$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa File: a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa (raw, json) Hash identifier: NlirL2Af3/cwNDZEe514KX/NWT1BhSF2i3v4BdXbHT8= Subject key identifier: 3A:53:61:36:A1:9A:AD:3C:CE:C6:64:5E:A0:6A:E6:73:D1:AA:39:A2 Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Certificate serial: 010D0C9F43285848F22C6F6012E9C86470C8DC40 Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 35874 IP address blocks: 69.58.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:6f:60:12:e9:c8:64:70:c8:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=bb7fa980-49a9-4c76-b453-22e1dd35b8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a3:d9:2c:a3:3b:7b:73:78:0e:83:b1:89:c7: 58:db:55:0b:2f:c8:39:f4:ad:9b:d3:fd:29:bd:5c: c0:09:37:bc:e3:43:b1:b8:b7:0d:dd:0f:a4:54:d1: bc:c1:91:c4:02:40:33:34:47:7a:4d:50:5a:d2:14: 44:85:03:ce:0b:e1:76:25:74:d7:7d:3d:2f:3c:e2: 9b:df:4e:b3:d2:0a:93:02:01:04:7a:51:78:ab:d2: 89:9f:bc:c3:c7:3f:b7:bd:41:aa:60:d1:83:8c:f5: d7:7b:f1:c3:49:8e:cc:98:03:9a:60:70:49:38:a2: ad:c4:ef:1e:ea:8e:e6:75:20:ce:4e:4a:f5:47:bd: d7:b0:62:31:b4:88:52:a3:c5:5e:e7:28:cc:a5:20: 85:27:54:3f:09:ad:ad:00:58:56:a9:b1:3c:df:18: 42:92:42:86:5a:e7:d9:1d:e7:de:bb:7e:13:19:00: f3:9e:c4:c1:cf:ef:24:c2:dc:28:35:fd:81:47:1a: dc:eb:85:03:5c:ad:94:fd:5f:f6:08:84:21:ea:5c: b6:32:de:92:85:92:fe:3b:4a:a5:3b:a6:b3:71:c6: e9:f2:ec:44:ce:9e:2b:94:24:81:3e:12:51:80:0b: 40:69:eb:1e:e7:0c:fd:63:46:9b:fd:88:65:60:06: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:61:36:A1:9A:AD:3C:CE:C6:64:5E:A0:6A:E6:73:D1:AA:39:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl X509v3 Authority Key Identifier: keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer sbgp-ipAddrBlock: critical IPv4: 69.58.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:25:26:84:77:26:f5:25:e6:77:9e:1c:c2:36:c7:28:3e:2a: e8:1e:60:80:da:a4:2a:b9:ca:74:f5:bb:7b:58:86:60:6f:6d: 07:de:5a:82:b6:da:72:fb:12:20:78:fd:b1:77:c7:60:19:b6: 79:47:80:7c:dd:b0:c9:9b:8f:b6:0e:c2:68:27:9e:86:1b:af: 7f:aa:8d:73:aa:d4:6c:6a:41:b3:51:97:5d:06:8e:ee:d1:ca: 73:9f:f2:19:45:6b:6b:6b:84:90:4c:5a:50:52:3e:a5:79:5d: 16:0e:86:0e:92:99:6a:68:be:0f:48:42:64:76:53:ca:ac:12: d8:4c:8f:a0:4d:19:ab:00:e6:18:64:43:0e:60:25:46:08:46: ad:6b:f6:57:f6:88:eb:a6:29:96:17:31:79:8a:37:60:28:60: ab:6b:6e:53:54:20:4c:39:dd:e8:ae:c6:9e:a6:a3:f9:b6:2a: f4:54:aa:e1:09:f3:31:8b:36:8e:0b:c5:e9:54:c0:cc:df:80: a9:b1:67:07:1a:ed:a9:c4:bf:2d:8c:94:34:52:22:a4:f1:78: ba:81:f6:8d:27:35:27:01:7f:0d:3a:09:30:31:05:08:5f:7a: 85:69:7a:b2:da:f4:47:fc:7c:bc:23:0c:74:a5:ee:69:db:fb: 9d:20:c7:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG9gEunIZHDI3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0 NmZmMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YmI3ZmE5ODAtNDlhOS00Yzc2LWI0NTMtMjJlMWRkMzViOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaPZLKM7e3N4DoOxicdY21ULL8g59K2b0/0p vVzACTe840OxuLcN3Q+kVNG8wZHEAkAzNEd6TVBa0hREhQPOC+F2JXTXfT0vPOKb 306z0gqTAgEEelF4q9KJn7zDxz+3vUGqYNGDjPXXe/HDSY7MmAOaYHBJOKKtxO8e 6o7mdSDOTkr1R73XsGIxtIhSo8Ve5yjMpSCFJ1Q/Ca2tAFhWqbE83xhCkkKGWufZ Hefeu34TGQDznsTBz+8kwtwoNf2BRxrc64UDXK2U/V/2CIQh6ly2Mt6ShZL+O0ql O6azccbp8uxEzp4rlCSBPhJRgAtAaese5wz9Y0ab/YhlYAbWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpTYTahmq08zsZkXqBq5nPRqjmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5 NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvYTJjMGFiOGYtZjFlZC0z NGM2LTkwNjMtYmNjNmU5NGZiOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0 NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2 N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTopMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYlJoR3JvUl5neeHMI2xyg+KugeYIDapCq5ynT1u3tYhmBvbQfeWoK2 2nL7EiB4/bF3x2AZtnlHgHzdsMmbj7YOwmgnnoYbr3+qjXOq1GxqQbNRl10Gju7R ynOf8hlFa2trhJBMWlBSPqV5XRYOhg6SmWpovg9IQmR2U8qsEthMj6BNGasA5hhk Qw5gJUYIRq1r9lf2iOumKZYXMXmKN2AoYKtrblNUIEw53eiuxp6mo/m2KvRUquEJ 8zGLNo4LxelUwMzfgKmxZwca7anEvy2MlDRSIqTxeLqB9o0nNScBfw06CTAxBQhf eoVperLa9Ef8fLwjDHSl7mnb+50gx6g= -----END CERTIFICATE-----Generated at Wed May 7 18:00:19 2025 by rpki-client