$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa File: 0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa (raw, json) Hash identifier: EYxFDHWBde7Dwz1Pk0cXfBarSTgS+4H+3EJv/C5LYHY= Subject key identifier: 2A:14:3D:41:F5:72:81:FB:C5:21:93:39:02:E6:92:8B:E0:E6:E5:13 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F43285848D21139FE582112BEA7D33040 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 6621 IP address blocks: 67.44.0.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:39:fe:58:21:12:be:a7:d3:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c67c99ee-2aaa-40b3-a7ee-a680ed020739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:92:63:c0:23:62:0f:52:ce:98:d5:ab:95: 7f:cb:2c:7d:c0:03:2d:47:cf:25:b9:83:d6:71:d4: 2c:17:11:d0:90:c9:ee:1b:65:5e:a8:dd:ec:b5:51: 1d:6c:40:a7:0b:c2:51:5e:f5:73:e1:b2:05:a5:8f: fa:57:02:f0:7a:26:88:36:0f:84:5b:cf:19:20:4d: 04:dc:90:60:09:07:b7:16:ce:5b:4e:22:d4:ca:50: 4c:24:a7:ed:8d:f5:41:8e:71:78:b8:8e:59:de:d6: 95:c7:fd:8d:09:f0:a5:31:55:93:1a:16:f6:f2:d0: c5:f4:4d:4f:34:64:87:37:68:09:76:bf:dd:f7:ce: 7c:71:43:7d:ff:09:18:03:52:cf:a8:92:64:60:9a: be:fb:18:69:70:43:27:61:f6:70:82:1d:5d:78:ac: 2b:a5:64:ba:46:00:22:e5:d6:68:c4:b2:16:fd:60: 94:cb:56:e6:d1:62:52:58:25:dd:d3:3a:f1:cc:04: 94:45:4b:3a:57:4f:98:c9:ae:69:b5:0e:80:95:78: 8f:31:b1:49:ba:a8:d9:fc:4b:69:fc:fb:25:7e:b4: 93:34:d0:ee:b8:f7:7a:68:5c:66:ae:32:a7:1d:84: 47:95:24:e6:a0:fa:2f:ea:ea:71:cf:99:28:ad:83: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:14:3D:41:F5:72:81:FB:C5:21:93:39:02:E6:92:8B:E0:E6:E5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0d5f7e7f-04fd-3eb3-84fb-a02a50f0c967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:21:2e:e8:9a:c2:56:63:b8:64:9f:0c:8a:9a:c0:f7:6b:a4: 61:ce:58:3b:8c:78:e6:82:71:a6:13:85:1f:ad:c9:84:c7:4d: 31:1c:45:2a:ee:2e:33:2e:28:be:7d:ee:6a:09:f1:99:01:c8: 9d:b4:f9:12:57:a7:ad:b5:cc:4e:45:0b:4a:ec:41:a1:49:f8: dc:f2:94:09:b1:39:9f:d9:99:92:83:86:e2:bf:c0:97:11:10: f5:32:2d:27:9c:6c:58:f6:37:73:1d:3d:73:4f:27:66:2d:7f: 70:68:bc:94:bf:4b:fa:b9:16:51:88:4a:d9:63:33:36:84:fd: 8b:9c:9a:33:69:40:35:a3:c7:a1:25:b6:a8:aa:da:b1:52:c5: d4:c5:9a:ae:ce:4f:de:5c:06:0f:d3:66:32:34:59:d2:77:93: 2d:cd:61:a1:14:81:11:9b:98:4a:02:00:bc:dd:a2:a6:f4:28: 48:5f:5b:f5:66:37:9e:ca:f4:58:2d:78:c2:92:14:36:33:a4: 61:77:00:fb:39:e7:73:91:57:1f:48:91:ad:c9:c2:ff:5a:45: 53:1d:4f:89:75:4d:8f:d2:0b:da:82:bc:c8:ae:09:27:8f:6a: b1:c7:25:97:9b:4a:e2:69:35:36:d1:3c:0d:f5:28:0e:fb:6d: f7:69:e3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETn+WCESvqfTMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzY3Yzk5ZWUtMmFhYS00MGIzLWE3ZWUtYTY4MGVkMDIwNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4qSY8AjYg9SzpjVq5V/yyx9wAMtR88luYPW cdQsFxHQkMnuG2VeqN3stVEdbECnC8JRXvVz4bIFpY/6VwLweiaINg+EW88ZIE0E 3JBgCQe3Fs5bTiLUylBMJKftjfVBjnF4uI5Z3taVx/2NCfClMVWTGhb28tDF9E1P NGSHN2gJdr/d9858cUN9/wkYA1LPqJJkYJq++xhpcEMnYfZwgh1deKwrpWS6RgAi 5dZoxLIW/WCUy1bm0WJSWCXd0zrxzASURUs6V0+Yya5ptQ6AlXiPMbFJuqjZ/Etp /PslfrSTNNDuuPd6aFxmrjKnHYRHlSTmoPov6upxz5korYNWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoUPUH1coH7xSGTOQLmkovg5uUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMGQ1ZjdlN2YtMDRmZC0z ZWIzLTg0ZmItYTAyYTUwZjBjOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJshLuiawlZjuGSfDIqawPdrpGHOWDuMeOaCcaYThR+tyYTHTTEcRSru LjMuKL597moJ8ZkByJ20+RJXp621zE5FC0rsQaFJ+NzylAmxOZ/ZmZKDhuK/wJcR EPUyLSecbFj2N3MdPXNPJ2Ytf3BovJS/S/q5FlGIStljMzaE/YucmjNpQDWjx6El tqiq2rFSxdTFmq7OT95cBg/TZjI0WdJ3ky3NYaEUgRGbmEoCALzdoqb0KEhfW/Vm N57K9FgteMKSFDYzpGF3APs553ORVx9Ika3Jwv9aRVMdT4l1TY/SC9qCvMiuCSeP arHHJZebSuJpNTbRPA31KA77bfdp4+4= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:36 2025 by rpki-client