$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa File: 4305d133-1886-3cea-8f72-7f6bc4e75a43.roa (raw, json) Hash identifier: 6YArVJAnOinICV+CyDsQuf7xRee9yEC0SRA+cDFnq84= Subject key identifier: 82:22:20:E9:90:B4:FD:5B:B0:CE:B9:B5:0D:FD:49:89:66:0C:D5:CE Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F432858489E6B6A51780BF2C5C417CC80 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 69.7.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6a:51:78:0b:f2:c5:c4:17:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=fcd95238-b1eb-4af7-9584-a340a49d6544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:95:00:84:6a:fb:20:4d:24:54:f4:c1:54: 79:b1:41:38:bb:bc:7a:4d:e2:39:ff:e8:1f:24:a8: a2:84:03:a9:60:3b:d0:1b:07:12:cb:9f:8d:a1:e9: 04:3c:40:5a:3f:c6:61:0d:2a:09:af:f3:64:56:22: bf:8e:cf:c5:37:8c:09:af:de:95:c8:f2:7b:60:ff: 80:47:b6:e3:bc:7d:d9:4e:2a:06:d1:f9:ab:69:53: 30:10:12:b7:1d:47:76:5a:35:bf:8f:d2:bb:17:4b: 16:8e:a4:13:df:f8:d8:87:e9:c6:99:b0:5e:a2:28: 99:a2:b1:c5:2d:6e:57:f9:91:57:55:09:ad:e6:91: ab:6e:05:4c:f1:b1:f6:a8:e0:3c:40:09:f0:49:ce: 35:bc:54:61:47:f2:c4:d2:a0:fe:d8:f8:ef:d6:47: fb:c4:fe:ee:aa:bd:19:c4:ee:61:da:66:af:eb:64: 6f:af:52:b2:a2:22:3a:2a:f3:93:20:59:df:93:4d: 42:53:ff:cf:fe:03:70:dd:ec:48:f0:a5:c3:d7:33: 72:96:a3:96:a1:0b:12:ac:e9:16:7b:e1:53:5a:20: c8:b5:f2:0a:83:39:9c:f5:75:4b:24:d5:3a:b1:35: 1e:f5:54:d9:b8:cf:b6:72:95:3d:81:d3:7d:05:2f: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:20:E9:90:B4:FD:5B:B0:CE:B9:B5:0D:FD:49:89:66:0C:D5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 69.7.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cf:9e:e0:82:dd:46:b9:4b:8b:26:90:36:dd:95:ab:d3:e3: 28:32:d1:d0:27:6b:81:5e:e6:1a:64:07:de:4f:b2:14:a5:67: c0:f7:01:99:f2:6b:47:51:58:49:2a:60:d8:ad:b6:57:12:73: 4e:01:37:b4:ff:0a:d7:ea:d4:e6:64:3e:5e:0d:3b:f3:a4:cb: 59:f5:8a:b7:ed:83:79:46:98:4b:23:08:f5:f8:97:75:6f:73: 7f:6f:32:d6:b6:3a:b0:34:b1:ba:ba:08:25:31:03:33:7b:07: 14:54:62:27:2c:30:f2:0e:c9:7a:5a:e5:9b:19:e3:89:52:c5: 3d:d3:b6:0d:a0:98:bf:1b:ad:c7:fd:1b:64:c4:06:76:e8:d2: 36:52:bc:75:cd:a0:2f:4d:06:a5:31:f9:e7:cf:f9:09:bd:a8: 66:04:d6:7f:d2:9f:bf:03:30:01:8f:50:03:f9:49:18:ad:cd: 4a:bf:79:a2:32:90:ca:2c:96:4c:be:a4:42:6a:5e:a0:e8:07: 04:da:12:b2:02:e5:46:57:bc:ca:ab:f4:20:51:09:9b:74:e1: 84:3d:3e:cf:a3:40:8c:59:48:23:9e:dd:d1:23:9f:79:9e:7b: 46:18:4c:c1:df:12:fd:5e:eb:a5:9e:5c:c8:4d:ec:3b:88:ce: 37:88:6a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2pReAvyxcQXzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmNkOTUyMzgtYjFlYi00YWY3LTk1ODQtYTM0MGE0OWQ2NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9iVAIRq+yBNJFT0wVR5sUE4u7x6TeI5/+gf JKiihAOpYDvQGwcSy5+NoekEPEBaP8ZhDSoJr/NkViK/js/FN4wJr96VyPJ7YP+A R7bjvH3ZTioG0fmraVMwEBK3HUd2WjW/j9K7F0sWjqQT3/jYh+nGmbBeoiiZorHF LW5X+ZFXVQmt5pGrbgVM8bH2qOA8QAnwSc41vFRhR/LE0qD+2Pjv1kf7xP7uqr0Z xO5h2mav62Rvr1KyoiI6KvOTIFnfk01CU//P/gNw3exI8KXD1zNylqOWoQsSrOkW e+FTWiDItfIKgzmc9XVLJNU6sTUe9VTZuM+2cpU9gdN9BS/5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIiIOmQtP1bsM65tQ39SYlmDNXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvNDMwNWQxMzMtMTg4Ni0z Y2VhLThmNzItN2Y2YmM0ZTc1YTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/PnuCC3Ua5S4smkDbdlavT4ygy0dAna4Fe5hpkB95PshSlZ8D3AZny a0dRWEkqYNittlcSc04BN7T/Ctfq1OZkPl4NO/Oky1n1irftg3lGmEsjCPX4l3Vv c39vMta2OrA0sbq6CCUxAzN7BxRUYicsMPIOyXpa5ZsZ44lSxT3Ttg2gmL8brcf9 G2TEBnbo0jZSvHXNoC9NBqUx+efP+Qm9qGYE1n/Sn78DMAGPUAP5SRitzUq/eaIy kMoslky+pEJqXqDoBwTaErIC5UZXvMqr9CBRCZt04YQ9Ps+jQIxZSCOe3dEjn3me e0YYTMHfEv1e66WeXMhN7DuIzjeIahc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:42 2025 by rpki-client