$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0b497710-af94-34f1-ae44-5fa040805aba.roa File: 0b497710-af94-34f1-ae44-5fa040805aba.roa (raw, json) Hash identifier: dKLXBc6kFEm+XNizcLaXJItqhdlGDu2JG2thW+y62LI= Subject key identifier: CA:69:63:70:7D:F1:B3:46:C2:4F:EF:39:96:58:4A:1B:FC:87:B6:86 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584944692F22E8319CF3EAF98E80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0b497710-af94-34f1-ae44-5fa040805aba.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 13414 IP address blocks: 199.96.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2f:22:e8:31:9c:f3:ea:f9:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=d4446a73-ab6f-4a6b-9ff9-f9d4b25df5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:51:b7:6a:5b:8c:91:44:b8:e8:65:1f:04: 88:23:87:09:69:05:cd:39:bb:d3:16:ad:59:23:c3: 3d:f7:ea:6d:47:1e:8d:37:83:82:69:25:d1:6d:f2: 11:68:8d:f0:be:99:0d:98:6f:79:a7:8e:af:29:c5: 59:f7:b0:25:f8:5f:ed:e1:14:c5:b8:66:be:20:9d: 8a:7f:02:04:4a:c1:ca:8e:a0:1f:35:23:05:68:98: df:9f:07:6d:bc:c4:f3:30:83:42:cf:80:3e:df:25: b3:5c:fa:0e:c2:9c:fb:83:68:cc:28:8d:8d:db:62: 16:99:37:4d:e5:d0:b4:a2:0b:6b:61:64:04:ba:b2: 57:0a:61:d6:3b:96:a1:af:95:fa:f0:5b:2e:cd:b3: 67:59:99:d3:52:b7:ae:14:c9:f7:db:8e:c9:17:58: 87:b1:f8:fd:f4:af:25:7e:e2:42:c9:7b:2f:d9:71: e8:52:d5:da:7f:ce:64:54:45:2a:bf:14:cc:ac:c0: f4:8e:e5:e1:2c:d1:7b:d0:11:41:cf:02:fb:a4:fd: d5:72:80:04:a6:62:33:fc:63:13:51:c6:a9:cc:32: 4a:bb:90:85:b7:a8:e5:42:18:95:ff:a1:a6:ae:83: 64:f1:8e:38:9f:28:9f:a8:84:c2:6e:46:42:52:d6: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:69:63:70:7D:F1:B3:46:C2:4F:EF:39:96:58:4A:1B:FC:87:B6:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0b497710-af94-34f1-ae44-5fa040805aba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.96.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:95:ea:cc:6d:c6:f4:9a:9e:53:d7:0b:0b:8c:8c:37:63:99: 5d:0a:c2:c2:81:33:d2:38:b5:3e:90:9d:45:c7:14:68:3f:69: 1c:7f:7a:75:f2:1f:4f:07:c8:0a:c2:3e:17:cd:7a:62:3d:10: 93:30:26:bc:25:db:f0:b5:b8:ae:a4:a6:b0:3c:06:a9:4c:4d: 96:99:11:c7:77:f1:00:44:0c:fa:9d:cd:ed:68:64:63:6b:89: 18:40:59:51:2f:f9:39:43:08:a5:bd:12:4f:95:ab:38:2b:fd: 92:21:05:b2:5b:47:22:85:6d:16:14:92:73:05:28:3f:16:80: 08:e7:9c:b6:e7:d8:07:55:97:16:2e:e5:b3:55:ed:ca:44:e6: 83:c2:2c:b8:58:fb:6b:b5:55:19:66:72:4b:d8:f5:f3:20:b6: 2b:26:75:4f:b0:a9:ba:72:c8:01:7b:24:93:75:ef:4f:89:c2: 77:7c:ff:b0:e8:03:6a:0f:66:60:f9:d7:29:13:29:21:da:bf: e9:84:00:d4:c6:b1:55:ef:8d:77:f9:bc:1c:63:f5:83:db:85: 76:86:55:16:19:99:f2:fc:08:ca:a5:f2:de:f6:10:0b:56:65: dd:25:79:b1:70:5d:ee:f0:ee:52:ba:35:ea:42:67:03:c3:f1: 18:62:4d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaS8i6DGc8+r5joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZDQ0NDZhNzMtYWI2Zi00YTZiLTlmZjktZjlkNGIyNWRmNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SNRt2pbjJFEuOhlHwSII4cJaQXNObvTFq1Z I8M99+ptRx6NN4OCaSXRbfIRaI3wvpkNmG95p46vKcVZ97Al+F/t4RTFuGa+IJ2K fwIESsHKjqAfNSMFaJjfnwdtvMTzMINCz4A+3yWzXPoOwpz7g2jMKI2N22IWmTdN 5dC0ogtrYWQEurJXCmHWO5ahr5X68FsuzbNnWZnTUreuFMn3247JF1iHsfj99K8l fuJCyXsv2XHoUtXaf85kVEUqvxTMrMD0juXhLNF70BFBzwL7pP3VcoAEpmIz/GMT UcapzDJKu5CFt6jlQhiV/6GmroNk8Y44nyifqITCbkZCUtYcjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMppY3B98bNGwk/vOZZYShv8h7aGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMGI0OTc3MTAtYWY5NC0z NGYxLWFlNDQtNWZhMDQwODA1YWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOV6sxtxvSanlPXCwuMjDdjmV0KwsKBM9I4tT6QnUXHFGg/aRx/enXy H08HyArCPhfNemI9EJMwJrwl2/C1uK6kprA8BqlMTZaZEcd38QBEDPqdze1oZGNr iRhAWVEv+TlDCKW9Ek+Vqzgr/ZIhBbJbRyKFbRYUknMFKD8WgAjnnLbn2AdVlxYu 5bNV7cpE5oPCLLhY+2u1VRlmckvY9fMgtismdU+wqbpyyAF7JJN170+Jwnd8/7Do A2oPZmD51ykTKSHav+mEANTGsVXvjXf5vBxj9YPbhXaGVRYZmfL8CMql8t72EAtW Zd0lebFwXe7w7lK6NepCZwPD8RhiTXA= -----END CERTIFICATE-----Generated at Sat Apr 5 05:40:55 2025 by rpki-client