$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f3107544-281b-3c2c-8faa-c8c74811c43d.roa File: f3107544-281b-3c2c-8faa-c8c74811c43d.roa (raw, json) Hash identifier: NXEmNNAONM4UT3MBB23ARn1waVz1Vkg+OqRltS7IL7Q= Subject key identifier: D8:35:44:EC:6A:C8:72:20:B7:44:B6:E5:27:43:C2:5D:EC:63:F4:F5 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285848B253B7577553F38891841138 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f3107544-281b-3c2c-8faa-c8c74811c43d.roa Signing time: Tue 28 Jan 2025 17:09:27 +0000 ROA not before: Tue 28 Jan 2025 17:09:27 +0000 ROA not after: Mon 28 Apr 2025 16:09:27 +0000 asID: 54004 IP address blocks: 69.176.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:53:b7:57:75:53:f3:88:91:84:11:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jan 28 17:09:27 2025 GMT Not After : Apr 28 16:09:27 2025 GMT Subject: CN=46f73273-599b-42a0-bf24-10ab86f5c6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ec:ea:46:85:09:fd:20:cb:52:b4:05:5d:05: 61:1f:51:aa:70:ed:72:63:ba:92:41:24:af:c5:8a: f7:6f:ec:7c:30:a8:92:88:e5:e0:69:23:bb:7d:87: a6:fa:f1:56:d2:03:f4:06:ae:de:80:a4:9c:dd:75: 81:17:e6:64:7e:48:7b:56:f2:bf:18:70:75:0b:5f: 5e:95:9c:52:68:5e:f1:eb:56:d2:08:6e:0a:70:21: f0:cf:46:6f:d0:14:b1:e7:ab:30:1c:dc:be:44:69: 55:38:4c:23:8e:37:6e:21:65:e3:ce:d2:e8:22:16: 30:56:d7:91:55:17:9b:57:59:22:d7:c0:4b:92:f7: 4b:52:c3:4c:2d:b6:45:5d:12:39:04:44:bc:8a:a0: db:e4:d1:53:a3:34:ec:bd:af:ca:ab:83:ea:41:9c: 70:e7:18:36:7b:aa:97:e6:b6:b1:d0:f9:8f:41:ad: 09:3d:93:b8:33:ef:e0:12:63:76:8f:95:f9:9e:d0: fd:49:0b:c1:37:75:25:ef:e1:ce:f7:69:8e:a8:37: 3d:35:9d:5e:37:20:86:16:02:07:9c:e2:f9:dc:46: 64:77:33:f1:dd:a5:34:58:5e:2b:2e:ba:f4:b6:3a: 22:a0:a6:63:58:3e:4e:25:c5:35:32:fe:d9:c2:59: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:44:EC:6A:C8:72:20:B7:44:B6:E5:27:43:C2:5D:EC:63:F4:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f3107544-281b-3c2c-8faa-c8c74811c43d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ca:99:e0:9f:cb:86:cb:b5:53:3b:a0:96:b6:f6:6c:90:d1: d8:58:f3:12:df:85:2b:26:b2:e1:cc:c3:53:aa:f1:fc:27:93: 09:c3:55:b0:df:3b:92:64:7e:d4:39:e0:61:41:64:79:8c:67: 90:37:d9:55:45:78:63:23:fb:a6:d7:ec:46:ba:4c:d1:58:13: fe:90:e3:f4:16:57:68:66:29:c0:77:1b:f6:7c:24:13:82:77: f7:cf:db:ae:89:10:5d:08:ad:2f:73:ab:0d:75:84:86:09:eb: 1e:bf:26:fd:c5:5a:50:69:b5:4c:c6:c1:c4:31:8c:4a:88:48: d6:3d:f8:cc:b3:ad:96:6b:0e:da:e7:d8:50:35:ee:b2:19:5b: fc:f2:6e:88:7b:ab:06:a8:2a:5b:cc:60:62:e6:df:2d:e1:5d: 16:67:91:fd:52:01:e6:2e:4c:5a:d7:72:ec:4c:5b:af:b7:bf: 60:b3:7a:e6:35:cc:10:d9:78:ad:a7:b4:f6:44:13:e7:07:18: d3:b0:0f:f1:fa:67:4f:f0:be:69:90:e2:ca:7f:4e:6c:36:b2: 22:f0:d9:d4:bb:eb:79:4d:97:ac:34:76:c1:63:bc:dd:81:74: 4d:66:f9:ce:b0:98:a4:73:74:d7:a7:77:6f:96:3e:25:ad:2f: a4:15:4d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyU7dXdVPziJGEETgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDEyODE3MDkyN1oXDTI1MDQyODE2MDkyN1owLzEtMCsGA1UEAxMk NDZmNzMyNzMtNTk5Yi00MmEwLWJmMjQtMTBhYjg2ZjVjNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+zqRoUJ/SDLUrQFXQVhH1GqcO1yY7qSQSSv xYr3b+x8MKiSiOXgaSO7fYem+vFW0gP0Bq7egKSc3XWBF+Zkfkh7VvK/GHB1C19e lZxSaF7x61bSCG4KcCHwz0Zv0BSx56swHNy+RGlVOEwjjjduIWXjztLoIhYwVteR VRebV1ki18BLkvdLUsNMLbZFXRI5BES8iqDb5NFTozTsva/Kq4PqQZxw5xg2e6qX 5rax0PmPQa0JPZO4M+/gEmN2j5X5ntD9SQvBN3Ul7+HO92mOqDc9NZ1eNyCGFgIH nOL53EZkdzPx3aU0WF4rLrr0tjoioKZjWD5OJcU1Mv7ZwllGcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg1ROxqyHIgt0S25SdDwl3sY/T1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZjMxMDc1NDQtMjgxYi0z YzJjLThmYWEtYzhjNzQ4MTFjNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRbBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfKmeCfy4bLtVM7oJa29myQ0dhY8xLfhSsmsuHMw1Oq8fwnkwnDVbDf O5JkftQ54GFBZHmMZ5A32VVFeGMj+6bX7Ea6TNFYE/6Q4/QWV2hmKcB3G/Z8JBOC d/fP266JEF0IrS9zqw11hIYJ6x6/Jv3FWlBptUzGwcQxjEqISNY9+MyzrZZrDtrn 2FA17rIZW/zyboh7qwaoKlvMYGLm3y3hXRZnkf1SAeYuTFrXcuxMW6+3v2CzeuY1 zBDZeK2ntPZEE+cHGNOwD/H6Z0/wvmmQ4sp/Tmw2siLw2dS763lNl6w0dsFjvN2B dE1m+c6wmKRzdNend2+WPiWtL6QVTdQ= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:07 2025 by rpki-client