$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa File: 1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa (raw, json) Hash identifier: UA0v+3wLDQAxDi0PTBnUVYlyIzU8pPZ3pOSYuFnNDeA= Subject key identifier: 64:19:B0:1E:5E:4D:C0:4F:DB:39:47:8F:47:B9:C4:A0:30:F7:51:09 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F43285849F2E53569A0C476D2DDCB75B0 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 32181 IP address blocks: 69.39.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:35:69:a0:c4:76:d2:dd:cb:75:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=339a4efa-a2b9-4f15-9d92-3cc6184247c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:a6:95:b0:8b:99:88:98:0e:7a:89:7f:ab: 44:30:e5:7a:79:05:c9:7e:48:e3:d5:06:c0:51:6a: 0d:3e:4b:47:e0:b0:ca:ec:a5:53:38:cf:10:28:07: da:45:11:49:f5:79:69:31:41:ba:08:8c:60:a7:88: a3:4c:c9:31:0b:71:1e:f9:af:81:e2:97:67:3a:ce: 66:45:a4:38:4a:59:a9:40:b4:02:36:e1:29:08:99: 56:3e:07:09:c6:2c:91:81:ce:e6:5e:69:4d:0f:a0: f7:f6:c9:66:19:51:76:50:1c:72:12:5b:31:1e:6e: b8:39:2d:47:20:26:cb:be:ee:76:98:1d:55:c6:03: 93:6b:92:74:ec:99:48:62:b2:9a:42:57:e9:87:17: db:2d:c4:17:f2:d1:39:34:30:ff:ec:d9:09:eb:b9: 34:d0:93:dc:b6:ca:98:5f:af:f1:91:61:52:cb:e0: 5a:10:77:53:b6:d0:a9:b7:3a:8f:7c:74:d8:8a:7c: 76:ac:41:07:df:25:c0:00:73:50:d0:17:2c:5f:7b: dc:21:f8:77:59:df:b5:3b:82:89:d9:56:86:5e:1d: ac:83:65:f3:39:07:f1:37:80:11:1f:b9:cb:78:b7: 25:81:bd:be:a9:ef:b5:df:35:9e:29:c3:d3:85:39: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:19:B0:1E:5E:4D:C0:4F:DB:39:47:8F:47:B9:C4:A0:30:F7:51:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 69.39.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:85:eb:5d:38:13:0e:ed:bb:df:2f:08:b0:71:5d:3e:b9:8e: 5f:9e:41:f3:9a:33:5b:58:06:4a:2d:d5:69:e3:d4:10:ae:6a: 78:cd:10:3a:28:5c:84:89:e9:f8:55:b0:b9:48:d9:98:fc:1e: 59:86:e2:a1:f5:65:1f:ac:ba:98:3a:8b:58:fa:d2:9c:1f:9b: cc:cd:25:be:74:4c:50:e9:07:37:c1:99:f5:dc:e6:51:5b:6d: 28:e6:3a:83:79:0d:3d:c3:30:ca:41:53:1c:33:7f:4d:3c:50: ea:45:93:50:30:47:af:83:e8:d7:62:26:d3:a3:fc:40:70:16: dc:69:36:ad:4b:78:bf:cb:3d:a8:c3:32:d2:0d:cb:e8:e8:9e: a1:25:e8:86:2d:f2:29:63:9a:a3:51:e1:d0:aa:0c:e5:d2:53: 77:05:1c:fa:7d:41:bb:cc:65:fc:88:1c:f0:c4:cc:db:4e:d2: 22:ca:f8:81:f3:6a:80:78:b6:cb:95:27:87:eb:ac:be:37:ef: 4a:12:8e:a4:28:bc:f4:a6:30:c4:46:4b:1f:36:9b:94:cd:21: 22:42:b9:d6:0d:e9:f9:4d:c8:e6:31:5c:6f:4e:02:85:56:4f: eb:c9:99:3d:57:68:54:df:5c:ab:3f:8a:ee:6b:a1:4e:5e:6e: a6:9a:2e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TVpoMR20t3LdbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MzM5YTRlZmEtYTJiOS00ZjE1LTlkOTItM2NjNjE4NDI0N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMamlbCLmYiYDnqJf6tEMOV6eQXJfkjj1QbA UWoNPktH4LDK7KVTOM8QKAfaRRFJ9XlpMUG6CIxgp4ijTMkxC3Ee+a+B4pdnOs5m RaQ4SlmpQLQCNuEpCJlWPgcJxiyRgc7mXmlND6D39slmGVF2UBxyElsxHm64OS1H ICbLvu52mB1VxgOTa5J07JlIYrKaQlfphxfbLcQX8tE5NDD/7NkJ67k00JPctsqY X6/xkWFSy+BaEHdTttCptzqPfHTYinx2rEEH3yXAAHNQ0BcsX3vcIfh3Wd+1O4KJ 2VaGXh2sg2XzOQfxN4ARH7nLeLclgb2+qe+13zWeKcPThTkCSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQZsB5eTcBP2zlHj0e5xKAw91EJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMWZjYWFlMmYtNTZjYS0z MWEyLWIyYjUtNGU2M2RhZWFhYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWF6104Ew7tu98vCLBxXT65jl+eQfOaM1tYBkot1Wnj1BCuanjNEDoo XISJ6fhVsLlI2Zj8HlmG4qH1ZR+supg6i1j60pwfm8zNJb50TFDpBzfBmfXc5lFb bSjmOoN5DT3DMMpBUxwzf008UOpFk1AwR6+D6NdiJtOj/EBwFtxpNq1LeL/LPajD MtINy+jonqEl6IYt8iljmqNR4dCqDOXSU3cFHPp9QbvMZfyIHPDEzNtO0iLK+IHz aoB4tsuVJ4frrL4370oSjqQovPSmMMRGSx82m5TNISJCudYN6flNyOYxXG9OAoVW T+vJmT1XaFTfXKs/iu5roU5ebqaaLpo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:07 2025 by rpki-client