$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/0e475265-739a-3a8a-aa5b-728f634c07cc.roa File: 0e475265-739a-3a8a-aa5b-728f634c07cc.roa (raw, json) Hash identifier: YjGf5+I4Mj6n6TRfnCkdUH++TQ5mXR2a0yO49O30n7M= Subject key identifier: AD:55:6D:A4:73:32:AF:A0:F9:F3:A5:37:23:92:FC:CC:05:5B:5A:23 Certificate issuer: /CN=20326331-2c67-41aa-8ed3-7667815d240c Certificate serial: 010D0C9F43285848F65BCA2974B8F1106BD4F200 Authority key identifier: CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/0e475265-739a-3a8a-aa5b-728f634c07cc.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 69.56.0.0/21 maxlen: 21 69.56.8.0/21 maxlen: 21 69.56.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ca:29:74:b8:f1:10:6b:d4:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20326331-2c67-41aa-8ed3-7667815d240c Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=62e04a35-9cd9-4bd1-acd9-7dcb5b352978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:3e:74:72:12:14:20:35:f4:ff:fc:b4:d4: 34:93:12:4f:da:4e:63:de:c9:66:b1:3b:11:5d:1e: 7f:69:87:12:7c:f8:24:0c:2c:a0:67:36:c8:f2:a3: a7:47:7f:30:b1:48:a2:b7:06:3b:c5:42:8b:21:ea: 2b:1b:60:07:8f:aa:26:32:f5:7b:e1:01:b5:0a:47: e3:0e:dd:3f:c5:6c:25:50:42:fe:12:f8:23:5d:77: 59:3a:f0:a0:39:ce:02:db:d3:76:fd:a3:b1:69:51: d7:de:c2:b7:de:7e:92:d7:6e:4d:79:de:43:f6:ef: 4a:90:c1:f6:0c:8d:d6:1e:3c:ad:ae:5a:7a:20:7c: 7a:22:8b:74:d5:28:78:7a:68:60:8a:e6:26:83:64: 64:45:8e:99:11:2b:ae:b9:1b:08:09:58:34:89:5c: d1:dc:5b:97:93:70:c5:e6:a9:0e:f4:58:78:4b:db: 60:37:62:6a:70:77:4c:52:52:f2:70:5e:f4:23:ed: 24:32:bc:4a:b5:a3:04:90:7a:a5:81:5d:cf:c2:dc: 99:fc:1a:c9:c3:bd:01:51:0a:7f:a4:db:75:fc:b5: a5:ca:a9:53:a5:34:7f:7b:56:f1:1a:cd:ad:29:e3: 03:95:87:a6:8e:b0:b4:21:6e:34:0d:45:df:2c:b2: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:55:6D:A4:73:32:AF:A0:F9:F3:A5:37:23:92:FC:CC:05:5B:5A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/0e475265-739a-3a8a-aa5b-728f634c07cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl X509v3 Authority Key Identifier: keyid:CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer sbgp-ipAddrBlock: critical IPv4: 69.56.0.0-69.56.23.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f0:2e:be:88:b0:06:98:ce:42:c9:fc:d9:92:95:8d:96:cf: 2f:fc:2d:15:6b:fd:2f:cc:09:a5:16:14:b0:ad:0d:db:6e:f1: 86:bb:04:46:9b:1d:85:d6:63:73:30:31:77:49:0b:18:02:38: 8d:91:39:b0:1c:9e:9b:38:da:1a:59:85:19:ed:5f:02:0a:79: 03:7f:9f:d6:fa:4f:1a:ab:32:2a:f4:04:fc:ab:86:ed:97:6f: 56:80:10:c8:e5:bd:dd:15:a5:f4:d2:81:d5:60:da:ca:3e:e9: a8:68:b2:ad:55:48:32:d3:f6:69:4b:12:72:de:85:e4:58:93: a1:e4:d0:36:c4:67:61:9c:82:ca:7f:df:d7:32:d3:e4:9a:72: f2:08:1e:05:fc:47:e2:11:1e:d6:84:3a:28:b1:95:34:06:31: 91:3e:01:36:a5:f7:35:4e:d7:68:ca:a0:a7:ed:f5:77:9e:64: 33:97:d4:d7:5e:b0:38:3d:e7:c4:84:3d:9a:76:d1:b3:ab:7c: 45:16:54:b5:2e:e5:89:d4:37:a9:a4:1a:5a:9c:56:9e:ce:ce: 9d:78:7e:05:bf:5b:c2:4a:28:11:70:cb:fb:3a:7d:7f:11:78: 6e:8e:80:86:97:8c:41:3e:b8:53:3f:3c:87:4e:d4:26:43:ae: 98:05:f3:c4 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEj2W8opdLjxEGvU8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAzMjYzMzEtMmM2Ny00MWFhLThlZDMtNzY2NzgxNWQy NDBjMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NjJlMDRhMzUtOWNkOS00YmQxLWFjZDktN2RjYjViMzUyOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGo+dHISFCA19P/8tNQ0kxJP2k5j3slmsTsR XR5/aYcSfPgkDCygZzbI8qOnR38wsUiitwY7xUKLIeorG2AHj6omMvV74QG1Ckfj Dt0/xWwlUEL+EvgjXXdZOvCgOc4C29N2/aOxaVHX3sK33n6S125Ned5D9u9KkMH2 DI3WHjytrlp6IHx6Iot01Sh4emhgiuYmg2RkRY6ZESuuuRsICVg0iVzR3FuXk3DF 5qkO9Fh4S9tgN2JqcHdMUlLycF70I+0kMrxKtaMEkHqlgV3PwtyZ/BrJw70BUQp/ pNt1/LWlyqlTpTR/e1bxGs2tKeMDlYemjrC0IW40DUXfLLJVLQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFK1VbaRzMq+g+fOlNyOS/MwFW1ojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDMy NjMzMS0yYzY3LTQxYWEtOGVkMy03NjY3ODE1ZDI0MGMvMGU0NzUyNjUtNzM5YS0z YThhLWFhNWItNzI4ZjYzNGMwN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjAzMjYzMzEtMmM2Ny00MWFhLThl ZDMtNzY2NzgxNWQyNDBjLzIwMzI2MzMxLTJjNjctNDFhYS04ZWQzLTc2Njc4MTVk MjQwYy5jcmwwHwYDVR0jBBgwFoAUy9j2bT0cWwBjvL04BI+Mh/XPgBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDMyNjMzMS0yYzY3LTQxYWEtOGVkMy03NjY3 ODE1ZDI0MGMuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwNFOAME A0U4EDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA48C6+iLAGmM5CyfzZkpWNls8v/C0Va/0vzAmlFhSwrQ3b bvGGuwRGmx2F1mNzMDF3SQsYAjiNkTmwHJ6bONoaWYUZ7V8CCnkDf5/W+k8aqzIq 9AT8q4btl29WgBDI5b3dFaX00oHVYNrKPumoaLKtVUgy0/ZpSxJy3oXkWJOh5NA2 xGdhnILKf9/XMtPkmnLyCB4F/EfiER7WhDoosZU0BjGRPgE2pfc1TtdoyqCn7fV3 nmQzl9TXXrA4PefEhD2adtGzq3xFFlS1LuWJ1DeppBpanFaezs6deH4Fv1vCSigR cMv7On1/EXhujoCGl4xBPrhTPzyHTtQmQ66YBfPE -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:23 2025 by rpki-client