$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa File: d32f3f1b-47a5-3201-b5c4-5f710806e110.roa (raw, json) Hash identifier: W6XrVRSOeHEy7J7WGE7hT5950B2agn2I+OKJuaXkIzY= Subject key identifier: 8B:56:62:C1:8D:C0:65:9F:7D:8B:F1:71:22:FE:4B:A5:D3:A7:3C:44 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F43285848EC968461D9A8BFFC74292F00 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 20127 IP address blocks: 69.128.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:84:61:d9:a8:bf:fc:74:29:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=c72cc5d6-38b1-4333-ab13-1a9c45ec5ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:71:98:17:6a:a7:41:6e:df:b3:c8:55:62:98: f4:c4:4f:63:7e:a4:6b:d1:41:c7:42:3e:97:81:8d: b5:c0:cb:d2:8a:e7:a2:86:93:a2:4a:c3:1a:1c:1e: ff:0a:9e:f4:03:4c:73:70:c0:12:45:04:d8:e5:dd: ae:63:79:36:69:68:74:e5:4b:6c:02:b8:f4:12:97: d0:5c:5b:81:70:9e:d5:3d:6d:51:65:6a:ee:09:e2: d3:8c:eb:65:1f:58:be:e3:66:61:fc:d4:5d:87:ad: f2:78:e4:e9:40:55:c3:9c:42:d7:a2:03:b3:a3:54: ec:aa:00:e2:cc:7b:8d:09:fe:a4:d1:45:b7:94:39: bd:19:6e:63:e9:26:76:c2:a3:ad:ea:12:d5:46:44: d2:fa:d6:25:4a:10:0d:63:3a:20:d7:60:94:b7:d4: 15:e4:3f:46:66:f1:48:81:c5:e4:c4:99:43:d2:3c: 35:58:e0:00:06:11:42:9d:8e:cf:0b:cd:52:bb:18: 6d:5d:d0:f9:e5:c4:e4:22:d8:7c:c7:8a:5b:99:f0: e7:63:72:95:b7:97:38:64:58:37:6b:aa:18:e0:98: 14:4a:92:69:2d:9f:1b:28:3c:85:4d:86:58:ef:8c: e9:e7:34:ef:c9:46:73:91:62:3d:c1:e2:27:aa:66: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:62:C1:8D:C0:65:9F:7D:8B:F1:71:22:FE:4B:A5:D3:A7:3C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 69.128.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:40:06:ed:83:07:70:4e:d8:c6:85:1e:ab:71:46:15:d7:a4: ad:c3:63:62:ec:d5:01:16:11:59:c7:13:54:99:f7:57:9d:18: 12:a7:ee:e9:63:03:8c:ed:c7:c1:af:68:f0:78:59:45:17:23: d1:0d:70:96:fd:7f:a1:c5:fa:0c:fa:bb:b2:ca:7e:fd:5e:10: fb:9a:5a:a6:73:8e:b4:6a:9f:9a:ee:f1:c7:aa:57:85:4b:c1: 20:83:72:d2:73:04:45:9d:3a:dd:6a:99:00:8a:41:a5:65:7b: 36:04:a2:33:b9:fc:1d:ec:24:a9:04:8c:38:ef:30:23:00:31: cc:3a:e4:87:41:7e:1e:ad:43:4c:3b:c8:ce:5d:28:93:1a:15: df:d1:2c:58:81:4d:6a:88:bc:de:9b:3a:93:a0:3c:0b:9e:00: 33:9f:91:3f:4b:21:81:01:bc:b1:f9:05:d9:1e:46:bd:73:f2: e9:d6:ed:59:fc:49:6e:4b:f9:e5:f0:84:32:ca:93:07:0e:42: ec:f8:a4:0f:72:22:1e:ef:8f:01:07:6e:9a:19:c1:a6:9d:45: 8c:e3:0e:86:b5:37:32:57:de:ae:bf:bd:3d:2e:a8:ae:83:89: bf:a5:04:16:86:95:5b:90:7f:9a:b6:1b:2d:17:2c:df:20:04: d0:1c:fe:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloRh2ai//HQpLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YzcyY2M1ZDYtMzhiMS00MzMzLWFiMTMtMWE5YzQ1ZWM1ZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3GYF2qnQW7fs8hVYpj0xE9jfqRr0UHHQj6X gY21wMvSiueihpOiSsMaHB7/Cp70A0xzcMASRQTY5d2uY3k2aWh05UtsArj0EpfQ XFuBcJ7VPW1RZWruCeLTjOtlH1i+42Zh/NRdh63yeOTpQFXDnELXogOzo1TsqgDi zHuNCf6k0UW3lDm9GW5j6SZ2wqOt6hLVRkTS+tYlShANYzog12CUt9QV5D9GZvFI gcXkxJlD0jw1WOAABhFCnY7PC81SuxhtXdD55cTkIth8x4pbmfDnY3KVt5c4ZFg3 a6oY4JgUSpJpLZ8bKDyFTYZY74zp5zTvyUZzkWI9weInqma1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItWYsGNwGWffYvxcSL+S6XTpzxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvZDMyZjNmMWItNDdhNS0z MjAxLWI1YzQtNWY3MTA4MDZlMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlABu2DB3BO2MaFHqtxRhXXpK3DY2Ls1QEWEVnHE1SZ91edGBKn7ulj A4ztx8GvaPB4WUUXI9ENcJb9f6HF+gz6u7LKfv1eEPuaWqZzjrRqn5ru8ceqV4VL wSCDctJzBEWdOt1qmQCKQaVlezYEojO5/B3sJKkEjDjvMCMAMcw65IdBfh6tQ0w7 yM5dKJMaFd/RLFiBTWqIvN6bOpOgPAueADOfkT9LIYEBvLH5BdkeRr1z8unW7Vn8 SW5L+eXwhDLKkwcOQuz4pA9yIh7vjwEHbpoZwaadRYzjDoa1NzJX3q6/vT0uqK6D ib+lBBaGlVuQf5q2Gy0XLN8gBNAc/to= -----END CERTIFICATE-----Generated at Fri Apr 11 23:28:20 2025 by rpki-client