$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa File: 846a7d87-a2f6-32da-ab22-7e4cde53728a.roa (raw, json) Hash identifier: P8DTBEBC0xKhkNb+Q3MbFP4yAK2/1jqt/YTbWLlUt/Q= Subject key identifier: 54:EA:07:1C:10:35:5B:C1:61:9C:B0:D7:15:85:26:FD:39:EF:4C:C6 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584930DE6009EA34D040D47D6E60 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 19209 IP address blocks: 69.147.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:60:09:ea:34:d0:40:d4:7d:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=82e9afa2-927b-4095-a93b-d1c32eef6dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ca:c7:e9:73:4a:60:b5:73:ad:6e:d0:d7:be: 6c:35:e0:af:2f:8b:2b:31:8a:e1:fc:dd:fd:95:01: 84:97:fc:20:0f:ad:1d:ec:49:33:3a:c5:ec:54:e1: 24:5f:cb:9f:52:7c:3c:8b:4b:87:a9:d6:9e:65:b2: fd:f1:2a:69:4d:3e:a4:7b:a7:57:fa:70:d3:e3:f0: dd:ac:b1:c9:82:0f:75:2c:46:f3:48:a2:d9:5e:2e: 8c:5d:6b:27:a7:f6:d7:e6:47:d9:99:5c:7f:1f:bb: 2a:ea:69:d1:25:36:b2:f1:cc:41:45:e7:4d:d7:7b: 88:cc:18:42:bf:06:5f:68:a6:0d:0e:b4:13:86:6d: 9d:78:52:34:48:3d:4c:ce:01:60:cb:3f:7b:e0:5c: 04:81:bf:0b:ad:8b:26:00:7d:68:7d:d4:22:2e:ca: 16:f7:41:8d:5e:c9:53:19:f3:62:75:d7:0a:99:b8: 57:dd:81:ac:2d:b5:02:29:2d:90:bd:59:cb:c6:b0: 09:6c:f5:b1:1e:e4:e4:2a:b1:c7:91:1e:8e:a0:1e: 20:f8:ef:bd:84:dc:ab:cf:f8:d7:aa:8f:bc:2d:43: ad:40:5a:bb:81:5c:9e:eb:47:99:26:41:a4:65:58: 13:f6:e0:84:4a:42:a7:19:ae:7f:2a:c2:a3:49:16: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EA:07:1C:10:35:5B:C1:61:9C:B0:D7:15:85:26:FD:39:EF:4C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 69.147.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:49:a4:e2:b7:2c:a0:02:63:1b:ea:87:aa:f7:2f:43:2b:13: a1:b6:19:c7:66:ad:04:dc:c0:1b:4d:4b:87:cd:a2:82:a2:b0: 5b:55:a9:07:45:2d:cd:a8:1c:76:a7:0c:13:bc:03:ba:9b:3c: ae:86:51:7d:cf:f3:be:a4:34:7e:3d:61:35:77:68:d7:8b:42: b6:48:67:bf:0e:16:87:be:f3:80:a1:43:db:f9:fb:9a:04:fa: 44:23:86:13:4c:d4:4c:b6:b4:82:13:2a:30:90:1f:09:e7:10: c1:c2:2a:63:33:72:0d:fc:1d:ce:fd:de:a2:a3:a1:94:4d:36: 78:af:62:1a:d0:19:94:22:17:b7:bf:40:ff:55:a7:ac:ce:13: b7:30:77:bd:ed:91:5c:ce:75:f6:cf:3f:79:32:d5:14:f5:2d: f3:aa:dd:46:24:e3:24:ad:f7:22:9f:88:21:69:7a:2f:ef:c5: 77:80:bd:38:10:97:13:52:52:20:d9:04:0e:27:7c:b2:0d:70: 58:6b:19:85:74:cc:70:80:de:6e:f8:93:99:95:23:09:16:51: fc:92:a8:77:5f:bd:a2:39:4a:9c:32:ab:17:81:9e:99:22:50: c4:70:6f:29:7d:ae:bf:e7:33:48:86:cc:5b:65:55:03:25:ef: 6e:ea:de:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mAJ6jTQQNR9bmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ODJlOWFmYTItOTI3Yi00MDk1LWE5M2ItZDFjMzJlZWY2ZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6srH6XNKYLVzrW7Q175sNeCvL4srMYrh/N39 lQGEl/wgD60d7EkzOsXsVOEkX8ufUnw8i0uHqdaeZbL98SppTT6ke6dX+nDT4/Dd rLHJgg91LEbzSKLZXi6MXWsnp/bX5kfZmVx/H7sq6mnRJTay8cxBRedN13uIzBhC vwZfaKYNDrQThm2deFI0SD1MzgFgyz974FwEgb8LrYsmAH1ofdQiLsoW90GNXslT GfNiddcKmbhX3YGsLbUCKS2QvVnLxrAJbPWxHuTkKrHHkR6OoB4g+O+9hNyrz/jX qo+8LUOtQFq7gVye60eZJkGkZVgT9uCESkKnGa5/KsKjSRYDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTqBxwQNVvBYZyw1xWFJv0570zGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvODQ2YTdkODctYTJmNi0z MmRhLWFiMjItN2U0Y2RlNTM3MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARZO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpJpOK3LKACYxvqh6r3L0MrE6G2GcdmrQTcwBtNS4fNooKisFtVqQdF Lc2oHHanDBO8A7qbPK6GUX3P876kNH49YTV3aNeLQrZIZ78OFoe+84ChQ9v5+5oE +kQjhhNM1Ey2tIITKjCQHwnnEMHCKmMzcg38Hc793qKjoZRNNnivYhrQGZQiF7e/ QP9Vp6zOE7cwd73tkVzOdfbPP3ky1RT1LfOq3UYk4ySt9yKfiCFpei/vxXeAvTgQ lxNSUiDZBA4nfLINcFhrGYV0zHCA3m74k5mVIwkWUfySqHdfvaI5SpwyqxeBnpki UMRwbyl9rr/nM0iGzFtlVQMl727q3hU= -----END CERTIFICATE-----Generated at Sat Apr 5 22:41:56 2025 by rpki-client