$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa File: 5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa (raw, json) Hash identifier: iiVYZfaCn1eyst+5yF9S0hOJByvbpg98CGj5w7R5D0g= Subject key identifier: 73:CD:62:0A:9C:A1:4C:6A:12:39:17:EB:E8:FD:98:87:C9:87:59:FF Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584886B079F86120E4A33925D900 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 5769 IP address blocks: 69.70.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:79:f8:61:20:e4:a3:39:25:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=89a51d83-86c7-4548-afd6-a363fa467fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:f4:de:91:b9:8e:2c:34:98:8b:1d:8b:2e: 62:d1:35:27:53:5e:a6:04:f8:07:0a:31:e7:de:64: 39:65:c6:8e:d7:aa:ce:f3:2d:04:e7:53:b1:34:7a: 56:8a:91:4d:4f:a5:1a:68:36:e6:c9:54:c2:03:47: 57:c6:cc:9b:a8:15:67:20:cb:43:a2:9d:08:85:70: 50:07:c5:d3:14:91:d1:08:2a:ba:09:22:f3:96:b3: 7d:f1:70:62:05:1b:42:77:70:40:35:a8:03:dd:db: 17:2f:77:0f:63:34:4c:c4:a0:39:cf:14:b6:17:54: ef:ff:07:a8:b8:0b:d4:a1:40:6b:3b:b4:dd:7d:42: 32:a1:18:7b:35:48:43:4a:16:fd:ba:dd:3b:1d:d6: 8f:f1:e3:ec:ee:26:e8:c5:fc:e4:2d:52:99:34:a4: cd:6e:fe:9a:be:71:2a:01:f8:c4:cc:48:36:ae:e1: c0:10:f5:7c:d1:46:a8:ab:d3:6b:6d:87:a1:99:5e: 65:64:ea:d7:08:fa:28:3e:81:55:5c:c4:b3:e4:1d: 5f:2f:8e:f4:d8:1f:e2:14:6e:a4:ec:f9:c1:67:76: 96:6a:82:60:f9:5f:6c:5b:d4:1e:b5:19:8b:4d:dc: b9:14:3a:a0:ed:9b:af:7b:5b:4e:e3:83:d2:ed:ba: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CD:62:0A:9C:A1:4C:6A:12:39:17:EB:E8:FD:98:87:C9:87:59:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 69.70.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a0:4c:7a:df:96:f3:8e:73:de:32:a0:c0:2c:fd:14:9d:e3: 0a:f5:09:12:65:50:cc:af:46:06:0d:2a:5d:3c:12:64:46:d9: 32:95:84:7e:93:b3:9b:19:32:57:f4:dd:55:e4:5f:ac:7e:50: de:5d:a8:37:40:63:5e:a9:20:81:d5:a7:77:eb:e9:c1:5d:b7: 9e:4c:c0:de:37:eb:b5:2e:c3:1e:c9:4b:61:31:ed:4e:d7:62: 9a:8a:1b:d3:1b:53:4c:4c:4a:59:35:8d:f7:a3:27:23:3d:bd: b3:65:dd:22:db:95:b5:5b:19:3f:f7:61:37:60:9e:a6:e9:a0: 10:3f:9a:e3:31:01:c7:58:57:9b:cf:b3:13:cd:db:46:74:e6: 07:d1:6d:32:7f:26:8a:ea:0a:b2:22:4e:30:c4:b9:2d:7e:76: cc:f3:f6:b2:73:4c:25:91:4b:9b:17:9b:d3:0e:2d:da:81:5d: b9:1b:ad:01:d7:e8:94:e1:43:65:58:3d:68:8a:d5:9a:db:d9: 53:79:4b:ac:70:5b:53:40:59:1a:4b:39:02:7b:43:6f:39:ea: d9:6f:f5:2b:6e:8c:61:45:b1:82:1b:c8:e7:75:b2:92:02:66: 43:2d:3a:ce:a9:b8:d7:08:57:ef:b0:52:f0:01:d0:fb:ba:cc: d4:b7:3a:8b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiGsHn4YSDkozkl2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk ODlhNTFkODMtODZjNy00NTQ4LWFmZDYtYTM2M2ZhNDY3ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbP03pG5jiw0mIsdiy5i0TUnU16mBPgHCjHn 3mQ5ZcaO16rO8y0E51OxNHpWipFNT6UaaDbmyVTCA0dXxsybqBVnIMtDop0IhXBQ B8XTFJHRCCq6CSLzlrN98XBiBRtCd3BANagD3dsXL3cPYzRMxKA5zxS2F1Tv/weo uAvUoUBrO7TdfUIyoRh7NUhDShb9ut07HdaP8ePs7iboxfzkLVKZNKTNbv6avnEq AfjEzEg2ruHAEPV80Uaoq9NrbYehmV5lZOrXCPooPoFVXMSz5B1fL4702B/iFG6k 7PnBZ3aWaoJg+V9sW9QetRmLTdy5FDqg7Zuve1tO44PS7brOdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHPNYgqcoUxqEjkX6+j9mIfJh1n/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNWRmZDQzMzAtMzNiOC0z ZGM3LTkwOWYtMDNlODE3OWE0MGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARUYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGaBMet+W845z3jKgwCz9FJ3jCvUJEmVQzK9GBg0qXTwSZEbZMpWEfpOz mxkyV/TdVeRfrH5Q3l2oN0BjXqkggdWnd+vpwV23nkzA3jfrtS7DHslLYTHtTtdi moob0xtTTExKWTWN96MnIz29s2XdItuVtVsZP/dhN2CepumgED+a4zEBx1hXm8+z E83bRnTmB9FtMn8miuoKsiJOMMS5LX52zPP2snNMJZFLmxeb0w4t2oFduRutAdfo lOFDZVg9aIrVmtvZU3lLrHBbU0BZGks5AntDbznq2W/1K26MYUWxghvI53WykgJm Qy06zqm41whX77BS8AHQ+7rM1Lc6iw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:48 2025 by rpki-client