$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db72ce3f-81a9-3bd0-8a9a-bb9d86a01120.roa File: db72ce3f-81a9-3bd0-8a9a-bb9d86a01120.roa (raw, json) Hash identifier: DnfEAxfyvjYpfZ0IRgOmdfp/9uXCqsfEZmug3qpfCEs= Subject key identifier: 64:C4:4E:1D:81:AA:76:59:8D:1A:F9:3C:A0:25:1F:88:FD:83:2A:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB053AA46F327ECCB831EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db72ce3f-81a9-3bd0-8a9a-bb9d86a01120.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 69.248.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:53:aa:46:f3:27:ec:cb:83:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=96a51333-6be9-476d-8b01-9e13ea15035f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:45:d3:52:d4:94:a5:ac:03:32:20:77:90: 27:f1:d5:53:ff:68:f5:f1:62:39:40:3d:34:05:c8: 69:bb:2d:2a:40:91:34:e1:3e:78:54:a3:9e:57:6e: a9:83:af:fa:1e:71:25:4a:40:8d:2f:22:c9:95:eb: df:ae:c7:e6:bc:6b:36:fc:10:43:3c:e0:77:11:e5: 51:18:03:ce:3c:2e:81:1c:a0:a4:9c:4e:14:22:63: 9a:2f:b1:e8:9e:6f:95:a5:b9:87:fd:ca:6e:4a:d0: 16:a0:56:e6:d3:49:ca:dd:e3:c4:d9:21:4d:52:c5: 39:56:08:e5:d3:92:71:14:de:49:75:3f:92:bd:0c: b1:ad:af:68:4b:88:9e:16:e1:e3:54:2f:be:99:f9: f1:8c:a4:37:56:72:40:1b:e0:46:e7:a3:55:15:1a: 2a:1e:1c:b9:2b:07:24:1f:85:1e:97:26:d0:f2:63: df:73:e0:47:1e:a5:ac:94:ae:d5:19:e8:77:3a:dc: 20:64:54:68:6c:91:58:18:a5:a1:52:26:2f:e0:69: 42:b6:69:bd:94:44:49:ac:dd:82:93:7a:b6:73:2e: 93:78:61:ba:30:57:da:08:53:39:12:28:c1:5a:b3: 7d:fc:21:d0:88:29:19:a2:11:de:e6:b3:80:c9:a5: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:4E:1D:81:AA:76:59:8D:1A:F9:3C:A0:25:1F:88:FD:83:2A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db72ce3f-81a9-3bd0-8a9a-bb9d86a01120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.248.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b3:5c:8f:e8:31:91:eb:75:11:66:16:08:02:0e:70:7e:e3: 23:48:1e:d3:06:4c:97:10:00:cc:72:45:bd:e3:f9:df:0e:bf: 57:62:e1:83:fe:ae:07:b9:20:9d:be:7c:be:8b:43:20:d4:3e: cc:a6:bb:80:94:f1:c1:34:18:2a:20:d5:1b:4f:43:b0:10:be: 16:da:6a:57:73:3b:bc:14:6d:e6:a9:8f:cf:8e:73:dc:0a:62: 34:ed:0d:0e:30:71:fb:cb:e4:2d:e5:0f:bd:6b:f6:a9:c8:01: f4:ee:bf:aa:a1:bd:d0:76:99:f8:98:24:b6:df:fb:51:18:14: 27:68:f6:42:35:fa:c6:10:98:25:2f:21:02:62:e9:7a:af:a3: e1:09:f8:3a:31:7e:41:f0:1f:50:8b:50:3a:07:97:68:85:64: ee:fa:1e:d9:39:57:a6:ae:e6:14:71:5a:68:43:51:48:51:0d: e1:96:17:e3:81:c6:17:ba:dc:3f:d0:ae:a7:fb:03:a9:a1:18: 04:87:a9:bd:1f:07:bc:a5:4a:0b:64:36:b8:e5:db:a4:4e:6a: 14:ce:6a:c2:53:53:e9:de:0d:68:a6:85:ab:d5:0d:31:b4:94: cf:ba:40:f4:d4:b4:b7:af:4c:81:d6:1a:61:50:ee:d3:7b:cc: 1e:dd:71:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssFOqRvMn7MuDHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTZhNTEzMzMtNmJlOS00NzZkLThiMDEtOWUxM2VhMTUwMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/9F01LUlKWsAzIgd5An8dVT/2j18WI5QD00 Bchpuy0qQJE04T54VKOeV26pg6/6HnElSkCNLyLJlevfrsfmvGs2/BBDPOB3EeVR GAPOPC6BHKCknE4UImOaL7Honm+VpbmH/cpuStAWoFbm00nK3ePE2SFNUsU5Vgjl 05JxFN5JdT+SvQyxra9oS4ieFuHjVC++mfnxjKQ3VnJAG+BG56NVFRoqHhy5Kwck H4UelybQ8mPfc+BHHqWslK7VGeh3OtwgZFRobJFYGKWhUiYv4GlCtmm9lERJrN2C k3q2cy6TeGG6MFfaCFM5EijBWrN9/CHQiCkZohHe5rOAyaV1FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTETh2BqnZZjRr5PKAlH4j9gyq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI3MmNlM2YtODFhOS0z YmQwLThhOWEtYmI5ZDg2YTAxMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRfjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGzXI/oMZHrdRFmFggCDnB+4yNIHtMGTJcQAMxyRb3j+d8Ov1di4YP+ rge5IJ2+fL6LQyDUPsymu4CU8cE0GCog1RtPQ7AQvhbaaldzO7wUbeapj8+Oc9wK YjTtDQ4wcfvL5C3lD71r9qnIAfTuv6qhvdB2mfiYJLbf+1EYFCdo9kI1+sYQmCUv IQJi6Xqvo+EJ+DoxfkHwH1CLUDoHl2iFZO76Htk5V6au5hRxWmhDUUhRDeGWF+OB xhe63D/Qrqf7A6mhGASHqb0fB7ylSgtkNrjl26ROahTOasJTU+neDWimhavVDTG0 lM+6QPTUtLevTIHWGmFQ7tN7zB7dcQw= -----END CERTIFICATE-----Generated at Sat Apr 12 16:13:00 2025 by rpki-client