$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa File: e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa (raw, json) Hash identifier: ztSDnFyj64x9k+6DrIPNkwOTmC3hrVuQHEvJMFfr/rM= Subject key identifier: D4:13:50:30:49:7D:8B:F5:8F:15:21:D4:7C:A4:8F:33:FD:8F:89:98 Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F432858492CB2138B621998F56BF24180 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 10439 IP address blocks: 71.6.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:13:8b:62:19:98:f5:6b:f2:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1489cf62-1a66-4d60-9c76-0ae62eba539c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:34:dd:50:ab:bc:63:c4:f1:52:d2:a2:e2: 8d:20:25:9c:be:a7:65:c6:b9:2f:80:62:1c:34:fb: af:1d:51:bb:e4:12:27:a7:82:a7:96:c6:bf:6e:f9: 6c:ee:7f:11:95:14:15:5a:41:c0:f7:c5:63:de:13: b3:2a:7c:3f:80:26:a3:3f:59:6e:e3:d3:70:e8:ba: 4f:de:6a:bd:a8:12:aa:44:81:a1:78:76:a2:76:52: 7b:5a:af:92:5e:c3:19:5d:5e:06:5c:1f:3e:b0:cc: 0a:3f:5d:23:6c:09:06:33:75:63:b4:3b:e6:0c:69: 07:b8:78:88:31:73:49:6e:aa:b9:35:6a:ac:71:d5: ea:5d:bc:9b:f0:98:e8:e8:41:05:6e:21:ae:3d:c5: c4:b1:c4:97:7b:19:1a:75:bd:c2:0d:60:8b:a9:49: 55:46:06:a5:82:03:43:f1:84:b4:bd:12:99:ed:f1: 3e:4a:c8:27:00:18:56:fb:1e:8f:db:ee:ee:b3:b9: ba:30:a2:d9:cb:7c:89:e8:38:ce:dd:03:75:25:64: 56:8a:81:33:2b:2b:79:17:3c:e8:9f:ff:54:c4:7d: 92:49:9f:b3:fd:79:68:5a:d2:4b:29:b7:af:36:2c: 8e:65:e7:05:a2:79:b8:17:b1:05:a6:15:ec:3c:1f: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:13:50:30:49:7D:8B:F5:8F:15:21:D4:7C:A4:8F:33:FD:8F:89:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/e52ddde9-8035-3a15-9b3a-f71ce12301b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 71.6.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4f:0f:dd:83:b6:a5:93:e3:9b:40:e8:42:7e:4c:8d:6a:57: eb:a6:8d:a3:86:61:16:80:44:e9:19:9e:85:4d:f9:27:40:32: 9e:4e:f9:0f:1a:5e:17:b7:76:e9:7c:da:d8:4a:f5:a6:e8:b5: 59:c2:01:72:5f:81:6c:a2:1c:64:11:a7:8f:45:85:01:4e:b7: 46:8d:d8:b7:f2:75:5e:c0:03:db:9e:2f:08:8e:8d:56:e5:30: fb:d6:31:69:fa:d0:09:86:a5:ab:c5:42:ab:c6:cc:47:70:8b: 53:2e:b3:99:83:2b:75:a8:03:ae:ec:39:b1:8d:b7:10:2f:9e: 2f:0d:12:a0:e6:6e:1a:e5:f4:07:db:92:60:b6:a1:c7:f1:64: 50:d8:87:f4:f1:8d:71:a9:d7:55:d9:68:4e:e1:dd:96:0f:32: d4:af:f8:a6:e9:32:2c:19:81:c2:53:59:e7:b2:1b:06:29:25: 19:21:76:07:8a:f1:ee:bd:72:d4:b4:3b:7d:63:9b:e5:9e:b4: 56:bf:50:75:cc:cc:8a:27:22:5a:39:2e:3e:03:77:25:63:4e: fa:a9:59:61:83:ee:94:a2:55:41:a9:8e:0b:66:4e:b0:51:22: ff:dc:1f:ac:7f:9b:e7:47:34:af:02:91:bd:d9:69:3f:ab:24: d3:18:e7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshOLYhmY9WvyQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTQ4OWNmNjItMWE2Ni00ZDYwLTljNzYtMGFlNjJlYmE1MzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl003VCrvGPE8VLSouKNICWcvqdlxrkvgGIc NPuvHVG75BInp4Knlsa/bvls7n8RlRQVWkHA98Vj3hOzKnw/gCajP1lu49Nw6LpP 3mq9qBKqRIGheHaidlJ7Wq+SXsMZXV4GXB8+sMwKP10jbAkGM3VjtDvmDGkHuHiI MXNJbqq5NWqscdXqXbyb8Jjo6EEFbiGuPcXEscSXexkadb3CDWCLqUlVRgalggND 8YS0vRKZ7fE+SsgnABhW+x6P2+7us7m6MKLZy3yJ6DjO3QN1JWRWioEzKyt5Fzzo n/9UxH2SSZ+z/XloWtJLKbevNiyOZecFonm4F7EFphXsPB+jaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQTUDBJfYv1jxUh1HykjzP9j4mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvZTUyZGRkZTktODAzNS0z YTE1LTliM2EtZjcxY2UxMjMwMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRwaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxPD92DtqWT45tA6EJ+TI1qV+umjaOGYRaAROkZnoVN+SdAMp5O+Q8a Xhe3dul82thK9abotVnCAXJfgWyiHGQRp49FhQFOt0aN2LfydV7AA9ueLwiOjVbl MPvWMWn60AmGpavFQqvGzEdwi1Mus5mDK3WoA67sObGNtxAvni8NEqDmbhrl9Afb kmC2ocfxZFDYh/TxjXGp11XZaE7h3ZYPMtSv+KbpMiwZgcJTWeeyGwYpJRkhdgeK 8e69ctS0O31jm+WetFa/UHXMzIonIlo5Lj4DdyVjTvqpWWGD7pSiVUGpjgtmTrBR Iv/cH6x/m+dHNK8Ckb3ZaT+rJNMY54k= -----END CERTIFICATE-----Generated at Sat Apr 5 12:32:44 2025 by rpki-client