$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa File: 7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa (raw, json) Hash identifier: Rd60mCVx3sFcTX/m+SxIVng5qEBM7yhJPWg2LYL3kNs= Subject key identifier: 76:15:66:62:F5:D5:FE:EC:CC:C3:CD:8D:87:28:A3:A5:DD:62:EF:8D Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F43285848D9C1B9EE52A7E7C623DC1980 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa Signing time: Tue 11 Feb 2025 20:07:38 +0000 ROA not before: Tue 11 Feb 2025 20:07:38 +0000 ROA not after: Mon 12 May 2025 19:07:38 +0000 asID: 208208 IP address blocks: 69.42.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c1:b9:ee:52:a7:e7:c6:23:dc:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Feb 11 20:07:38 2025 GMT Not After : May 12 19:07:38 2025 GMT Subject: CN=455f1f97-a111-4754-b2da-ad27909b6ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:72:cc:aa:26:b1:fd:4b:fc:06:86:2a:c2: b0:be:61:e2:f3:bc:1c:11:f8:6e:06:ea:50:d9:88: d8:fc:e5:e7:fc:21:7e:ef:1e:a0:94:a7:7b:8d:9f: d7:48:0b:b3:74:60:c2:91:9b:51:e5:b5:55:a0:a1: 60:f1:04:52:33:ca:ec:59:a2:bb:77:56:ae:aa:83: 64:59:72:dd:79:45:b5:d9:bc:2a:80:62:1d:29:00: 81:81:3d:de:0b:91:ef:49:3b:a2:2a:d8:5f:41:e5: 56:c0:72:65:06:73:4b:83:79:cd:1f:98:8c:9e:02: cd:a7:36:a2:fa:2f:21:20:64:ad:0e:45:36:7c:bd: fe:c6:f4:56:3a:0c:d5:0a:d6:b5:1b:e2:32:41:08: bf:28:f3:0b:b0:49:1d:16:e2:75:8e:a0:f5:3b:8c: 61:bf:1d:ba:01:52:ff:0e:06:6f:80:d2:f8:7e:b9: 8d:84:c4:48:42:70:a5:8f:37:99:8c:5f:ca:bd:bc: 82:dd:4f:b0:0a:11:8f:c0:88:4d:35:b4:c6:2f:94: bf:cb:82:e7:3c:46:d7:79:c7:cb:16:87:09:d7:45: 44:f6:1f:d7:23:cb:67:ee:19:67:68:ab:4d:d3:65: cc:a5:41:d5:ed:7b:12:11:a0:ac:19:0e:3a:11:24: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:15:66:62:F5:D5:FE:EC:CC:C3:CD:8D:87:28:A3:A5:DD:62:EF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 69.42.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3f:c8:2c:16:50:e3:f7:cf:28:44:4d:2a:e4:d4:5a:93:36: 6b:5a:63:59:e6:84:75:4e:21:e1:0c:5c:67:5a:f4:bc:46:c4: ca:18:1b:13:59:bd:49:9f:af:e7:9a:ba:0f:e8:cc:20:8b:5d: dc:11:b6:9d:62:2f:e7:09:1c:eb:ff:dc:00:cf:1d:ea:c5:a4: 78:c7:5b:9e:3a:51:06:4b:31:ba:df:ec:48:21:a2:11:fb:ce: 28:92:7d:b2:35:d1:c1:d4:a4:49:ca:57:7c:de:aa:75:61:76: 6b:7b:0b:f8:26:d6:0c:01:ce:47:3a:8d:fc:87:c2:b1:b2:db: 79:76:30:65:ca:c0:42:83:fc:39:a5:d4:21:e2:97:44:44:f0: 2a:31:75:98:c0:0d:e3:4d:c3:d9:cc:a2:8a:8f:8d:ca:b9:ce: e1:5d:6b:fe:81:9b:85:b1:7f:a8:c0:49:41:45:2e:de:f4:0d: b1:c1:2c:b6:6c:3c:63:52:97:d6:fd:9b:e2:41:f7:93:b0:fc: e4:fa:61:c1:6c:24:2f:1e:4b:6b:b5:14:02:a7:f6:d9:5a:82: bf:3e:9f:bf:c6:77:f9:7d:b7:75:04:9e:21:46:ea:33:bf:b8: 98:6d:7f:4f:9e:9e:2f:b4:a7:59:d5:39:d8:19:08:cf:c4:23: 10:1f:bd:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZwbnuUqfnxiPcGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDIxMTIwMDczOFoXDTI1MDUxMjE5MDczOFowLzEtMCsGA1UEAxMk NDU1ZjFmOTctYTExMS00NzU0LWIyZGEtYWQyNzkwOWI2ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqlyzKomsf1L/AaGKsKwvmHi87wcEfhuBupQ 2YjY/OXn/CF+7x6glKd7jZ/XSAuzdGDCkZtR5bVVoKFg8QRSM8rsWaK7d1auqoNk WXLdeUW12bwqgGIdKQCBgT3eC5HvSTuiKthfQeVWwHJlBnNLg3nNH5iMngLNpzai +i8hIGStDkU2fL3+xvRWOgzVCta1G+IyQQi/KPMLsEkdFuJ1jqD1O4xhvx26AVL/ DgZvgNL4frmNhMRIQnCljzeZjF/KvbyC3U+wChGPwIhNNbTGL5S/y4LnPEbXecfL FocJ10VE9h/XI8tn7hlnaKtN02XMpUHV7XsSEaCsGQ46EST5AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYVZmL11f7szMPNjYcoo6XdYu+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvN2Y2NTdlZjMtYjZjMC0z MDlmLWFkNWEtZTkzNmVmYTVmZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU/yCwWUOP3zyhETSrk1FqTNmtaY1nmhHVOIeEMXGda9LxGxMoYGxNZ vUmfr+eaug/ozCCLXdwRtp1iL+cJHOv/3ADPHerFpHjHW546UQZLMbrf7EghohH7 ziiSfbI10cHUpEnKV3zeqnVhdmt7C/gm1gwBzkc6jfyHwrGy23l2MGXKwEKD/Dml 1CHil0RE8CoxdZjADeNNw9nMooqPjcq5zuFda/6Bm4Wxf6jASUFFLt70DbHBLLZs PGNSl9b9m+JB95Ow/OT6YcFsJC8eS2u1FAKn9tlagr8+n7/Gd/l9t3UEniFG6jO/ uJhtf0+eni+0p1nVOdgZCM/EIxAfvVc= -----END CERTIFICATE-----Generated at Wed Apr 16 03:35:57 2025 by rpki-client