$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa File: 606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa (raw, json) Hash identifier: 7Bh70aFwtBRMdSCp5vPxwscb0DfofYsan0GP0Km//Ro= Subject key identifier: 39:24:6B:63:C8:DA:20:73:76:D5:B7:95:B2:18:18:DE:A0:F9:DE:13 Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F43285849287E61EAA012F75C28940B00 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 14543 IP address blocks: 69.84.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:61:ea:a0:12:f7:5c:28:94:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=6a40a3e2-4aa7-4a78-8785-ab8403fcf775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:36:c7:8a:49:94:d8:88:16:74:de:36:bb: c6:d2:b3:59:74:e7:d0:d0:69:cd:55:45:74:81:ab: 15:a0:8f:64:77:4b:46:06:3a:bc:78:bf:ab:23:bd: 0b:7c:6d:1d:b9:17:38:43:8b:10:ad:6e:fa:2e:74: 47:4d:6b:4e:68:ab:e8:55:6b:45:3f:c6:f1:b0:49: 74:a3:ec:06:f9:05:e6:c2:e4:fe:b9:14:c4:7c:25: 5f:0a:23:41:a9:92:3e:39:91:2e:44:51:e1:99:06: d5:fa:16:ff:d5:f8:47:73:7a:69:ce:e6:7d:91:d1: ec:6c:39:57:04:81:38:d3:5c:5d:72:29:cc:7b:77: 9f:3e:48:49:fc:6d:17:1e:2d:06:de:22:8a:90:f7: a4:c0:d4:86:96:5e:81:b1:62:35:a5:a5:9d:64:db: 1e:ce:ca:8d:f2:de:e1:7c:5c:0d:d3:31:94:1a:cb: d3:0c:4b:04:56:c3:60:a5:e7:ed:ad:6c:ab:d4:02: b7:4e:46:c0:ec:e4:7a:75:50:84:45:dd:a7:58:68: 53:c2:b5:be:62:76:8a:db:18:21:b2:3f:3c:55:43: 7d:4b:f6:56:92:45:2a:6b:2e:cc:51:1b:63:e4:7a: 35:24:92:c2:c6:46:e4:73:90:f7:64:0d:cd:f2:45: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:24:6B:63:C8:DA:20:73:76:D5:B7:95:B2:18:18:DE:A0:F9:DE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 69.84.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:29:89:41:1c:0b:28:60:b7:2e:62:6f:16:16:2c:ee:27:d3: 17:3a:84:1c:eb:98:25:b2:34:17:80:f6:01:55:b4:b5:5f:67: 5e:2a:0d:94:b2:02:e2:aa:18:ae:92:44:25:5a:97:4c:27:6f: 03:32:be:84:4e:6d:da:0f:91:5a:de:c7:a6:52:6e:22:1e:ee: d6:20:77:f5:c3:7d:71:f1:c8:30:3c:9d:45:6b:1f:52:81:44: c0:bd:5d:8a:47:f3:bf:6d:5a:f1:c3:94:1c:05:fd:4e:74:73: 7a:9f:01:1f:96:58:fe:a4:7c:a1:1b:6b:f6:ec:be:6e:8a:96: ea:67:84:86:1c:74:5b:71:72:15:31:c3:2d:6f:79:a2:58:5a: 2a:83:16:b0:d4:5c:33:48:7c:f2:81:78:9b:f3:76:ce:ae:ad: 9a:7c:74:09:f9:69:63:25:8b:ce:d8:47:e2:08:5d:8a:e6:f6: 2a:d5:a4:93:88:a8:57:da:58:84:85:df:6f:2c:a9:34:e0:3d: 6b:85:ae:f6:b1:97:74:16:06:d6:23:05:e4:55:d8:91:42:06: c1:89:71:52:57:1b:51:19:3e:22:9e:62:28:98:d2:64:67:2c: ad:a1:f9:f2:8b:d8:2f:df:e3:eb:0f:0a:e5:e7:35:9c:f3:6e: 66:49:29:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmHqoBL3XCiUCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmE0MGEzZTItNGFhNy00YTc4LTg3ODUtYWI4NDAzZmNmNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugo2x4pJlNiIFnTeNrvG0rNZdOfQ0GnNVUV0 gasVoI9kd0tGBjq8eL+rI70LfG0duRc4Q4sQrW76LnRHTWtOaKvoVWtFP8bxsEl0 o+wG+QXmwuT+uRTEfCVfCiNBqZI+OZEuRFHhmQbV+hb/1fhHc3ppzuZ9kdHsbDlX BIE401xdcinMe3efPkhJ/G0XHi0G3iKKkPekwNSGll6BsWI1paWdZNsezsqN8t7h fFwN0zGUGsvTDEsEVsNgpeftrWyr1AK3TkbA7OR6dVCERd2nWGhTwrW+YnaK2xgh sj88VUN9S/ZWkkUqay7MURtj5Ho1JJLCxkbkc5D3ZA3N8kU0awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkka2PI2iBzdtW3lbIYGN6g+d4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvNjA2ZGM3YWItMzBlMC0z ZWZjLTg1NWQtZjkyZTczYjczZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERVQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEpiUEcCyhgty5ibxYWLO4n0xc6hBzrmCWyNBeA9gFVtLVfZ14qDZSy AuKqGK6SRCVal0wnbwMyvoRObdoPkVrex6ZSbiIe7tYgd/XDfXHxyDA8nUVrH1KB RMC9XYpH879tWvHDlBwF/U50c3qfAR+WWP6kfKEba/bsvm6KlupnhIYcdFtxchUx wy1veaJYWiqDFrDUXDNIfPKBeJvzds6urZp8dAn5aWMli87YR+IIXYrm9irVpJOI qFfaWISF328sqTTgPWuFrvaxl3QWBtYjBeRV2JFCBsGJcVJXG1EZPiKeYiiY0mRn LK2h+fKL2C/f4+sPCuXnNZzzbmZJKQw= -----END CERTIFICATE-----Generated at Sat Apr 12 13:14:27 2025 by rpki-client