$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa File: bdc3244e-4ea8-3a24-8894-2a79f0924702.roa (raw, json) Hash identifier: MmdBLw3egE5SuZsRizTN1pJTMCmW64TL4160VEQHN1c= Subject key identifier: 30:A4:1E:B9:1C:83:BA:F0:FF:3D:E1:57:16:74:5E:F4:6E:10:E9:CD Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584902EC15951D0181F3A17D7370 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 32181 IP address blocks: 69.65.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:15:95:1d:01:81:f3:a1:7d:73:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=30fcff48-ced9-487e-9d01-4f47058919be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:44:50:db:d8:4a:cb:5c:e5:19:cf:55:42:fd: a1:8a:8f:6e:a9:db:76:c3:84:0a:2c:f5:26:38:f4: 1e:f9:f4:a7:61:ac:5a:fb:f5:48:76:e0:41:44:4f: 0a:83:6f:d8:62:c5:4c:13:cf:6d:e0:db:7e:e5:6e: f7:80:b8:60:88:4d:e8:00:d2:6a:e4:c7:ad:89:67: 50:d4:21:d3:b1:b3:fe:64:37:94:58:2c:f5:9c:86: 42:0b:d2:3b:cb:1f:93:d9:f6:f2:18:ae:f7:32:f7: 72:67:16:b2:17:97:f8:65:91:af:a1:95:ba:3c:87: c4:f0:6b:87:f8:14:cc:36:cf:e6:96:91:81:08:d5: f6:9d:ee:bb:ea:63:21:3d:c0:2c:71:b1:49:07:44: d3:76:1b:1b:70:78:64:f1:f4:a5:b8:1e:f7:72:b9: 91:1c:bf:19:4f:b2:cd:bd:5c:a3:61:1a:b4:6e:0e: 84:93:30:fc:9e:08:17:ff:77:7f:33:08:17:f4:2d: 5f:3a:31:21:d3:1e:5a:5a:5b:31:6e:8c:e1:b5:39: 6c:39:e3:9e:b9:38:a4:91:ef:36:5d:54:d1:95:f9: 8b:2d:fb:9a:58:81:83:e0:c6:85:0b:b8:a5:48:14: c0:0a:0b:d6:4a:ee:a2:ef:3b:70:f0:ab:84:31:9d: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A4:1E:B9:1C:83:BA:F0:FF:3D:E1:57:16:74:5E:F4:6E:10:E9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 69.65.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:69:97:62:98:42:14:01:a0:62:9b:2c:51:74:0c:cd:db:b0: 69:3f:7c:0b:3c:af:52:67:d6:11:26:44:61:36:fd:eb:50:30: 72:68:7d:16:a6:91:a9:2f:8c:b1:20:1a:b1:8a:d2:c8:73:be: 83:e5:88:0d:10:1f:3b:48:02:3f:b8:f6:b4:cb:86:7e:42:de: ab:89:75:35:11:ec:74:a5:6e:88:cd:4c:d6:85:21:16:9b:01: 36:b2:8f:26:67:06:51:2c:5e:9d:ca:70:c5:05:71:0b:7e:c3: 1f:f1:30:a1:62:43:11:8d:f0:fd:72:32:98:2d:32:13:9d:a2: 14:61:00:f1:53:b4:14:30:3a:2b:fb:1c:e4:d4:77:8f:b1:3f: b0:3c:93:6a:1d:dc:f8:c4:b7:66:49:37:87:fe:89:1d:21:eb: 59:70:02:af:60:2f:af:1d:90:32:b4:86:6a:0d:35:45:d5:61: f4:52:7c:d0:fb:d9:b9:a0:47:71:a0:79:1a:80:21:9c:03:a5: a7:2f:7c:5f:79:fe:59:b4:f4:cd:7a:e3:18:62:f0:c9:80:72: a6:e8:86:18:37:46:4d:66:18:4d:41:79:79:24:b6:2d:e0:48: 9f:df:6d:6b:bb:54:25:a7:91:a2:1c:4f:34:fa:94:76:3a:d5: b9:f0:6c:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BWVHQGB86F9c3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MzBmY2ZmNDgtY2VkOS00ODdlLTlkMDEtNGY0NzA1ODkxOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlURQ29hKy1zlGc9VQv2hio9uqdt2w4QKLPUm OPQe+fSnYaxa+/VIduBBRE8Kg2/YYsVME89t4Nt+5W73gLhgiE3oANJq5MetiWdQ 1CHTsbP+ZDeUWCz1nIZCC9I7yx+T2fbyGK73MvdyZxayF5f4ZZGvoZW6PIfE8GuH +BTMNs/mlpGBCNX2ne676mMhPcAscbFJB0TTdhsbcHhk8fSluB73crmRHL8ZT7LN vVyjYRq0bg6EkzD8nggX/3d/MwgX9C1fOjEh0x5aWlsxbozhtTlsOeOeuTikke82 XVTRlfmLLfuaWIGD4MaFC7ilSBTACgvWSu6i7ztw8KuEMZ0tAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCkHrkcg7rw/z3hVxZ0XvRuEOnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmRjMzI0NGUtNGVhOC0z YTI0LTg4OTQtMmE3OWYwOTI0NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRUEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJpl2KYQhQBoGKbLFF0DM3bsGk/fAs8r1Jn1hEmRGE2/etQMHJofRam kakvjLEgGrGK0shzvoPliA0QHztIAj+49rTLhn5C3quJdTUR7HSlbojNTNaFIRab ATayjyZnBlEsXp3KcMUFcQt+wx/xMKFiQxGN8P1yMpgtMhOdohRhAPFTtBQwOiv7 HOTUd4+xP7A8k2od3PjEt2ZJN4f+iR0h61lwAq9gL68dkDK0hmoNNUXVYfRSfND7 2bmgR3GgeRqAIZwDpacvfF95/lm09M164xhi8MmAcqbohhg3Rk1mGE1BeXkkti3g SJ/fbWu7VCWnkaIcTzT6lHY61bnwbHM= -----END CERTIFICATE-----Generated at Sat Apr 5 12:09:22 2025 by rpki-client