$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa File: 558b5f3a-e791-3748-9943-fce0204ed7a7.roa (raw, json) Hash identifier: LuamAzwa2PrSc55XvkMCNeECI15d5445/nKYn77/Vsc= Subject key identifier: 45:33:75:DB:4D:B0:F4:28:FB:2C:54:68:6D:25:66:78:31:3F:62:6D Certificate issuer: /CN=410cdbf9-164e-4f04-8897-d002dc917140 Certificate serial: 010D0C9F4328584A3B7AF7ECA6EE380325611D00 Authority key identifier: 1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 393717 IP address blocks: 192.69.65.69/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f7:ec:a6:ee:38:03:25:61:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=410cdbf9-164e-4f04-8897-d002dc917140 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=7fb99d24-fb5d-4d30-b1e3-a49cda5c7ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4d:dc:09:10:31:10:8f:91:c4:3c:ec:d8:69: dd:49:93:e2:3e:4a:01:0b:36:7f:95:69:ce:18:f1: 40:07:d1:1e:4d:d9:d2:43:f9:fd:cf:38:e5:dc:fc: f0:43:0d:66:01:aa:cf:85:52:55:00:5f:09:ad:37: ed:42:a0:4d:75:99:f1:67:a7:08:5d:4a:4e:ff:62: 39:29:53:6c:b8:cb:3a:16:89:b4:40:49:8e:07:c3: 01:20:66:30:f5:a1:19:dd:e1:7d:71:4f:ad:ce:0c: d6:7f:28:6b:ff:26:86:c4:c8:66:ce:e4:d7:d3:97: a8:61:30:e6:b7:c8:7a:df:12:34:34:84:dc:56:bc: 4e:7a:36:ef:ff:f4:62:c9:c8:03:21:5a:ba:cb:56: b5:5a:7d:8a:7d:16:64:29:0b:aa:0e:f0:a0:8e:81: 8c:f0:b0:5e:d1:f6:51:90:03:3d:2c:ef:95:88:90: 95:2d:52:17:f9:08:42:55:fc:20:da:9a:6f:1f:23: 27:7f:5b:da:ba:f0:1f:24:13:1c:ec:3b:30:75:e4: fe:3e:11:2c:1f:bb:23:c5:2c:fc:9e:0c:21:4a:67: dc:b8:59:ff:ce:b8:47:fa:4b:0a:a4:29:88:5a:95: ca:76:f2:b0:24:9b:3c:93:78:ca:3f:7e:21:96:06: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:33:75:DB:4D:B0:F4:28:FB:2C:54:68:6D:25:66:78:31:3F:62:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/558b5f3a-e791-3748-9943-fce0204ed7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.crl X509v3 Authority Key Identifier: keyid:1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer sbgp-ipAddrBlock: critical IPv4: 192.69.65.69/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ba:8b:b5:fc:9f:1f:a1:48:d9:3a:7c:0b:dd:7c:f3:1c:3e: 2e:ab:cc:fa:f8:96:95:f8:62:92:b6:c6:42:d6:45:e9:67:91: fb:0b:94:c2:06:be:77:8c:3a:c1:fd:ae:cf:c0:53:97:13:ba: d9:46:5e:7f:a0:9e:64:31:fc:20:22:8b:46:df:af:24:41:17: bb:e6:5a:71:26:f0:bf:74:8c:18:76:7c:e4:7f:d4:32:72:81: 94:d1:db:66:10:de:c8:1f:37:42:20:77:f3:b3:85:2d:b7:68: a2:0f:90:7e:0a:37:09:61:69:53:1e:04:a4:78:f2:58:99:8f: 53:3a:b5:03:c8:20:e8:d6:d9:0e:42:0e:b0:10:7a:a1:d5:1e: 5b:81:2d:3e:c3:0b:64:2c:04:8a:ef:81:a6:7b:66:b6:76:e3: fd:38:d2:14:97:c1:14:19:bb:e9:3d:ab:db:75:bb:fc:70:ae: 70:55:b3:00:a9:72:3a:87:08:f6:d6:c4:78:91:a5:52:c6:e0: bc:3a:2d:5a:14:c8:1f:de:64:87:77:cc:56:ae:ae:e1:0d:1b: 07:29:48:03:b9:f8:3e:d9:a9:04:84:13:f8:0d:12:c3:21:82: 76:cc:c9:01:51:84:80:d4:50:60:d7:e2:c8:09:05:2c:25:43: 8b:7d:06:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo7evfspu44AyVhHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDEwY2RiZjktMTY0ZS00ZjA0LTg4OTctZDAwMmRjOTE3 MTQwMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk N2ZiOTlkMjQtZmI1ZC00ZDMwLWIxZTMtYTQ5Y2RhNWM3YWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl03cCRAxEI+RxDzs2GndSZPiPkoBCzZ/lWnO GPFAB9EeTdnSQ/n9zzjl3PzwQw1mAarPhVJVAF8JrTftQqBNdZnxZ6cIXUpO/2I5 KVNsuMs6Fom0QEmOB8MBIGYw9aEZ3eF9cU+tzgzWfyhr/yaGxMhmzuTX05eoYTDm t8h63xI0NITcVrxOejbv//RiycgDIVq6y1a1Wn2KfRZkKQuqDvCgjoGM8LBe0fZR kAM9LO+ViJCVLVIX+QhCVfwg2ppvHyMnf1vauvAfJBMc7DswdeT+PhEsH7sjxSz8 ngwhSmfcuFn/zrhH+ksKpCmIWpXKdvKwJJs8k3jKP34hlgZ1QwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEUzddtNsPQo+yxUaG0lZngxP2JtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTBj ZGJmOS0xNjRlLTRmMDQtODg5Ny1kMDAyZGM5MTcxNDAvNTU4YjVmM2EtZTc5MS0z NzQ4LTk5NDMtZmNlMDIwNGVkN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDEwY2RiZjktMTY0ZS00ZjA0LTg4 OTctZDAwMmRjOTE3MTQwLzQxMGNkYmY5LTE2NGUtNGYwNC04ODk3LWQwMDJkYzkx NzE0MC5jcmwwHwYDVR0jBBgwFoAUH4s7tLSzcA9J7wdjCNGir8W43pQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MTBjZGJmOS0xNjRlLTRmMDQtODg5Ny1kMDAy ZGM5MTcxNDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwEVBRTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvuou1/J8foUjZOnwL3XzzHD4uq8z6+JaV+GKStsZC1kXpZ5H7C5TC Br53jDrB/a7PwFOXE7rZRl5/oJ5kMfwgIotG368kQRe75lpxJvC/dIwYdnzkf9Qy coGU0dtmEN7IHzdCIHfzs4Utt2iiD5B+CjcJYWlTHgSkePJYmY9TOrUDyCDo1tkO Qg6wEHqh1R5bgS0+wwtkLASK74Gme2a2duP9ONIUl8EUGbvpPavbdbv8cK5wVbMA qXI6hwj21sR4kaVSxuC8Oi1aFMgf3mSHd8xWrq7hDRsHKUgDufg+2akEhBP4DRLD IYJ2zMkBUYSA1FBg1+LICQUsJUOLfQYy -----END CERTIFICATE-----Generated at Wed Jul 9 19:21:07 2025 by rpki-client