$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/bad4cb5f-e97a-386c-9312-d8e01063d43c.roa File: bad4cb5f-e97a-386c-9312-d8e01063d43c.roa (raw, json) Hash identifier: zw2ULgT34raVRieoMWdLlGhJW6/7XtASv+TZhCwW6I8= Subject key identifier: 5A:2B:BE:90:E3:43:EF:4A:03:26:E2:85:DD:F9:88:C1:C4:0A:CA:51 Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Certificate serial: 010D0C9F43285849D16511084E511ADEA104F000 Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/bad4cb5f-e97a-386c-9312-d8e01063d43c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 35874 IP address blocks: 69.58.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:11:08:4e:51:1a:de:a1:04:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=d74acbc5-7382-4d40-8486-f5621d64c9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:dd:91:59:e5:c2:f9:de:cc:d2:b9:0e:75: c3:cb:4d:69:d6:a6:b7:12:5b:4c:d4:59:25:ba:63: e8:ba:b4:fd:32:a8:18:a9:df:50:b5:4e:b1:28:f0: 90:db:b5:c4:8a:11:b7:e3:a5:da:fb:7d:53:10:91: 04:67:d4:9f:41:25:11:4e:cf:aa:54:39:5e:26:72: 04:f5:73:d4:4c:a5:2f:94:f0:ff:3a:37:ca:cc:d5: f2:27:a5:38:50:d7:f1:58:a5:9c:8b:02:b7:f1:de: 0d:ab:b4:1c:5a:3a:31:fa:47:40:6b:b1:ed:e1:aa: 8d:ef:c6:a6:f7:5e:36:63:42:ca:5e:68:91:8b:d2: b7:88:9c:64:c0:89:3d:2c:37:6e:ba:b7:35:c6:6c: 23:15:c7:ef:6d:af:ad:71:0b:37:c1:e4:96:0b:82: 6d:53:2d:25:c2:7c:7e:db:39:1e:37:55:da:9b:0b: b6:9c:36:af:3d:de:d3:57:ac:b3:78:c5:40:55:00: 6f:28:27:79:93:45:a1:b6:6f:a8:68:08:a7:66:94: 76:b8:ad:e8:c5:d5:92:92:57:cf:a3:25:3a:05:eb: 4d:f1:5c:f7:35:aa:e0:3b:48:83:5d:63:6c:c3:46: 9d:c5:29:2d:2f:5e:66:3b:b5:7a:ed:18:ee:aa:4a: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2B:BE:90:E3:43:EF:4A:03:26:E2:85:DD:F9:88:C1:C4:0A:CA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/bad4cb5f-e97a-386c-9312-d8e01063d43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl X509v3 Authority Key Identifier: keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer sbgp-ipAddrBlock: critical IPv4: 69.58.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c3:9d:f7:b3:77:7b:e5:12:73:8a:2a:8c:e5:58:61:69:53: 43:e0:da:ea:7e:49:22:45:20:b4:74:07:11:ad:71:76:4e:f8: 1c:4b:99:ae:a6:db:22:31:5e:00:1a:99:63:f9:eb:0b:27:9c: b0:4b:a0:27:15:37:57:11:d5:3e:59:5f:3a:73:7a:00:3b:50: 7e:51:09:33:89:79:38:0f:67:64:91:a5:27:c1:9e:78:10:12: 5b:c5:cf:6e:30:28:88:9b:e7:4b:89:a8:37:7c:47:f5:f2:66: 25:df:e2:17:e0:ea:df:d8:1b:e4:c4:25:46:02:ad:57:f9:d0: f4:4f:4a:bd:5a:7e:34:bb:22:1e:27:20:82:b7:db:b1:52:c5: 6b:01:9b:f4:02:eb:0f:95:2f:bc:c6:5b:f1:af:2e:bd:f9:81: 34:ef:10:09:15:0b:95:b3:ba:88:ba:8e:ef:d7:42:5c:0e:65: 13:39:92:46:16:4f:72:79:0a:a5:ee:61:d4:4a:48:2b:f9:24: 71:f9:9b:3d:ed:a6:69:aa:f7:14:c6:da:01:31:05:d1:72:8f: a2:54:d3:dc:91:03:bc:1d:2d:b1:36:96:13:4b:42:46:73:44: f9:25:60:5f:f3:b6:c4:ee:eb:72:1b:fe:73:13:d0:17:56:fe: 45:ca:ec:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZREITlEa3qEE8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0 NmZmMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZDc0YWNiYzUtNzM4Mi00ZDQwLTg0ODYtZjU2MjFkNjRjOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTjdkVnlwvnezNK5DnXDy01p1qa3EltM1Fkl umPourT9MqgYqd9QtU6xKPCQ27XEihG346Xa+31TEJEEZ9SfQSURTs+qVDleJnIE 9XPUTKUvlPD/OjfKzNXyJ6U4UNfxWKWciwK38d4Nq7QcWjox+kdAa7Ht4aqN78am 9142Y0LKXmiRi9K3iJxkwIk9LDduurc1xmwjFcfvba+tcQs3weSWC4JtUy0lwnx+ 2zkeN1Xamwu2nDavPd7TV6yzeMVAVQBvKCd5k0Whtm+oaAinZpR2uK3oxdWSklfP oyU6BetN8Vz3NargO0iDXWNsw0adxSktL15mO7V67RjuqkoIawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFForvpDjQ+9KAybihd35iMHECspRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5 NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvYmFkNGNiNWYtZTk3YS0z ODZjLTkzMTItZDhlMDEwNjNkNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0 NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2 N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7Dnfezd3vlEnOKKozlWGFpU0Pg2up+SSJFILR0BxGtcXZO+BxLma6m 2yIxXgAamWP56wsnnLBLoCcVN1cR1T5ZXzpzegA7UH5RCTOJeTgPZ2SRpSfBnngQ ElvFz24wKIib50uJqDd8R/XyZiXf4hfg6t/YG+TEJUYCrVf50PRPSr1afjS7Ih4n IIK327FSxWsBm/QC6w+VL7zGW/GvLr35gTTvEAkVC5Wzuoi6ju/XQlwOZRM5kkYW T3J5CqXuYdRKSCv5JHH5mz3tpmmq9xTG2gExBdFyj6JU09yRA7wdLbE2lhNLQkZz RPklYF/ztsTu63Ib/nMT0BdW/kXK7BI= -----END CERTIFICATE-----Generated at Sun Jun 29 19:12:54 2025 by rpki-client