$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/dc1dd873-5b94-3557-af09-0aa4d5126257.roa File: dc1dd873-5b94-3557-af09-0aa4d5126257.roa (raw, json) Hash identifier: 9iOJy2y7OCeYDvwK+5E59S1sabUeZuEoACyDe0lAAfg= Subject key identifier: 61:AE:67:F5:75:44:E0:C9:83:43:56:B4:7F:64:7D:81:E7:21:DA:F7 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858491246A7CAF8C331259BEFCF40 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/dc1dd873-5b94-3557-af09-0aa4d5126257.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 7018 IP address blocks: 69.30.64.0/21 maxlen: 21 69.30.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a7:ca:f8:c3:31:25:9b:ef:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=c65ed706-df95-4778-ac7b-9d7ec9702c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:24:ac:d6:0b:bc:b0:d4:3c:ca:3a:2d:56: ba:45:43:eb:20:00:b4:d1:bb:dc:0b:3d:44:27:84: 3f:f0:c2:d6:95:b6:da:38:2b:a3:35:0f:39:09:98: fb:90:8c:60:ed:83:b8:01:af:87:f8:a3:54:79:98: ea:e0:80:ab:5d:19:f2:4c:38:34:69:8d:20:65:c5: a5:de:22:e1:9f:ba:d7:86:f4:9b:3a:63:bd:9e:6e: 13:ed:8a:6a:61:dd:6e:28:f5:86:b1:40:37:53:bb: c5:1f:c6:37:1d:f2:0c:06:ec:bd:47:e5:2b:68:ce: b6:7f:8c:d8:d3:61:d3:40:8c:91:44:e1:1f:6f:0d: 92:6e:e9:4d:9d:9b:39:81:36:31:48:11:dc:e9:9d: f9:31:f6:d6:9e:79:a9:32:a7:12:b9:ce:2f:21:1a: 08:5c:2a:fe:38:ef:a5:4e:c4:6f:4f:dc:9a:0e:94: 3b:01:c3:7e:5d:4d:a0:af:58:ed:e0:06:12:fd:c5: 92:e2:af:86:77:83:e2:bb:9d:ff:ff:c2:10:42:2a: 3c:47:24:a8:65:dd:b8:94:3a:41:35:31:95:df:60: aa:49:73:50:63:aa:7a:ad:b6:c8:48:b0:34:82:9d: 7d:8e:72:72:a3:49:52:ae:b9:87:00:11:f7:19:96: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:67:F5:75:44:E0:C9:83:43:56:B4:7F:64:7D:81:E7:21:DA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/dc1dd873-5b94-3557-af09-0aa4d5126257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 69.30.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:74:33:47:c8:fd:b7:af:5a:2c:02:42:4a:7e:a5:2e:fc:03: 43:7e:f5:06:36:06:29:f0:39:9d:de:96:37:04:83:d9:ce:e6: 5d:07:1d:b4:65:f7:95:e4:b1:b1:b9:79:55:57:7e:18:3c:c2: 2e:e1:bd:f3:56:0b:36:dd:b8:b6:9c:55:71:af:42:fe:d4:01: 63:a3:12:fa:50:84:74:73:85:b1:90:56:9b:a1:b4:16:47:49: 17:15:60:e0:13:01:db:c9:03:08:e2:48:23:64:bd:0b:1a:dc: 6d:93:28:e1:87:85:6b:57:a1:e6:c9:2c:ea:df:99:99:5d:1f: 40:97:33:a6:78:12:90:cb:01:93:b7:15:46:28:5c:1f:16:21: 64:31:55:29:d9:12:00:77:03:eb:89:3f:46:cd:d4:42:ad:2f: 83:f7:17:fe:0e:f2:f3:e4:14:a6:78:40:82:55:a8:16:2b:04: b5:e7:88:f7:98:ae:b6:bd:0a:90:a1:e9:a3:7f:f1:35:b2:68: b7:83:ba:03:93:2e:d8:9f:4d:b6:a4:03:96:fa:3a:31:3f:37: 3e:34:1b:ef:6b:71:1c:a8:22:d0:36:82:81:8c:49:80:d7:15: 49:10:7f:54:0e:96:20:77:4b:bc:8f:8f:c3:bb:1e:86:bd:ba: 2e:ab:79:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqfK+MMxJZvvz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YzY1ZWQ3MDYtZGY5NS00Nzc4LWFjN2ItOWQ3ZWM5NzAyYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzckrNYLvLDUPMo6LVa6RUPrIAC00bvcCz1E J4Q/8MLWlbbaOCujNQ85CZj7kIxg7YO4Aa+H+KNUeZjq4ICrXRnyTDg0aY0gZcWl 3iLhn7rXhvSbOmO9nm4T7YpqYd1uKPWGsUA3U7vFH8Y3HfIMBuy9R+UraM62f4zY 02HTQIyRROEfbw2SbulNnZs5gTYxSBHc6Z35MfbWnnmpMqcSuc4vIRoIXCr+OO+l TsRvT9yaDpQ7AcN+XU2gr1jt4AYS/cWS4q+Gd4Piu53//8IQQio8RySoZd24lDpB NTGV32CqSXNQY6p6rbbISLA0gp19jnJyo0lSrrmHABH3GZZXAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGuZ/V1RODJg0NWtH9kfYHnIdr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZGMxZGQ4NzMtNWI5NC0z NTU3LWFmMDktMGFhNGQ1MTI2MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERR5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR0M0fI/bevWiwCQkp+pS78A0N+9QY2BinwOZ3eljcEg9nO5l0HHbRl 95XksbG5eVVXfhg8wi7hvfNWCzbduLacVXGvQv7UAWOjEvpQhHRzhbGQVpuhtBZH SRcVYOATAdvJAwjiSCNkvQsa3G2TKOGHhWtXoebJLOrfmZldH0CXM6Z4EpDLAZO3 FUYoXB8WIWQxVSnZEgB3A+uJP0bN1EKtL4P3F/4O8vPkFKZ4QIJVqBYrBLXniPeY rra9CpCh6aN/8TWyaLeDugOTLtifTbakA5b6OjE/Nz40G+9rcRyoItA2goGMSYDX FUkQf1QOliB3S7yPj8O7Hoa9ui6reYQ= -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:39 2025 by rpki-client