:3b:f7:71:d7:26:3d:bb:09:5f:82:7e:3c: 4a:68:14:9d:9d:c9:c6:a6:68:29:90:9f:8f:14:61:e0:8e:21: 81:f2:ee:8d:db:bd:9e:6d:38:46:34:78:12:55:ed:49:fb:46: b0:8d:05:dd:7b:ba:26:83:61:c0:e3:ae:fc:95:ce:ae:f7:a9: 34:93:ef:f9:7e:d7:63:a3:6c:f4:4f:d5:e9:ae:82:8d:12:ed: 97:33:6c:a3:9e:14:57:a4:25:75:05:e1:23:31:de:55:66:c2: 39:4d:1e:04:ae:fc:f7:7b:10:ca:59:d7:3b:17:0d:7d:21:da: 01:37:2d:3f:8d:f6:b2:26:13:7c:26:e3:85:12:ed:a0:b5:42: 49:14:27:34:a8:8e:77:db:f3:c2:4b:3f:07:0f:9d:68:d1:b7: 8d:ce:09:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAAW3cOplfiFaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1ZmY4YzMtZmFlNS00MDNmLWJlMDItMzgwNzJhZTJk ZGM2MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NDg2YmY0MzItNTI3MS00NWExLWFhZDMtYmQ0ZGI2NTQ4NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSeXWl8KHhmgtzrKUssOGxnx0LLG/5ztnDdf 4wRMPEaJlSlk3N3cFA7pihzK796UM2kgQZ6cBMkboTfmwpZ8UwcLcFiq7d0/mRag rMDb1sRY03Tfyu7hq29d+6wYaZ80Zwu1GNrzcT1ZSQvQ301HgYWHr756gGAD2/ih UHMFSofq3sxI62wY05ArrL7D05s/2SbY8svgnB3Ma9djPp9RpfenJipXpldxHkvS 7tQe9ea1bpklzrZ4B/DtkjwW7Xh0OFkBhrElj8bt/9A0pQNj1O+KV4q8EnGD22/7 gYJfEKUoAjdVMFIduELlzfgV3ZEALwECxrdgMg+f1GGLOLtNyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkJbUCKlHgAv1sa7axKvcQ0bevDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYzVm ZjhjMy1mYWU1LTQwM2YtYmUwMi0zODA3MmFlMmRkYzYvNTY1ZDQ0ZWMtYmVjNC0z ZWMyLTkzNGYtNzU0MDRmYTNkZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGM1ZmY4YzMtZmFlNS00MDNmLWJl MDItMzgwNzJhZTJkZGM2L2RjNWZmOGMzLWZhZTUtNDAzZi1iZTAyLTM4MDcyYWUy ZGRjNi5jcmwwHwYDVR0jBBgwFoAUo+ykYmiJjakTFOimXaT52AJvdbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYzVmZjhjMy1mYWU1LTQwM2YtYmUwMi0zODA3 MmFlMmRkYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREW8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo5HeQfsFTu4+RkS74Ihp/CTpufV5xqnMu3OyfJretAHF7Tg+X43NCP nupLFmuP4aAONgbCrHLTwfqPuPfG2qQBngYDzC0skOxktfEc7jUGeDxEOid9i4zr 1A3F8NzHazv3cdcmPbsJX4J+PEpoFJ2dycamaCmQn48UYeCOIYHy7o3bvZ5tOEY0 eBJV7Un7RrCNBd17uiaDYcDjrvyVzq73qTST7/l+12OjbPRP1emugo0S7ZczbKOe FFekJXUF4SMx3lVmwjlNHgSu/Pd7EMpZ1zsXDX0h2gE3LT+N9rImE3wm44US7aC1 QkkUJzSojnfb88JLPwcPnWjRt43OCQA= -----END CERTIFICATE-----Generated at Mon May 5 11:55:06 2025 by rpki-client