$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa File: 42e2d2e0-f64e-3caa-b82a-299df2894365.roa (raw, json) Hash identifier: w8mzQbAOJ3lmHnXwr3iVMClMXLRzlTs9TuB+LiZxDE0= Subject key identifier: 5D:73:68:9A:AA:0D:A5:C4:9E:EE:04:C1:18:FF:FD:EA:B2:80:9B:6B Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848DA70F4EC3E69BD09631D8580 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 397422 IP address blocks: 69.1.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f4:ec:3e:69:bd:09:63:1d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=20038c6d-8b25-439f-a404-73fa581cdf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:2e:17:2b:62:aa:db:8f:9b:07:ce:2d:18: d1:2c:d0:89:4a:8d:df:25:6d:de:70:91:fd:27:f3: 05:03:37:b6:ec:86:c0:42:96:60:3b:11:be:3a:fc: 10:c1:12:c6:ed:a0:03:b0:63:e1:6a:bd:db:46:c8: 93:fa:c3:a7:c2:b1:72:62:a5:36:46:8f:de:52:5c: 93:f7:b7:f1:3c:01:63:4b:20:af:ba:52:a8:56:81: 9f:d7:88:83:66:ed:b2:1e:a6:e0:c3:8b:7a:5f:a8: 02:19:20:c4:a4:0f:54:d4:2a:41:61:29:f7:98:f3: 11:1c:d2:0f:ed:e3:57:ea:8d:14:5e:34:da:a2:e6: 1c:4c:0c:82:94:ff:45:bb:75:29:bb:17:14:3d:11: 98:b0:61:80:19:f1:0a:e2:d6:e2:86:25:10:10:56: da:a0:ba:72:26:b5:e4:83:06:87:93:f3:2a:25:00: 60:47:a6:fc:d8:7a:e8:63:96:8b:1a:c4:74:05:50: 83:1d:b4:e6:62:4b:e8:d3:9f:48:c7:74:17:8d:20: 61:03:3b:e5:88:e1:b2:8e:2e:33:cf:ed:ef:1b:5e: 04:c8:4a:07:b5:74:e4:c2:bf:02:90:c2:6f:cd:c3: 78:c5:f7:c3:f4:21:de:fd:14:57:74:68:fc:86:1d: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:73:68:9A:AA:0D:A5:C4:9E:EE:04:C1:18:FF:FD:EA:B2:80:9B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 69.1.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5b:bd:d0:f7:d9:6b:50:65:3e:1a:e5:8d:f3:c0:1d:26:83: 52:15:af:b0:32:53:3d:3d:f4:e0:a9:e3:43:e2:65:68:29:47: 0f:39:1b:7f:bb:a6:90:2f:b8:e8:f5:77:d8:78:d0:b0:b1:45: f5:27:24:bf:b6:c2:75:c9:93:c0:5b:78:d6:d8:61:c2:5e:6f: f4:f9:be:1d:e3:01:47:04:ec:65:0b:da:38:e9:77:ad:33:fc: 79:1c:76:b3:8b:84:d9:31:57:22:e8:ec:a5:07:36:86:72:4d: 98:7c:a1:59:6f:60:c8:68:b8:64:e2:11:50:0a:0e:9a:8d:e9: 5e:46:8a:c3:09:85:d3:5d:f9:ab:62:02:08:5a:4a:97:4c:35: d1:8e:a8:42:7c:24:8e:e5:35:5e:3d:49:01:33:66:ff:40:c0: 35:a4:5e:03:5b:6f:37:ec:14:4b:98:21:f0:cf:90:67:6e:40: 44:5b:6e:15:7a:a3:33:f9:b1:c6:7d:1a:d9:4c:91:29:85:48: c0:fd:04:01:1e:c3:e1:fb:dc:5d:44:47:e8:9c:6c:ea:7d:f5: 89:60:22:f5:0e:b9:37:02:18:1d:87:bf:00:e1:41:46:04:f6: 75:da:54:67:7b:9a:57:02:d4:ff:5c:40:cd:b4:4a:b3:5e:f6: 32:61:d8:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPTsPmm9CWMdhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MjAwMzhjNmQtOGIyNS00MzlmLWE0MDQtNzNmYTU4MWNkZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyskuFytiqtuPmwfOLRjRLNCJSo3fJW3ecJH9 J/MFAze27IbAQpZgOxG+OvwQwRLG7aADsGPhar3bRsiT+sOnwrFyYqU2Ro/eUlyT 97fxPAFjSyCvulKoVoGf14iDZu2yHqbgw4t6X6gCGSDEpA9U1CpBYSn3mPMRHNIP 7eNX6o0UXjTaouYcTAyClP9Fu3UpuxcUPRGYsGGAGfEK4tbihiUQEFbaoLpyJrXk gwaHk/MqJQBgR6b82HroY5aLGsR0BVCDHbTmYkvo059Ix3QXjSBhAzvliOGyji4z z+3vG14EyEoHtXTkwr8CkMJvzcN4xffD9CHe/RRXdGj8hh1LiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1zaJqqDaXEnu4EwRj//eqygJtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDJlMmQyZTAtZjY0ZS0z Y2FhLWI4MmEtMjk5ZGYyODk0MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERbvdD32WtQZT4a5Y3zwB0mg1IVr7AyUz099OCp40PiZWgpRw85G3+7 ppAvuOj1d9h40LCxRfUnJL+2wnXJk8BbeNbYYcJeb/T5vh3jAUcE7GUL2jjpd60z /HkcdrOLhNkxVyLo7KUHNoZyTZh8oVlvYMhouGTiEVAKDpqN6V5GisMJhdNd+ati AghaSpdMNdGOqEJ8JI7lNV49SQEzZv9AwDWkXgNbbzfsFEuYIfDPkGduQERbbhV6 ozP5scZ9GtlMkSmFSMD9BAEew+H73F1ER+icbOp99YlgIvUOuTcCGB2HvwDhQUYE 9nXaVGd7mlcC1P9cQM20SrNe9jJh2OQ= -----END CERTIFICATE-----Generated at Tue Apr 8 13:13:25 2025 by rpki-client