$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80f39bcb-051f-3c78-978c-bd1904fc70af.roa File: 80f39bcb-051f-3c78-978c-bd1904fc70af.roa (raw, json) Hash identifier: Mk+UcynZaM3/SrPgfQukLhX02QLsLm+75DPiwqnePqI= Subject key identifier: 84:15:A0:AA:90:21:65:83:D7:41:EC:D6:2E:81:11:E7:2F:AA:90:A8 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285848A830B5D9F3417B6FC66E4C00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80f39bcb-051f-3c78-978c-bd1904fc70af.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 137547 IP address blocks: 69.165.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b5:d9:f3:41:7b:6f:c6:6e:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=5d77c1f7-8304-483e-a4a1-f320cc91b4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:a0:40:49:3e:74:5c:91:24:e3:fd:3f:8c: 3b:e7:7b:e2:3d:90:4a:4d:f8:b6:5c:88:75:1c:4f: 6a:60:04:ed:9f:88:86:68:b2:6f:63:62:09:04:90: ca:a1:99:ed:80:69:c4:5b:cb:08:59:df:17:63:e7: 3a:2d:48:63:8a:b8:3b:63:0d:c4:1c:58:96:da:48: 3d:b0:5e:32:4e:eb:3f:8e:12:20:e4:ee:3e:6a:29: 9f:f1:0d:ba:4a:cb:70:88:d5:c4:c7:23:97:9b:24: 77:f8:c7:3d:49:c7:dd:34:e1:d7:b4:04:d5:d4:2d: 7b:0f:b0:da:92:13:93:68:30:d2:b5:14:7f:cf:f5: f3:77:ce:f2:36:fb:67:f9:2b:b5:c8:33:a4:db:ec: df:d0:f5:af:7b:60:b2:80:8d:9d:c6:96:08:2d:3d: 15:92:83:b8:ed:57:ca:af:68:4e:60:de:df:00:d5: af:ec:da:72:90:15:82:65:b6:73:be:d8:a4:7c:2f: a4:65:c8:58:69:b7:bc:9a:9f:04:61:db:42:a0:65: 31:a8:8d:10:b2:59:3a:66:0a:9d:b3:6f:31:ee:f5: 0c:bc:94:bc:f4:4a:54:54:3b:2a:5e:b5:1c:d7:ed: 3e:17:e8:e3:d5:9b:0f:8d:2e:83:2f:f4:ed:ff:1f: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:15:A0:AA:90:21:65:83:D7:41:EC:D6:2E:81:11:E7:2F:AA:90:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80f39bcb-051f-3c78-978c-bd1904fc70af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 69.165.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:cd:3e:14:00:95:8c:6a:0a:ff:cd:5c:0c:79:97:4b:39:2e: d0:22:e0:12:48:81:58:75:90:bb:5a:19:7e:ac:e2:cf:d0:40: ae:df:7a:b9:3e:58:1e:58:94:30:e9:d1:41:a0:d0:c8:c1:e5: 0d:91:ce:98:dd:46:0a:97:6c:02:77:9a:54:3d:3a:ce:ce:9d: 5a:3e:5d:10:23:30:50:7e:df:fe:b9:49:46:d7:cc:72:ed:7e: ac:65:b2:5e:e7:2d:a4:43:c1:13:b7:08:e3:7a:c8:fe:bb:3e: f2:92:ce:0f:a6:1c:23:53:28:b0:20:c5:ec:bc:2a:23:59:f4: 39:a6:3a:ed:a6:63:8e:6b:6b:fa:e0:cf:f4:d0:14:8f:e5:40: c6:ae:fd:18:82:81:2f:a4:78:cc:06:4a:e4:09:58:5f:4f:0a: 45:c4:04:45:85:ed:fe:50:fd:59:22:29:40:95:77:20:9a:30: 6f:2f:5b:8b:37:07:09:e2:e8:c1:a1:63:b4:05:aa:e1:fa:86: 01:6e:87:55:f8:2d:73:f9:1c:c2:b2:9d:04:95:8b:f7:eb:d2: 02:cc:21:ce:cc:96:c9:1f:bb:7f:4d:63:8e:85:0a:5b:24:5a: 2a:e3:11:8c:0e:c3:58:71:9c:50:0f:5c:e9:b7:6d:3b:e2:87: 99:bd:5d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLXZ80F7b8ZuTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NWQ3N2MxZjctODMwNC00ODNlLWE0YTEtZjMyMGNjOTFiNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJygQEk+dFyRJOP9P4w753viPZBKTfi2XIh1 HE9qYATtn4iGaLJvY2IJBJDKoZntgGnEW8sIWd8XY+c6LUhjirg7Yw3EHFiW2kg9 sF4yTus/jhIg5O4+aimf8Q26SstwiNXExyOXmyR3+Mc9ScfdNOHXtATV1C17D7Da khOTaDDStRR/z/Xzd87yNvtn+Su1yDOk2+zf0PWve2CygI2dxpYILT0VkoO47VfK r2hOYN7fANWv7NpykBWCZbZzvtikfC+kZchYabe8mp8EYdtCoGUxqI0Qslk6Zgqd s28x7vUMvJS89EpUVDsqXrUc1+0+F+jj1ZsPjS6DL/Tt/x8YjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQVoKqQIWWD10Hs1i6BEecvqpCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODBmMzliY2ItMDUxZi0z Yzc4LTk3OGMtYmQxOTA0ZmM3MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRaVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDNPhQAlYxqCv/NXAx5l0s5LtAi4BJIgVh1kLtaGX6s4s/QQK7ferk+ WB5YlDDp0UGg0MjB5Q2RzpjdRgqXbAJ3mlQ9Os7OnVo+XRAjMFB+3/65SUbXzHLt fqxlsl7nLaRDwRO3CON6yP67PvKSzg+mHCNTKLAgxey8KiNZ9DmmOu2mY45ra/rg z/TQFI/lQMau/RiCgS+keMwGSuQJWF9PCkXEBEWF7f5Q/VkiKUCVdyCaMG8vW4s3 Bwni6MGhY7QFquH6hgFuh1X4LXP5HMKynQSVi/fr0gLMIc7Mlskfu39NY46FClsk WirjEYwOw1hxnFAPXOm3bTvih5m9XaQ= -----END CERTIFICATE-----Generated at Wed Apr 9 12:53:46 2025 by rpki-client