$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa File: aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa (raw, json) Hash identifier: 790X7MVp3W3LZ0tiSuykfiHid+jJCbYc4eDr0zW48O4= Subject key identifier: 32:51:44:13:7D:E3:7C:AD:F3:AB:A5:7D:36:FA:D2:37:C2:1F:D5:C3 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B9A038B74C6E839EE1A880 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 69.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a0:38:b7:4c:6e:83:9e:e1:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=3c5074f9-d20d-45be-b3e4-bb6b0b515e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:2d:23:96:77:8b:40:be:50:8e:c7:a8:4c: 7e:53:ca:60:17:0a:33:c6:d7:6e:3f:5d:c7:a9:44: c9:c7:8b:f8:a1:ec:91:2d:db:52:31:66:1b:51:4c: 84:ca:5c:76:1e:ff:be:b5:63:ce:8e:ca:84:9f:51: 01:fd:b0:58:7f:f4:cb:88:e3:ec:1d:84:db:84:6d: 0a:11:b0:8c:45:a4:cc:eb:67:9f:76:48:70:52:cf: 4e:02:03:4d:96:fd:4b:e6:00:b6:45:07:de:07:a6: 9c:f9:de:45:b3:84:f9:b6:7f:31:46:4e:ce:c3:ef: 0c:dd:88:f5:91:8d:7a:01:9f:23:c6:e0:9e:0f:e0: 83:27:09:35:43:ec:fa:57:25:26:14:33:cd:ee:ed: 1e:6e:92:00:8f:ee:ef:f6:d4:1c:e6:06:f0:c0:85: bd:26:14:0c:56:59:27:b8:30:62:93:32:04:a2:a6: 7e:71:a2:87:53:cf:c9:2e:58:17:47:39:f4:5d:39: d3:c5:06:e6:b1:ae:40:b2:7c:9a:41:4a:15:9a:ab: 0c:50:42:15:f5:43:5a:39:f0:5a:79:93:ec:c6:be: 2e:c1:28:ea:ba:99:02:77:56:75:91:28:5b:ed:30: 74:18:0b:ee:65:be:2c:6b:49:1f:71:b6:52:4b:16: ec:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:51:44:13:7D:E3:7C:AD:F3:AB:A5:7D:36:FA:D2:37:C2:1F:D5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 69.14.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:19:ac:65:1b:0b:65:2f:60:77:b0:2e:c9:2f:4c:32:09:c7: ec:71:00:e5:1d:48:fa:cc:6a:79:c9:d1:17:a8:55:56:9c:d4: b4:77:15:58:e3:94:d9:3e:f5:df:30:88:a7:9f:af:43:da:57: 62:26:34:99:8c:96:0a:26:64:04:54:7b:1b:88:1b:12:29:3f: fb:5f:bb:9d:49:c3:fe:b3:d9:71:e2:08:05:97:f1:d0:e2:41: 10:85:d9:4f:71:e4:89:7a:e6:2e:22:ef:d5:c9:ec:be:37:69: d9:bd:da:ae:4e:69:b8:2c:38:8a:b2:0e:1d:0e:9e:18:4d:0f: 65:ca:20:e8:38:0f:ef:4e:33:be:5e:9c:bb:eb:83:fb:ea:d7: ba:f4:6a:b6:76:ba:9f:37:a2:1b:20:f0:8c:43:39:c3:c2:30: d3:b9:2a:8f:2f:f8:2e:b2:63:52:ad:aa:63:3d:05:a0:d9:11: 17:3f:f9:0b:53:20:1e:30:62:23:b6:23:84:76:41:94:ce:8b: 99:c9:c7:b7:e7:ee:4b:27:cf:59:63:37:64:11:3c:46:45:64: 33:b0:4e:b0:d1:d4:de:f0:6a:dc:60:92:75:f7:16:78:b3:d6: fe:79:98:49:3a:23:d7:51:e0:8e:2a:2e:02:5e:19:18:de:a5: 3b:64:b3:d5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElhuaA4t0xug57hqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk M2M1MDc0ZjktZDIwZC00NWJlLWIzZTQtYmI2YjBiNTE1ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojktI5Z3i0C+UI7HqEx+U8pgFwozxtduP13H qUTJx4v4oeyRLdtSMWYbUUyEylx2Hv++tWPOjsqEn1EB/bBYf/TLiOPsHYTbhG0K EbCMRaTM62efdkhwUs9OAgNNlv1L5gC2RQfeB6ac+d5Fs4T5tn8xRk7Ow+8M3Yj1 kY16AZ8jxuCeD+CDJwk1Q+z6VyUmFDPN7u0ebpIAj+7v9tQc5gbwwIW9JhQMVlkn uDBikzIEoqZ+caKHU8/JLlgXRzn0XTnTxQbmsa5AsnyaQUoVmqsMUEIV9UNaOfBa eZPsxr4uwSjqupkCd1Z1kShb7TB0GAvuZb4sa0kfcbZSSxbs6wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDJRRBN943yt86ulfTb60jfCH9XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYWEwNTJjYWEtY2IxMC0z ZmU3LWEwYjEtYWY4MGQ2ZTVjMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARQ4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAShmsZRsLZS9gd7AuyS9MMgnH7HEA5R1I+sxqecnRF6hVVpzUtHcVWOOU 2T713zCIp5+vQ9pXYiY0mYyWCiZkBFR7G4gbEik/+1+7nUnD/rPZceIIBZfx0OJB EIXZT3HkiXrmLiLv1cnsvjdp2b3ark5puCw4irIOHQ6eGE0PZcog6DgP704zvl6c u+uD++rXuvRqtna6nzeiGyDwjEM5w8Iw07kqjy/4LrJjUq2qYz0FoNkRFz/5C1Mg HjBiI7YjhHZBlM6LmcnHt+fuSyfPWWM3ZBE8RkVkM7BOsNHU3vBq3GCSdfcWeLPW /nmYSToj11HgjiouAl4ZGN6lO2Sz1Q== -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:01 2025 by rpki-client