$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/5b7a743b-ad2f-3ba7-b440-851ab9575dfa.roa File: 5b7a743b-ad2f-3ba7-b440-851ab9575dfa.roa (raw, json) Hash identifier: rZCNxc3EaQ1wOr7u8XmG8bPP9QNpdDTddGhzN8hTBGU= Subject key identifier: 7D:0B:EC:D8:E2:59:BE:E5:6E:A7:30:39:96:1A:17:64:49:20:45:6A Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F432858489E6B6A80A1B8F45B67F56480 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/5b7a743b-ad2f-3ba7-b440-851ab9575dfa.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 69.7.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6a:80:a1:b8:f4:5b:67:f5:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=644d8b0c-ec3e-4edc-8343-14f86680734a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:51:c5:52:ea:7e:c0:cc:0e:f8:2c:cd:22: 43:53:8e:86:39:b8:b2:3e:c6:45:47:ac:45:38:28: b6:57:df:cf:5c:bd:6b:d0:7e:85:fb:5c:f8:73:58: a8:62:9e:ac:6e:20:8b:2d:01:c9:89:a4:a8:f7:87: 9d:f9:e9:cf:7d:d8:62:91:07:60:f9:7a:cd:6c:9c: d9:c2:34:5b:bc:11:04:17:f1:7a:31:c1:0c:46:59: c9:62:2e:b9:60:74:3b:70:fa:4d:d7:36:1f:da:c6: f2:75:11:ca:92:a5:f5:7c:d1:56:12:59:12:c6:66: 20:50:62:91:c2:a2:e3:a7:a1:d8:41:88:d6:a1:82: ce:c5:6f:d4:0c:74:8a:c0:18:b0:97:88:6d:bb:cb: 16:ce:4f:84:df:17:18:bf:6f:e2:44:6d:59:1a:70: b4:08:f6:ab:b5:0f:a1:b1:48:45:93:e7:24:be:f3: 68:a1:5a:c9:3c:33:31:54:0f:55:84:99:07:cb:ff: bb:19:65:7e:d4:e9:fe:49:85:83:56:79:99:f9:e6: d5:8d:eb:c2:3f:77:bd:26:c9:5c:3d:ed:b2:a8:c4: 89:8e:01:3e:9d:27:3f:0a:32:6e:e7:2c:52:2e:b2: 1d:32:0f:e4:a7:8d:54:30:a9:f4:b4:3c:67:c5:d0: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0B:EC:D8:E2:59:BE:E5:6E:A7:30:39:96:1A:17:64:49:20:45:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/5b7a743b-ad2f-3ba7-b440-851ab9575dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 69.7.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:dc:60:93:3c:99:64:27:2f:49:00:6b:1a:af:42:5c:e7:4a: 2e:5a:14:84:45:48:4e:f6:cc:70:2d:aa:6d:7c:41:11:c1:17: 48:73:2a:31:27:1a:00:f9:0d:f6:79:0c:ce:0e:ea:d0:f6:ef: a5:c9:4a:93:3c:9b:48:1a:b7:e2:c7:a6:43:ab:3d:d8:4b:51: 65:94:65:83:4b:bf:44:52:79:31:9e:8f:dc:82:e8:84:03:b2: 62:a9:c8:90:ed:79:89:3b:8b:47:ce:5f:50:62:fb:3d:26:5f: 8f:f8:7a:7e:77:f4:b9:76:47:9e:49:fb:b0:e3:f1:5d:89:7a: cd:9d:19:02:17:63:90:08:29:06:ab:37:5a:19:6a:4e:e1:21: 1a:34:c1:b7:88:b1:42:39:75:6e:6a:e5:5f:58:9c:a4:33:63: ff:1f:75:cc:09:30:38:e1:38:87:44:03:18:06:ec:2b:bf:b1: d4:8e:23:d7:19:3a:d3:c1:ec:7f:3c:2d:a0:06:6e:76:eb:cc: 8f:3c:c5:27:fa:84:20:70:a8:65:9d:af:83:fc:2e:77:d9:de: 24:52:9b:97:47:22:aa:96:44:f7:18:8a:a7:19:44:d6:dc:c9: c9:83:13:0c:38:47:a5:e1:9a:fd:28:2a:51:d8:c5:22:72:b5: ca:91:7b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2qAobj0W2f1ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjQ0ZDhiMGMtZWMzZS00ZWRjLTgzNDMtMTRmODY2ODA3MzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjxRxVLqfsDMDvgszSJDU46GObiyPsZFR6xF OCi2V9/PXL1r0H6F+1z4c1ioYp6sbiCLLQHJiaSo94ed+enPfdhikQdg+XrNbJzZ wjRbvBEEF/F6McEMRlnJYi65YHQ7cPpN1zYf2sbydRHKkqX1fNFWElkSxmYgUGKR wqLjp6HYQYjWoYLOxW/UDHSKwBiwl4htu8sWzk+E3xcYv2/iRG1ZGnC0CPartQ+h sUhFk+ckvvNooVrJPDMxVA9VhJkHy/+7GWV+1On+SYWDVnmZ+ebVjevCP3e9Jslc Pe2yqMSJjgE+nSc/CjJu5yxSLrIdMg/kp41UMKn0tDxnxdDLswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0L7NjiWb7lbqcwOZYaF2RJIEVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvNWI3YTc0M2ItYWQyZi0z YmE3LWI0NDAtODUxYWI5NTc1ZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQdNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3cYJM8mWQnL0kAaxqvQlznSi5aFIRFSE72zHAtqm18QRHBF0hzKjEn GgD5DfZ5DM4O6tD276XJSpM8m0gat+LHpkOrPdhLUWWUZYNLv0RSeTGej9yC6IQD smKpyJDteYk7i0fOX1Bi+z0mX4/4en539Ll2R55J+7Dj8V2Jes2dGQIXY5AIKQar N1oZak7hIRo0wbeIsUI5dW5q5V9YnKQzY/8fdcwJMDjhOIdEAxgG7Cu/sdSOI9cZ OtPB7H88LaAGbnbrzI88xSf6hCBwqGWdr4P8LnfZ3iRSm5dHIqqWRPcYiqcZRNbc ycmDEww4R6Xhmv0oKlHYxSJytcqRe7Y= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:08 2025 by rpki-client