$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa File: 9f473396-3958-39ad-8347-00413e951173.roa (raw, json) Hash identifier: s5MHaxouuYS6Mwnm1nIeBNu9LYafiYj3mp6loiSFnR8= Subject key identifier: C8:2F:3B:EC:4D:96:CE:9B:CC:7E:2C:F6:EA:51:75:91:7B:C3:36:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584A4BE9E201C07CF184EA650F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa Signing time: Tue 24 Jun 2025 10:17:38 +0000 ROA not before: Tue 24 Jun 2025 10:17:38 +0000 ROA not after: Mon 22 Sep 2025 10:17:38 +0000 asID: 399073 IP address blocks: 69.17.6.0/24 maxlen: 24 69.17.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4b:e9:e2:01:c0:7c:f1:84:ea:65:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 24 10:17:38 2025 GMT Not After : Sep 22 10:17:38 2025 GMT Subject: CN=de9e6111-b33a-40da-a525-64496f3fbebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:b7:f5:7f:50:49:5d:42:08:dc:f1:c7:1b: dd:9c:ed:1a:19:b3:36:08:12:ca:9a:76:87:10:a2: a3:20:8b:4b:fb:eb:2e:92:df:df:47:81:91:a4:55: 39:2b:df:03:39:9b:02:89:4c:27:c9:d5:2d:89:81: 34:d0:0d:8a:41:8c:aa:ce:14:8d:e6:82:0c:11:45: c3:4d:37:a4:20:90:65:e6:1b:a1:a8:fa:75:1d:17: 09:8f:1b:14:db:53:72:a7:b7:d9:b8:1b:9e:94:87: f4:e2:7c:fc:00:35:6e:39:5c:83:7d:6d:30:46:16: 57:9a:89:fc:e5:8c:66:aa:f3:8d:dc:cf:f5:81:d5: 33:65:f2:a6:e1:8f:b4:29:04:1f:55:2f:5b:c9:5f: e0:15:25:97:e8:87:67:94:81:2f:91:55:36:54:c0: c7:5f:0c:7e:af:45:e7:85:19:01:b8:47:e6:99:df: 82:33:45:e2:aa:35:42:d7:9e:5f:70:ce:dc:7d:67: 55:5c:a0:e7:c1:d8:70:df:2f:96:8a:b2:48:c4:51: a9:fc:be:cb:b3:0c:45:93:51:55:3f:4f:c7:9d:29: 07:34:94:86:33:fa:2c:d4:2d:3f:75:6f:19:f8:7e: 52:e9:e6:0c:f1:60:51:16:5f:f0:77:71:d1:71:8d: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2F:3B:EC:4D:96:CE:9B:CC:7E:2C:F6:EA:51:75:91:7B:C3:36:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b5:66:77:0b:02:96:dc:d8:a3:79:30:06:2b:83:22:31:08: d7:ad:d9:ed:09:95:02:a6:b6:3e:54:1d:fc:89:95:9c:ee:55: b1:c1:cd:d2:ff:07:db:1f:92:79:e4:4a:0e:55:50:34:07:3d: a9:b7:75:a2:77:09:1a:cc:a1:6e:2f:2f:32:89:92:3d:4b:11: d6:df:7e:04:38:6a:43:3c:c8:13:83:38:e7:3a:9c:ae:9b:8b: bb:13:d0:87:09:5d:a6:6f:fc:e2:35:79:74:fb:c6:64:7f:c1: 8a:57:00:16:6b:97:80:4c:f2:2e:e7:5d:30:59:72:e9:9a:f9: 1e:01:b7:db:7c:9b:f5:04:fd:b4:ff:32:07:da:6a:8c:c6:ad: a3:fd:34:5c:83:27:05:b6:51:1c:21:5d:d4:ce:ed:b7:8d:19: 11:f5:1e:22:21:02:60:31:99:59:ad:3c:02:33:25:fc:4e:8d: 7b:d8:8c:52:15:aa:cc:da:31:48:f2:69:00:df:e0:e5:a5:48: 4a:fc:e0:95:e6:04:f1:11:f1:f0:c8:17:25:df:de:d9:5d:fc: 36:67:8c:76:5d:15:d6:4b:00:e1:28:10:af:2f:9b:21:04:11: c6:a4:d1:d3:00:93:07:8e:18:3e:52:60:af:17:89:62:37:eb: e7:b4:df:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpL6eIBwHzxhOplD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDYyNDEwMTczOFoXDTI1MDkyMjEwMTczOFowLzEtMCsGA1UEAxMk ZGU5ZTYxMTEtYjMzYS00MGRhLWE1MjUtNjQ0OTZmM2ZiZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNW39X9QSV1CCNzxxxvdnO0aGbM2CBLKmnaH EKKjIItL++sukt/fR4GRpFU5K98DOZsCiUwnydUtiYE00A2KQYyqzhSN5oIMEUXD TTekIJBl5huhqPp1HRcJjxsU21Nyp7fZuBuelIf04nz8ADVuOVyDfW0wRhZXmon8 5YxmqvON3M/1gdUzZfKm4Y+0KQQfVS9byV/gFSWX6IdnlIEvkVU2VMDHXwx+r0Xn hRkBuEfmmd+CM0XiqjVC155fcM7cfWdVXKDnwdhw3y+WirJIxFGp/L7LswxFk1FV P0/HnSkHNJSGM/os1C0/dW8Z+H5S6eYM8WBRFl/wd3HRcY3nkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgvO+xNls6bzH4s9upRdZF7wzakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWY0NzMzOTYtMzk1OC0z OWFkLTgzNDctMDA0MTNlOTUxMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRREGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq1ZncLApbc2KN5MAYrgyIxCNet2e0JlQKmtj5UHfyJlZzuVbHBzdL/ B9sfknnkSg5VUDQHPam3daJ3CRrMoW4vLzKJkj1LEdbffgQ4akM8yBODOOc6nK6b i7sT0IcJXaZv/OI1eXT7xmR/wYpXABZrl4BM8i7nXTBZcuma+R4Bt9t8m/UE/bT/ MgfaaozGraP9NFyDJwW2URwhXdTO7beNGRH1HiIhAmAxmVmtPAIzJfxOjXvYjFIV qszaMUjyaQDf4OWlSEr84JXmBPER8fDIFyXf3tld/DZnjHZdFdZLAOEoEK8vmyEE Ecak0dMAkweOGD5SYK8XiWI36+e03xc= -----END CERTIFICATE-----Generated at Thu Jul 3 09:18:31 2025 by rpki-client