$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/9963c4ab-4443-3d82-9d98-e02e8ed2a43c.roa File: 9963c4ab-4443-3d82-9d98-e02e8ed2a43c.roa (raw, json) Hash identifier: g4vNDEg0r0Ys/+H1AB1+WMJTP0MQbHO8Rz5vXyvcOUc= Subject key identifier: 15:B5:F5:21:1D:72:B1:53:20:36:CD:79:CB:8C:E0:FF:31:48:63:96 Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Certificate serial: 010D0C9F43285848ECB9384C7DDCC864B8118480 Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/9963c4ab-4443-3d82-9d98-e02e8ed2a43c.roa Signing time: Tue 18 Feb 2025 15:10:51 +0000 ROA not before: Tue 18 Feb 2025 15:10:51 +0000 ROA not after: Mon 19 May 2025 14:10:51 +0000 asID: 401166 IP address blocks: 69.31.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:b9:38:4c:7d:dc:c8:64:b8:11:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Validity Not Before: Feb 18 15:10:51 2025 GMT Not After : May 19 14:10:51 2025 GMT Subject: CN=101849f2-6783-4cad-91ba-060f6bc08df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:3c:07:07:96:25:e4:8b:02:e6:2f:d2:db: fb:68:27:59:1e:39:28:26:d8:42:de:f7:0c:b5:eb: cf:34:7d:6f:b8:39:41:c6:55:cb:e6:69:e7:d7:78: c2:a2:05:9c:74:a8:93:fb:d7:fb:70:1d:5f:f6:5f: 91:af:f6:e4:e3:9c:ef:34:c0:ce:97:d7:da:5a:6b: 0e:20:85:a1:45:9b:65:05:de:2a:0d:eb:34:3d:0d: 19:62:c7:38:ce:45:3a:61:ff:f0:da:a7:62:a7:1c: bf:de:6c:d4:46:6b:b0:8e:33:61:c2:d6:a4:fd:df: 01:8b:2c:9d:d8:31:ba:24:0e:10:f5:31:b1:62:eb: 90:bb:1f:36:2c:43:c4:8b:43:c6:d9:73:64:30:e6: 28:ba:32:70:c8:9d:42:59:3a:a4:59:7f:0e:fd:e8: 66:05:d9:4a:28:a1:fe:9b:a6:5d:4d:df:b0:a3:26: 6f:ba:22:1d:53:69:56:b9:96:f0:7a:16:8d:6a:b0: 52:3e:cd:80:95:26:b9:b0:f8:cc:50:25:b7:9b:3c: fe:be:e7:62:49:38:25:c5:0b:bf:94:92:d3:ca:80: bf:8c:11:2f:fe:82:56:c4:c9:8d:18:f3:e0:e5:ee: 58:80:a1:13:1b:23:bd:94:c0:81:e8:5a:e1:62:9c: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B5:F5:21:1D:72:B1:53:20:36:CD:79:CB:8C:E0:FF:31:48:63:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/9963c4ab-4443-3d82-9d98-e02e8ed2a43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl X509v3 Authority Key Identifier: keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer sbgp-ipAddrBlock: critical IPv4: 69.31.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:dc:88:f4:c7:71:6c:5c:82:a9:d8:c3:2f:e6:f9:66:7a:46: 26:4f:6b:be:4c:63:04:d5:03:2f:f7:26:8b:ec:99:fd:16:80: 6b:e0:9c:a3:c5:d7:c6:97:78:d1:b4:48:f5:d1:34:15:2b:52: 4e:56:96:2f:c5:71:18:cd:01:7a:9b:68:6a:03:a8:41:4b:91: 45:a1:22:b7:42:94:78:0c:c3:6a:41:19:ee:0b:40:96:51:f5: ee:22:c8:c3:da:9f:a9:2d:c1:fa:a0:4c:5f:47:4d:c5:e0:81: c3:5e:69:42:26:17:92:92:10:d1:6e:4b:6c:1a:94:e2:24:64: 84:bc:cf:c7:b9:82:12:55:a5:ba:aa:49:1e:6c:d0:99:e3:1e: 6e:12:cf:cd:20:8b:72:3a:5b:98:55:9c:d7:03:80:0e:8f:d1: f7:e4:23:e0:dd:d5:5d:e7:20:4a:4c:e0:3c:c2:ab:e3:c7:5e: 54:44:bb:79:a8:2c:5a:2b:7c:bb:88:bf:78:2d:ec:f8:91:fe: f4:45:98:29:83:07:b0:b6:da:69:81:fb:dd:e5:43:fb:0f:da: 22:5e:d5:c0:41:a0:e9:cf:09:9d:f6:da:1f:44:d5:80:82:4c: 24:1b:e6:9a:b8:62:33:7a:b5:d9:04:b1:d1:ae:c9:c6:b9:81: eb:7f:3d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsuThMfdzIZLgRhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1 Zjk1MB4XDTI1MDIxODE1MTA1MVoXDTI1MDUxOTE0MTA1MVowLzEtMCsGA1UEAxMk MTAxODQ5ZjItNjc4My00Y2FkLTkxYmEtMDYwZjZiYzA4ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOE8BweWJeSLAuYv0tv7aCdZHjkoJthC3vcM tevPNH1vuDlBxlXL5mnn13jCogWcdKiT+9f7cB1f9l+Rr/bk45zvNMDOl9faWmsO IIWhRZtlBd4qDes0PQ0ZYsc4zkU6Yf/w2qdipxy/3mzURmuwjjNhwtak/d8Biyyd 2DG6JA4Q9TGxYuuQux82LEPEi0PG2XNkMOYoujJwyJ1CWTqkWX8O/ehmBdlKKKH+ m6ZdTd+woyZvuiIdU2lWuZbwehaNarBSPs2AlSa5sPjMUCW3mzz+vudiSTglxQu/ lJLTyoC/jBEv/oJWxMmNGPPg5e5YgKETGyO9lMCB6FrhYpytxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW19SEdcrFTIDbNecuM4P8xSGOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvOTk2M2M0YWItNDQ0My0z ZDgyLTlkOTgtZTAyZThlZDJhNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk YzRiMjVmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRR8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXciPTHcWxcgqnYwy/m+WZ6RiZPa75MYwTVAy/3Jovsmf0WgGvgnKPF 18aXeNG0SPXRNBUrUk5Wli/FcRjNAXqbaGoDqEFLkUWhIrdClHgMw2pBGe4LQJZR 9e4iyMPan6ktwfqgTF9HTcXggcNeaUImF5KSENFuS2walOIkZIS8z8e5ghJVpbqq SR5s0JnjHm4Sz80gi3I6W5hVnNcDgA6P0ffkI+Dd1V3nIEpM4DzCq+PHXlREu3mo LForfLuIv3gt7PiR/vRFmCmDB7C22mmB+93lQ/sP2iJe1cBBoOnPCZ322h9E1YCC TCQb5pq4YjN6tdkEsdGuyca5get/PQo= -----END CERTIFICATE-----Generated at Tue Apr 8 15:11:29 2025 by rpki-client