$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa File: 3ae91796-d0c5-382c-af8b-cc422804c680.roa (raw, json) Hash identifier: gQMqilB7/MQZdeZBv6c55UNPESajZXJoFi1YojxUiYk= Subject key identifier: 70:11:10:58:9A:B6:9E:B3:8D:4B:58:DA:72:1D:B1:AF:00:23:35:22 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F43285848D21138506DB1DBD8B526F8A8 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 63062 IP address blocks: 67.44.112.0/20 maxlen: 24 174.32.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:38:50:6d:b1:db:d8:b5:26:f8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=61a0fb30-6f65-4ee6-a38e-7746438a6280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:74:30:22:51:f3:07:a8:35:a2:f0:0a:d1:94: 20:75:81:7f:11:a8:c1:61:4f:c6:8f:07:84:56:5d: a8:de:25:de:19:0d:02:7a:3e:10:9a:c3:24:b9:7e: 52:db:de:0f:de:d8:d7:a6:f4:cb:1d:e2:7e:32:97: 66:ff:79:cf:45:28:ec:c1:dd:61:3b:0b:18:6b:03: a8:b2:2e:87:9e:80:4a:21:ff:37:3e:9d:6a:bf:1e: 59:61:68:02:da:6d:f9:49:d0:2c:1e:d9:e5:77:84: c1:a1:dd:fa:15:94:83:35:bf:d2:70:a8:f8:3e:bd: 5a:0c:c3:1b:1c:34:75:4b:f6:07:64:f1:f8:52:ea: fb:01:2b:59:2e:62:ed:ca:a2:2b:9a:39:62:e3:d9: 13:dd:d5:12:5f:43:42:4d:1a:13:74:48:42:75:aa: 96:34:91:dc:b3:f4:2b:10:f3:3e:1a:2c:70:a9:35: 8a:fb:8f:6d:fb:60:7f:42:3f:7f:48:44:d4:38:32: a4:dc:5a:b1:11:f8:cb:58:f0:65:83:96:f7:13:d3: a9:ea:4a:f8:b9:7f:1d:c7:d8:5e:28:7d:81:67:ba: 0d:d8:2e:b9:bd:da:9a:19:c8:4f:e7:21:67:b0:3c: 9c:19:1a:fa:35:fd:f4:68:68:d3:89:71:92:7f:44: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:11:10:58:9A:B6:9E:B3:8D:4B:58:DA:72:1D:B1:AF:00:23:35:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.112.0/20 174.32.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7f:9a:d6:3a:5f:10:5d:a9:66:cf:d7:62:d0:20:16:b8:d4: f8:2b:77:ee:4a:8c:97:c1:f6:89:34:c8:be:9c:82:11:bb:b6: 44:1b:c3:68:c5:a9:7a:88:bb:ef:05:15:21:6e:d7:01:f4:32: d4:37:ac:f2:af:a0:df:68:1a:82:89:ac:6d:a8:59:9d:9a:5a: e9:80:34:19:ef:88:c8:6d:c2:a4:8f:8f:f1:f3:02:a9:af:2e: 3f:df:c2:a4:12:cd:f9:13:fc:5e:92:2e:b6:47:75:7e:11:0f: a2:34:f5:bf:dc:b1:92:2d:64:7a:79:d2:12:89:ca:ba:a1:bc: cb:d3:3a:29:f1:e9:0f:1b:29:a7:ca:f0:b3:b4:fc:bd:e0:86: 2b:25:9e:4c:84:84:23:7f:52:41:a3:62:c9:60:78:61:84:98: a2:cc:6d:e8:6b:b3:cb:c1:c0:e5:0a:2b:0e:6b:08:07:18:96: 34:c6:da:d1:2d:24:0e:7f:56:7c:f1:4e:16:f5:0f:08:44:5c: 19:69:55:fd:78:24:b3:8f:e2:a9:a6:d3:6c:ed:f1:9d:56:c6: 9b:d0:8f:34:26:83:72:ee:75:70:00:b5:cd:03:cd:0b:26:dc: 7e:c5:72:24:52:5d:b5:f8:de:1c:dd:ec:2e:10:d8:80:af:a0: 47:b1:77:87 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjSEThQbbHb2LUm+KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjFhMGZiMzAtNmY2NS00ZWU2LWEzOGUtNzc0NjQzOGE2MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXQwIlHzB6g1ovAK0ZQgdYF/EajBYU/GjweE Vl2o3iXeGQ0Cej4QmsMkuX5S294P3tjXpvTLHeJ+Mpdm/3nPRSjswd1hOwsYawOo si6HnoBKIf83Pp1qvx5ZYWgC2m35SdAsHtnld4TBod36FZSDNb/ScKj4Pr1aDMMb HDR1S/YHZPH4Uur7AStZLmLtyqIrmjli49kT3dUSX0NCTRoTdEhCdaqWNJHcs/Qr EPM+GixwqTWK+49t+2B/Qj9/SETUODKk3FqxEfjLWPBlg5b3E9Op6kr4uX8dx9he KH2BZ7oN2C65vdqaGchP5yFnsDycGRr6Nf30aGjTiXGSf0SSvQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHAREFiatp6zjUtY2nIdsa8AIzUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2FlOTE3OTYtZDBjNS0z ODJjLWFmOGItY2M0MjI4MDRjNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQyxwAwQE riBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABJ/mtY6XxBdqWbP12LQIBa41Pgrd+5KjJfB9ok0yL6cghG7 tkQbw2jFqXqIu+8FFSFu1wH0MtQ3rPKvoN9oGoKJrG2oWZ2aWumANBnviMhtwqSP j/HzAqmvLj/fwqQSzfkT/F6SLrZHdX4RD6I09b/csZItZHp50hKJyrqhvMvTOinx 6Q8bKafK8LO0/L3ghislnkyEhCN/UkGjYslgeGGEmKLMbehrs8vBwOUKKw5rCAcY ljTG2tEtJA5/VnzxThb1DwhEXBlpVf14JLOP4qmm02zt8Z1WxpvQjzQmg3LudXAA tc0DzQsm3H7FciRSXbX43hzd7C4Q2ICvoEexd4c= -----END CERTIFICATE-----Generated at Mon Apr 28 18:40:54 2025 by rpki-client