$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/65d4bfaa-d63b-3ac5-8dc4-71632c23e40e.roa File: 65d4bfaa-d63b-3ac5-8dc4-71632c23e40e.roa (raw, json) Hash identifier: CDzGj9jSuPYeJR7cfINXPfLpWawNxK+R19D4Ol5hfPA= Subject key identifier: 0F:F7:D8:D8:F5:28:ED:AE:ED:AC:FD:8E:BC:B1:60:21:CA:36:06:84 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285848960B5BE36F9130F0451B0F40 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/65d4bfaa-d63b-3ac5-8dc4-71632c23e40e.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 33236 IP address blocks: 69.1.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5b:e3:6f:91:30:f0:45:1b:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=82dc9c0c-d6f3-4766-9c56-586f35d2d28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:0e:61:df:76:cd:f7:f4:b3:4f:23:66:c8: a0:9c:42:40:38:d6:1f:41:ed:a2:c4:73:c4:1c:42: 1e:5b:27:f6:d1:60:5a:1e:50:70:36:89:6a:e8:4f: 9e:32:e7:28:6a:52:50:73:ab:03:69:14:a5:16:4b: 89:80:ea:99:08:ad:51:42:79:d6:f5:36:51:32:80: 88:06:a9:bf:b8:d1:66:d1:27:ec:d3:8d:3d:e8:26: 63:f7:ee:15:b3:86:bd:62:bb:0c:61:20:7c:3b:e6: 6a:b8:69:3c:1a:1a:05:c2:02:2b:da:31:d9:1e:fb: d2:0b:a7:5d:9c:c1:92:50:62:2f:cb:37:fa:45:74: 3c:95:b5:89:18:d9:70:58:be:90:18:5c:06:02:19: bd:be:48:5f:1c:a9:93:09:29:32:40:97:f8:13:c6: a8:1a:56:ba:24:c1:f1:64:86:a2:dd:d7:94:47:86: a3:c5:50:9e:85:fe:ae:bc:06:8e:f0:73:cf:4f:eb: 1c:18:30:97:63:84:3c:01:3e:bf:8e:34:66:af:48: 6f:03:82:2c:87:54:78:e1:1b:5e:43:4d:48:fa:4d: 15:8f:ea:84:80:bb:71:dc:48:40:d4:87:9f:2a:56: 92:58:30:37:67:ba:c3:0a:1c:7b:44:16:ca:df:87: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F7:D8:D8:F5:28:ED:AE:ED:AC:FD:8E:BC:B1:60:21:CA:36:06:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/65d4bfaa-d63b-3ac5-8dc4-71632c23e40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 69.1.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2a:36:c5:d1:50:14:d8:ef:76:8c:28:46:9c:c0:f0:33:bc: ee:6e:90:fb:f2:3a:8a:33:8f:34:fb:bb:a1:13:9c:5b:76:14: 4e:a2:76:09:f8:65:5e:cd:60:56:1a:ef:78:02:6d:62:bd:8b: 85:45:00:6c:8e:2c:4b:fb:42:ec:42:73:75:10:66:9c:e9:2e: 25:d2:f0:46:cd:47:1a:4a:08:73:1f:13:ee:06:72:78:47:b6: cc:8a:a1:fa:72:1a:30:b0:bf:30:b5:b5:ab:8b:ba:77:8b:da: c4:e4:b9:a2:d6:22:2f:89:fd:0f:02:1a:73:55:87:7c:1f:56: 63:57:60:ed:be:91:7f:c1:c9:21:b8:a2:64:03:79:bf:1f:ed: 7c:16:c3:36:01:89:5c:e6:18:16:b5:1c:8e:5c:5b:2d:31:4c: 2f:71:7d:76:fd:89:01:e4:f2:ad:a3:43:6b:36:4e:24:51:c1: 56:64:8c:90:13:f0:47:72:fb:9f:95:1f:a5:1a:85:32:fa:71: 84:51:1e:19:bc:46:bc:84:77:9a:58:e8:54:00:cf:4e:7a:7d: 21:c2:0e:78:7d:47:8b:0e:18:3f:50:5d:52:33:96:b8:b2:d0: 7c:7a:bc:ce:7a:5a:96:c8:73:fc:2b:57:95:57:16:e2:9d:9e: 08:48:76:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1vjb5Ew8EUbD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ODJkYzljMGMtZDZmMy00NzY2LTljNTYtNTg2ZjM1ZDJkMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PUOYd92zff0s08jZsignEJAONYfQe2ixHPE HEIeWyf20WBaHlBwNolq6E+eMucoalJQc6sDaRSlFkuJgOqZCK1RQnnW9TZRMoCI Bqm/uNFm0Sfs04096CZj9+4Vs4a9YrsMYSB8O+ZquGk8GhoFwgIr2jHZHvvSC6dd nMGSUGIvyzf6RXQ8lbWJGNlwWL6QGFwGAhm9vkhfHKmTCSkyQJf4E8aoGla6JMHx ZIai3deUR4ajxVCehf6uvAaO8HPPT+scGDCXY4Q8AT6/jjRmr0hvA4Ish1R44Rte Q01I+k0Vj+qEgLtx3EhA1IefKlaSWDA3Z7rDChx7RBbK34c//QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/32Nj1KO2u7az9jryxYCHKNgaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNjVkNGJmYWEtZDYzYi0z YWM1LThkYzQtNzE2MzJjMjNlNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsqNsXRUBTY73aMKEacwPAzvO5ukPvyOoozjzT7u6ETnFt2FE6idgn4 ZV7NYFYa73gCbWK9i4VFAGyOLEv7QuxCc3UQZpzpLiXS8EbNRxpKCHMfE+4GcnhH tsyKofpyGjCwvzC1tauLuneL2sTkuaLWIi+J/Q8CGnNVh3wfVmNXYO2+kX/BySG4 omQDeb8f7XwWwzYBiVzmGBa1HI5cWy0xTC9xfXb9iQHk8q2jQ2s2TiRRwVZkjJAT 8Edy+5+VH6UahTL6cYRRHhm8RryEd5pY6FQAz056fSHCDnh9R4sOGD9QXVIzlriy 0Hx6vM56WpbIc/wrV5VXFuKdnghIdi8= -----END CERTIFICATE-----Generated at Tue Apr 8 13:07:35 2025 by rpki-client