$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa File: 9b933b8a-dbdd-3487-9952-d09b51c4e640.roa (raw, json) Hash identifier: 2riS42+fNJdvWzxe3/K5HCkAIlc8bgWx+gRmOnRuMAY= Subject key identifier: 5C:EA:DC:FC:AB:55:41:F5:CC:E6:CD:DC:10:8F:44:B7:08:16:EA:86 Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F432858491246ABA96AC9C30681FE7200 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 20454 IP address blocks: 69.160.36.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ab:a9:6a:c9:c3:06:81:fe:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=22eb5c84-ab4b-401c-a5d2-018e2db16075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:a7:ca:11:47:3c:cd:02:d8:02:cb:b3:b2: 6c:d2:cc:02:7e:2b:c6:da:f8:3b:35:7c:55:f3:02: 68:7c:7a:56:18:0d:ec:a9:c8:40:b6:99:e4:5b:fd: a7:61:1d:45:ac:67:62:2c:c0:c5:f2:b7:b4:ad:fb: 16:a0:ad:5f:ee:ce:7c:af:37:74:6e:ae:28:62:b2: ca:56:59:3f:e2:3b:16:65:64:4e:3d:2d:0c:51:86: 6c:a5:2a:36:97:b9:59:ae:ba:42:14:82:4a:86:58: 8b:03:5c:af:f9:eb:6f:74:e9:4a:67:a6:05:9f:20: 49:11:d5:e8:25:05:23:50:c4:0b:ad:cd:7f:fa:1b: 53:51:68:88:5e:79:b9:ed:21:b2:88:6d:e1:09:47: 97:d3:1f:e9:f6:d0:5c:70:9d:e3:90:d4:0a:8d:f9: 2a:8b:67:22:f8:65:61:1d:19:74:ec:f1:34:19:2b: c3:11:0b:05:22:61:51:b8:28:23:12:70:e1:92:ce: e1:93:94:a2:bb:0d:30:c2:9b:a4:6b:0c:19:14:9b: d1:11:d3:db:9a:fc:a9:8a:3b:c8:69:91:17:4f:67: a2:96:d6:a2:97:58:71:13:d8:e6:c0:03:c2:5e:2b: 87:64:47:8a:b9:66:86:72:62:71:ec:0c:f6:d3:84: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EA:DC:FC:AB:55:41:F5:CC:E6:CD:DC:10:8F:44:B7:08:16:EA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/9b933b8a-dbdd-3487-9952-d09b51c4e640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv4: 69.160.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:24:5c:ea:e0:7b:d2:06:84:f6:7b:ae:9d:2f:a8:8a:72:56: 83:0c:7c:dd:cb:8a:bb:1b:cc:39:3b:2b:3e:88:a5:53:94:04: 48:73:7a:69:18:ab:f7:92:74:c1:0d:f2:e0:96:ce:5c:63:98: de:2f:87:c5:45:21:de:b5:7c:ff:b4:ee:90:19:82:ab:1e:7f: 84:17:3e:52:0a:a4:6c:ed:66:14:7b:c9:e7:45:3f:fe:86:eb: d3:1e:da:15:5a:a2:ff:55:e2:6e:e3:a6:0d:85:2b:88:85:e9: 81:9f:96:86:ac:5b:d4:56:3b:91:f6:31:95:33:de:f9:c1:2e: 37:0a:cb:b8:0b:02:23:0f:e3:7f:57:b8:bb:58:02:b2:04:a8: 6f:ab:5d:4a:aa:2b:98:09:b6:8c:4e:27:5c:a6:95:d0:80:1f: 1b:21:6a:2e:df:4e:fc:aa:be:b0:13:2e:99:a6:a2:fa:38:a3: 9f:d6:dd:96:2f:7c:32:b8:50:cc:27:30:55:36:24:4f:a4:61: ea:36:5d:70:ec:e6:24:0b:0c:f7:57:17:70:35:de:77:0c:47: 22:44:8c:4b:98:b2:bb:cc:ae:8f:73:1d:41:5b:e6:e3:c1:ac: e0:95:fa:08:ec:26:60:02:51:56:60:d7:e0:99:6a:b1:43:98: 0b:5a:f3:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqupasnDBoH+cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MjJlYjVjODQtYWI0Yi00MDFjLWE1ZDItMDE4ZTJkYjE2MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioynyhFHPM0C2ALLs7Js0swCfivG2vg7NXxV 8wJofHpWGA3sqchAtpnkW/2nYR1FrGdiLMDF8re0rfsWoK1f7s58rzd0bq4oYrLK Vlk/4jsWZWROPS0MUYZspSo2l7lZrrpCFIJKhliLA1yv+etvdOlKZ6YFnyBJEdXo JQUjUMQLrc1/+htTUWiIXnm57SGyiG3hCUeX0x/p9tBccJ3jkNQKjfkqi2ci+GVh HRl07PE0GSvDEQsFImFRuCgjEnDhks7hk5Siuw0wwpukawwZFJvREdPbmvypijvI aZEXT2eiltail1hxE9jmwAPCXiuHZEeKuWaGcmJx7Az204SJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzq3PyrVUH1zObN3BCPRLcIFuqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvOWI5MzNiOGEtZGJkZC0z NDg3LTk5NTItZDA5YjUxYzRlNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRaAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABckXOrge9IGhPZ7rp0vqIpyVoMMfN3LirsbzDk7Kz6IpVOUBEhzemkY q/eSdMEN8uCWzlxjmN4vh8VFId61fP+07pAZgqsef4QXPlIKpGztZhR7yedFP/6G 69Me2hVaov9V4m7jpg2FK4iF6YGfloasW9RWO5H2MZUz3vnBLjcKy7gLAiMP439X uLtYArIEqG+rXUqqK5gJtoxOJ1ymldCAHxshai7fTvyqvrATLpmmovo4o5/W3ZYv fDK4UMwnMFU2JE+kYeo2XXDs5iQLDPdXF3A13ncMRyJEjEuYsrvMro9zHUFb5uPB rOCV+gjsJmACUVZg1+CZarFDmAta86A= -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:17 2025 by rpki-client