$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/dabb483e-993e-3116-bd91-f1d76b191128.roa File: dabb483e-993e-3116-bd91-f1d76b191128.roa (raw, json) Hash identifier: SQ+QlZ/vYtV0WslsxBrI54y3W4Hg7URJq41z4OHwQNY= Subject key identifier: 89:BA:78:0C:05:AF:D4:9E:DC:72:DF:15:BC:A1:8D:E8:42:76:E3:BF Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Certificate serial: 010D0C9F432858493AA3DDF753C9C626F75338C0 Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/dabb483e-993e-3116-bd91-f1d76b191128.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 36344 IP address blocks: 69.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:dd:f7:53:c9:c6:26:f7:53:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=2e4c1a63-f3d6-4967-b410-e5a88a0564e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:6e:d3:fb:af:5f:6d:a0:ed:b6:84:cd:b3: d2:23:fa:fa:d3:e5:60:46:dd:c2:aa:e0:2a:84:ea: 8a:c6:d8:33:56:2b:a2:8d:73:cc:3f:d4:35:1f:99: 0d:e0:0b:11:69:08:c5:58:73:f8:1a:d8:04:71:95: 6b:45:9e:5a:37:d9:1c:73:a9:54:38:25:b5:e9:9d: c3:6d:02:c7:f7:22:3c:14:ac:24:fa:72:f3:6f:85: 27:81:e0:80:68:ca:4a:d3:87:57:c6:a5:ce:5b:87: 6e:6a:86:95:48:4f:07:2b:94:92:57:b6:9a:a1:53: 67:49:28:81:49:97:18:43:ac:bd:a6:09:e7:b6:0f: e6:c3:6e:7f:e3:f8:64:be:8f:ac:fd:41:6d:f6:9d: dc:7e:da:e1:09:ac:1e:a1:2f:81:2b:31:08:e1:ad: a1:55:dc:ec:a8:a7:ef:d8:ef:e8:70:27:1c:1d:1d: 75:cb:45:1b:ef:8d:20:d8:0c:83:5e:0a:9c:97:94: 50:77:c9:df:6b:7e:97:d7:00:9f:32:bd:6b:db:75: 57:c8:e2:ca:60:c6:a2:b4:c0:98:19:b4:7c:f7:ed: 39:20:13:38:11:54:23:a3:32:9b:43:a4:ff:36:94: ae:42:0b:24:e7:c5:cd:86:e6:43:21:b9:d5:6e:0f: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BA:78:0C:05:AF:D4:9E:DC:72:DF:15:BC:A1:8D:E8:42:76:E3:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/dabb483e-993e-3116-bd91-f1d76b191128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl X509v3 Authority Key Identifier: keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer sbgp-ipAddrBlock: critical IPv4: 69.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4e:05:02:78:92:69:69:6c:b5:3b:46:47:c6:67:6d:17:c4: 31:f8:86:51:17:e9:b9:ad:59:67:f2:ed:a4:65:b8:1c:49:09: d8:17:55:ec:30:21:96:77:4a:60:fe:e2:f4:05:4c:6d:1d:95: 3a:31:e6:93:5d:57:c0:49:11:27:1f:99:45:bb:1f:6f:9d:9d: d1:fe:15:67:e2:dd:50:c4:01:5a:16:14:16:db:19:88:76:a7: 69:c3:b3:1c:55:e1:9a:7f:a2:de:63:9d:b8:42:b4:70:b0:0f: 12:ac:51:b1:91:37:90:18:fe:eb:58:12:00:b7:52:9c:59:0c: f7:38:9b:10:88:0c:a8:64:b8:29:6e:7b:9f:bf:63:de:91:5a: 55:f8:e2:d6:9c:4e:3d:15:38:d3:18:4a:01:11:60:d0:8b:85: 28:13:7e:2d:77:e1:41:2f:f8:29:88:ca:a0:7f:af:58:5d:58: 28:55:75:8f:73:d8:d2:01:0b:91:85:77:ec:74:48:24:4f:ca: b2:c7:71:d7:e2:58:66:3f:6c:89:4a:33:23:e5:45:6d:b8:90: 5d:ec:ff:a8:f8:06:bf:16:c6:e8:ed:4b:51:f9:a7:45:ee:6b: 8f:db:9e:f1:71:1f:de:dd:6a:dc:88:c2:a5:d1:80:eb:1b:3b: 40:2e:62:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o933U8nGJvdTOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm MjE4MB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk MmU0YzFhNjMtZjNkNi00OTY3LWI0MTAtZTVhODhhMDU2NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKhu0/uvX22g7baEzbPSI/r60+VgRt3CquAq hOqKxtgzViuijXPMP9Q1H5kN4AsRaQjFWHP4GtgEcZVrRZ5aN9kcc6lUOCW16Z3D bQLH9yI8FKwk+nLzb4UngeCAaMpK04dXxqXOW4duaoaVSE8HK5SSV7aaoVNnSSiB SZcYQ6y9pgnntg/mw25/4/hkvo+s/UFt9p3cftrhCaweoS+BKzEI4a2hVdzsqKfv 2O/ocCccHR11y0Ub740g2AyDXgqcl5RQd8nfa36X1wCfMr1r23VXyOLKYMaitMCY GbR89+05IBM4EVQjozKbQ6T/NpSuQgsk58XNhuZDIbnVbg9N5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm6eAwFr9Se3HLfFbyhjehCduO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvZGFiYjQ4M2UtOTkzZS0z MTE2LWJkOTEtZjFkNzZiMTkxMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtOBQJ4kmlpbLU7RkfGZ20XxDH4hlEX6bmtWWfy7aRluBxJCdgXVeww IZZ3SmD+4vQFTG0dlTox5pNdV8BJEScfmUW7H2+dndH+FWfi3VDEAVoWFBbbGYh2 p2nDsxxV4Zp/ot5jnbhCtHCwDxKsUbGRN5AY/utYEgC3UpxZDPc4mxCIDKhkuClu e5+/Y96RWlX44tacTj0VONMYSgERYNCLhSgTfi134UEv+CmIyqB/r1hdWChVdY9z 2NIBC5GFd+x0SCRPyrLHcdfiWGY/bIlKMyPlRW24kF3s/6j4Br8WxujtS1H5p0Xu a4/bnvFxH97datyIwqXRgOsbO0AuYm8= -----END CERTIFICATE-----Generated at Fri Apr 4 19:22:21 2025 by rpki-client