$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/2446a41a-ace6-3205-87b3-6c3389f78052.roa File: 2446a41a-ace6-3205-87b3-6c3389f78052.roa (raw, json) Hash identifier: SY4mwBSO6iWuQ6wKp21AJEXhprS59Wo4Syrp0yn7Up8= Subject key identifier: 9D:EA:AE:F8:8F:83:56:99:E5:87:9D:EA:C4:07:4C:E2:E6:F7:C8:70 Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Certificate serial: 010D0C9F43285848F22C6F70583452577EA1B380 Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/2446a41a-ace6-3205-87b3-6c3389f78052.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 35874 IP address blocks: 69.58.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6f:70:58:34:52:57:7e:a1:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=e8fe5595-a548-4b35-82ab-b2ebf934167a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:f1:4d:d7:fd:20:ee:e3:86:57:8c:7f:ba: fa:68:a6:07:c0:a9:8c:88:ca:6f:7f:77:3a:d8:1c: 9c:05:54:ab:18:24:73:c4:34:a3:e6:6f:ae:69:78: d0:5e:6c:d8:06:ca:b1:29:10:49:17:a1:d6:76:38: 29:e8:2b:2b:01:d3:c1:6e:0d:4c:b0:19:f6:f2:51: 64:1d:8c:39:27:79:34:fa:ab:9e:c7:db:06:e9:e7: 28:b7:00:78:0e:b8:8c:ef:ca:3e:8d:b1:ad:9a:3c: b6:18:05:45:f5:b3:fa:49:f9:9e:27:9d:33:e0:a5: e9:63:68:a5:b9:c5:62:9a:cf:d4:89:32:82:84:a7: 41:5a:bf:d0:f3:bd:ed:33:b5:f3:45:97:dd:d5:1c: 39:2f:ba:85:1d:93:3a:fe:b8:6a:c8:a8:de:ef:9a: 49:83:38:93:06:84:f8:c0:a1:2c:e8:44:47:b1:02: f2:c1:70:8b:f4:f2:c7:9c:58:4a:ec:5a:a3:21:ff: 1c:c5:82:35:f5:42:fa:3a:3c:a1:e9:b0:67:02:49: 66:60:bd:f2:4c:86:22:82:53:81:17:a0:e7:86:55: 6e:37:ef:02:55:f0:ef:ca:95:e7:60:88:e8:a0:14: fc:6d:a3:54:da:3c:e2:ef:1b:ee:87:dc:21:9f:da: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EA:AE:F8:8F:83:56:99:E5:87:9D:EA:C4:07:4C:E2:E6:F7:C8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/2446a41a-ace6-3205-87b3-6c3389f78052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl X509v3 Authority Key Identifier: keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer sbgp-ipAddrBlock: critical IPv4: 69.58.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c4:59:eb:03:de:08:36:55:e8:ca:6d:1c:10:5b:5e:73:92: 09:ee:2e:12:36:91:6e:1c:2e:b4:c1:23:be:27:b2:12:48:0b: aa:75:bd:6c:e8:a1:b8:0a:3d:34:a6:17:80:93:d3:f6:85:d7: 5e:9e:26:04:12:8b:cd:94:f4:e2:b3:4f:0a:30:b5:9a:7e:aa: bb:00:8c:f4:0b:37:60:af:b3:45:cf:ab:ab:bf:0e:e0:61:1c: 66:8f:9d:56:ea:33:b0:ae:7d:27:7f:11:41:ee:33:ff:e7:f9: 84:e2:b1:ed:de:af:1f:b0:23:de:3b:b7:9f:1d:2c:97:76:76: e2:7b:b6:b7:fa:90:04:b0:7d:7b:db:0a:86:25:00:4c:d1:e4: fa:67:ec:ce:db:fc:8e:68:88:b3:7e:69:97:cf:96:69:4c:92: 35:50:19:a6:c4:70:2d:82:ed:8f:ab:72:f6:0c:26:ed:3e:68: 02:ce:6d:11:98:07:34:4a:cb:27:89:31:bd:81:24:83:45:58: c1:44:d6:e1:f5:7a:8b:36:15:f8:3d:a7:1e:6a:84:4f:d0:9b: af:e2:20:be:9b:43:17:72:79:27:f3:a3:e7:0b:67:7c:67:38: be:c2:d5:db:04:be:a0:72:c7:3c:c7:e9:75:3c:17:79:f7:18: d4:39:d4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG9wWDRSV36hs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0 NmZmMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZThmZTU1OTUtYTU0OC00YjM1LTgyYWItYjJlYmY5MzQxNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOPxTdf9IO7jhleMf7r6aKYHwKmMiMpvf3c6 2BycBVSrGCRzxDSj5m+uaXjQXmzYBsqxKRBJF6HWdjgp6CsrAdPBbg1MsBn28lFk HYw5J3k0+quex9sG6ecotwB4DriM78o+jbGtmjy2GAVF9bP6SfmeJ50z4KXpY2il ucVims/UiTKChKdBWr/Q873tM7XzRZfd1Rw5L7qFHZM6/rhqyKje75pJgziTBoT4 wKEs6ERHsQLywXCL9PLHnFhK7FqjIf8cxYI19UL6Ojyh6bBnAklmYL3yTIYiglOB F6DnhlVuN+8CVfDvypXnYIjooBT8baNU2jzi7xvuh9whn9ozhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3qrviPg1aZ5Yed6sQHTOLm98hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5 NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvMjQ0NmE0MWEtYWNlNi0z MjA1LTg3YjMtNmMzMzg5Zjc4MDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0 NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2 N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARToqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrEWesD3gg2VejKbRwQW15zkgnuLhI2kW4cLrTBI74nshJIC6p1vWzo obgKPTSmF4CT0/aF116eJgQSi82U9OKzTwowtZp+qrsAjPQLN2Cvs0XPq6u/DuBh HGaPnVbqM7CufSd/EUHuM//n+YTise3erx+wI947t58dLJd2duJ7trf6kASwfXvb CoYlAEzR5Ppn7M7b/I5oiLN+aZfPlmlMkjVQGabEcC2C7Y+rcvYMJu0+aALObRGY BzRKyyeJMb2BJINFWMFE1uH1eos2Ffg9px5qhE/Qm6/iIL6bQxdyeSfzo+cLZ3xn OL7C1dsEvqByxzzH6XU8F3n3GNQ51DE= -----END CERTIFICATE-----Generated at Sat May 10 20:45:22 2025 by rpki-client