$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/520345ea-0aef-3ece-b707-c56f1368c0b7.roa File: 520345ea-0aef-3ece-b707-c56f1368c0b7.roa (raw, json) Hash identifier: fw6Yw0nP9lPAOY2/nHW61aOfjnSLSGTvGP5tWLgdt7g= Subject key identifier: 16:B6:1F:5A:DE:63:3E:1B:C4:55:F8:34:B9:C0:88:AF:91:EF:E0:33 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F432858494733F12F266FD93120082B80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/520345ea-0aef-3ece-b707-c56f1368c0b7.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 46652 IP address blocks: 69.55.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f1:2f:26:6f:d9:31:20:08:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=39f4cc30-295b-4640-bad5-8efc735ed71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:e1:98:53:51:0d:8e:7a:b2:d3:36:9d:18: a8:5f:06:51:21:40:57:e4:84:5e:e3:59:b8:83:72: ac:0b:92:77:af:0f:12:ae:19:2c:cc:eb:71:06:2c: 80:72:88:37:aa:c5:b4:fb:9c:84:72:f4:e8:b6:c5: c7:15:03:37:41:3b:a9:c4:0d:ca:df:f0:e5:4c:42: 14:5c:f6:df:4f:4a:f8:4f:52:53:0a:5c:f7:e2:f5: 09:4d:26:aa:f9:2d:06:ff:50:a3:ee:e4:26:1c:4c: 3b:4a:03:4f:d7:da:18:57:3c:4d:c0:19:0c:7a:ef: 9a:10:62:bc:dd:62:8b:e5:13:d4:25:28:33:1a:4b: f5:a1:64:a2:b7:c1:f2:81:33:59:50:3c:9c:bb:db: 4a:ac:32:8a:91:cb:08:51:c3:6a:45:c7:34:52:84: 1a:8e:30:b2:80:c7:28:c5:10:c8:57:cf:63:d1:31: b3:e0:16:68:ba:6b:54:18:69:ab:c1:41:94:68:98: 02:81:e6:bd:19:a5:7e:3f:57:b5:77:6f:8f:73:8e: 2f:b4:ac:7d:12:1f:51:d9:e4:c4:95:4b:00:a9:bc: e5:84:b3:0f:b7:3b:3c:90:ff:6e:be:24:49:48:72: 6c:e0:7a:6c:4c:5e:f3:21:f3:79:bc:6d:04:a8:d4: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B6:1F:5A:DE:63:3E:1B:C4:55:F8:34:B9:C0:88:AF:91:EF:E0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/520345ea-0aef-3ece-b707-c56f1368c0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 69.55.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c6:5e:e0:ee:02:ea:b0:3d:74:2c:8f:ed:7d:4d:5a:27:2f: 74:5c:b3:86:75:3c:a4:14:89:66:84:9f:9b:b0:de:5e:d4:48: 13:24:55:9e:79:6c:97:1d:6f:18:f9:de:21:fe:23:a2:74:94: e6:0c:d5:a2:09:5a:a1:19:9b:18:2d:c7:58:d6:66:4e:4d:a7: 7d:c0:6a:de:93:26:a6:49:c7:de:e9:4c:20:b5:d8:bf:71:bb: 5f:ea:03:c8:58:b1:25:01:f5:c3:ee:81:e6:67:d5:f5:2e:f3: 7e:67:2a:df:a0:97:09:02:16:66:ab:de:d9:77:15:94:3a:9d: d6:c8:73:47:63:fd:f8:e2:6b:a3:dc:3b:33:2e:60:5d:03:1e: bf:08:72:24:3f:ed:71:ce:2a:bd:2c:cd:83:9d:99:ca:a6:54: 5e:93:04:9e:45:ff:a7:94:fa:63:69:b0:cb:8c:0c:85:0f:9a: 03:24:fd:22:7c:5a:db:48:14:9c:7d:0d:5f:3e:3c:23:1e:d6: 28:74:2d:fe:03:08:f2:4e:19:d6:c1:ea:9a:fb:91:61:b4:f1: f3:39:a1:f9:5c:9f:38:20:69:58:65:2a:7c:26:43:11:5c:81: c7:17:a2:41:01:30:2e:a3:0e:6b:37:91:d7:13:31:d2:d5:f3: 2a:a0:0b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM/EvJm/ZMSAIK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MzlmNGNjMzAtMjk1Yi00NjQwLWJhZDUtOGVmYzczNWVkNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdrhmFNRDY56stM2nRioXwZRIUBX5IRe41m4 g3KsC5J3rw8SrhkszOtxBiyAcog3qsW0+5yEcvTotsXHFQM3QTupxA3K3/DlTEIU XPbfT0r4T1JTClz34vUJTSaq+S0G/1Cj7uQmHEw7SgNP19oYVzxNwBkMeu+aEGK8 3WKL5RPUJSgzGkv1oWSit8HygTNZUDycu9tKrDKKkcsIUcNqRcc0UoQajjCygMco xRDIV89j0TGz4BZoumtUGGmrwUGUaJgCgea9GaV+P1e1d2+Pc44vtKx9Eh9R2eTE lUsAqbzlhLMPtzs8kP9uviRJSHJs4HpsTF7zIfN5vG0EqNRIyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa2H1reYz4bxFX4NLnAiK+R7+AzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNTIwMzQ1ZWEtMGFlZi0z ZWNlLWI3MDctYzU2ZjEzNjhjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLGXuDuAuqwPXQsj+19TVonL3Rcs4Z1PKQUiWaEn5uw3l7USBMkVZ55 bJcdbxj53iH+I6J0lOYM1aIJWqEZmxgtx1jWZk5Np33Aat6TJqZJx97pTCC12L9x u1/qA8hYsSUB9cPugeZn1fUu835nKt+glwkCFmar3tl3FZQ6ndbIc0dj/fjia6Pc OzMuYF0DHr8IciQ/7XHOKr0szYOdmcqmVF6TBJ5F/6eU+mNpsMuMDIUPmgMk/SJ8 WttIFJx9DV8+PCMe1ih0Lf4DCPJOGdbB6pr7kWG08fM5oflcnzggaVhlKnwmQxFc gccXokEBMC6jDms3kdcTMdLV8yqgCyg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:17 2025 by rpki-client