$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/21049820-e070-36eb-9a8f-3c72db71a1a9.roa File: 21049820-e070-36eb-9a8f-3c72db71a1a9.roa (raw, json) Hash identifier: TBNIaXcZy5a3v9gAgn+bprnsEMzHhKNkvpwVMRsO3xI= Subject key identifier: A4:46:DB:BE:AA:AD:72:8C:FB:EF:8B:C0:65:90:4B:77:46:6E:98:C3 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584953C446CFBD336DD9D3B98080 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/21049820-e070-36eb-9a8f-3c72db71a1a9.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 27385 IP address blocks: 69.67.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:46:cf:bd:33:6d:d9:d3:b9:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=a4ccb2c9-ddf6-45a4-b051-c1baa95c6f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:a7:f4:f0:66:71:c6:6e:93:36:c1:23:dd: 4b:ca:9b:bb:3f:78:23:02:2a:a9:75:45:5f:78:06: 8f:4a:a3:5a:3f:1d:0b:cd:7c:d4:4f:d5:b0:02:01: 45:e1:e8:d0:fe:b6:b3:2a:7e:d7:91:fb:96:8c:98: 28:8d:3f:9f:e0:b7:aa:e6:90:d3:cb:77:28:25:27: 4f:63:f8:37:9c:f7:f3:ce:2f:53:3e:7b:a5:44:7c: 56:4d:98:85:5d:bc:7d:92:aa:15:bd:df:48:e5:14: 3d:11:27:89:f0:2e:79:13:07:cd:48:e3:20:f9:63: ee:d8:21:42:63:75:05:d5:af:73:a4:31:60:47:2f: 03:76:89:05:d5:e3:88:82:cd:fd:71:78:30:06:48: 3c:6b:54:b6:73:8e:cf:03:09:4e:2c:e4:7e:93:17: 18:f1:df:ab:8a:75:40:bf:a0:ab:fa:94:a4:e0:3e: ee:27:94:8f:f9:3c:2d:8e:49:43:6a:52:32:64:1f: 7a:05:55:42:24:7a:a0:33:f2:c4:c7:4d:25:83:76: cd:75:8a:0e:ae:5b:bd:bc:59:b1:c9:1c:c4:43:3a: 45:36:8a:8f:2d:2c:30:84:f6:c9:31:2e:56:aa:c3: 11:1d:86:29:0a:15:db:18:57:9a:ad:53:e8:06:99: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:46:DB:BE:AA:AD:72:8C:FB:EF:8B:C0:65:90:4B:77:46:6E:98:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/21049820-e070-36eb-9a8f-3c72db71a1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv4: 69.67.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2a:5d:6f:86:73:02:21:04:ad:30:36:fd:0e:ea:c2:ce:3f: 30:60:33:1d:b4:77:de:18:19:b7:ca:55:c2:63:8d:71:8f:e8: 17:a7:1d:8f:99:11:64:de:39:a0:19:96:ca:5e:20:c3:14:23: d3:61:49:47:64:bf:d3:75:28:cf:ce:cc:21:d3:42:5b:16:20: c9:50:19:5c:d1:ac:6c:cc:81:88:60:a8:03:ec:87:95:f6:94: a9:b0:d0:27:b4:e4:e0:41:5f:be:a3:84:21:f6:0c:90:6b:ea: e5:41:6a:43:3f:75:85:7e:71:46:d6:ad:90:00:60:8a:9b:0b: e7:10:39:3b:ba:c3:22:1a:b0:8e:11:67:6c:ff:b5:07:ca:8d: ab:a6:59:b8:01:c5:31:f0:4a:52:e4:e5:af:6d:b0:9f:d8:c6: 4d:f4:08:ac:dd:f0:dd:a7:21:b5:b7:10:de:bc:de:bc:2f:bb: 30:67:c4:c5:2e:01:42:08:67:91:a8:e7:1f:d4:b6:ba:fc:88: ac:72:d7:57:32:17:07:75:26:84:b4:f4:ad:95:37:50:66:70: f4:a8:d3:f6:26:a4:59:b2:d0:62:99:23:ab:0e:26:39:cf:13: d0:d9:1d:99:35:69:cf:11:9d:e4:08:4d:89:60:b0:be:f8:a2: 4f:6b:da:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEbPvTNt2dO5gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTRjY2IyYzktZGRmNi00NWE0LWIwNTEtYzFiYWE5NWM2ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDen9PBmccZukzbBI91Lypu7P3gjAiqpdUVf eAaPSqNaPx0LzXzUT9WwAgFF4ejQ/razKn7XkfuWjJgojT+f4Leq5pDTy3coJSdP Y/g3nPfzzi9TPnulRHxWTZiFXbx9kqoVvd9I5RQ9ESeJ8C55EwfNSOMg+WPu2CFC Y3UF1a9zpDFgRy8DdokF1eOIgs39cXgwBkg8a1S2c47PAwlOLOR+kxcY8d+rinVA v6Cr+pSk4D7uJ5SP+TwtjklDalIyZB96BVVCJHqgM/LEx00lg3bNdYoOrlu9vFmx yRzEQzpFNoqPLSwwhPbJMS5WqsMRHYYpChXbGFearVPoBpmAewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRG276qrXKM+++LwGWQS3dGbpjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMjEwNDk4MjAtZTA3MC0z NmViLTlhOGYtM2M3MmRiNzFhMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUOyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8qXW+GcwIhBK0wNv0O6sLOPzBgMx20d94YGbfKVcJjjXGP6BenHY+Z EWTeOaAZlspeIMMUI9NhSUdkv9N1KM/OzCHTQlsWIMlQGVzRrGzMgYhgqAPsh5X2 lKmw0Ce05OBBX76jhCH2DJBr6uVBakM/dYV+cUbWrZAAYIqbC+cQOTu6wyIasI4R Z2z/tQfKjaumWbgBxTHwSlLk5a9tsJ/Yxk30CKzd8N2nIbW3EN683rwvuzBnxMUu AUIIZ5Go5x/Utrr8iKxy11cyFwd1JoS09K2VN1BmcPSo0/YmpFmy0GKZI6sOJjnP E9DZHZk1ac8RneQITYlgsL74ok9r2mE= -----END CERTIFICATE-----Generated at Tue Apr 8 14:47:42 2025 by rpki-client