$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa File: 5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa (raw, json) Hash identifier: F8Om8qI8OT5I/davjEXXUw8zBNsU7ljjrOIFQIBflos= Subject key identifier: 4B:40:BF:D9:9F:D0:86:F2:4A:F5:B6:54:55:03:45:C5:39:8A:D2:9C Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F43285848D7A64D7843A6A752D39CFA80 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 6621 IP address blocks: 67.44.16.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4d:78:43:a6:a7:52:d3:9c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=3ac3f005-7cf6-4b1c-9ae8-b1c4a2d1e8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:95:65:b7:75:d2:ec:fa:be:9a:24:49:14: 52:8b:c2:46:47:73:50:81:4e:02:fb:b1:06:f1:e5: 4c:8a:95:21:1d:d0:36:59:32:f2:b1:c8:7c:44:64: 88:2a:c3:13:55:35:1b:ee:ea:a3:3e:3f:80:13:6d: 38:0a:be:c1:12:c8:6f:73:88:cf:5f:a4:9f:03:7d: 6f:20:e0:2d:94:97:9a:34:03:7d:50:87:fc:98:45: 50:3b:eb:ab:a2:52:c3:9b:a0:05:d4:74:7b:da:7a: 7b:7c:6c:6f:27:96:86:bd:bb:14:07:c0:ea:65:b8: 30:f8:cc:75:f6:a7:4e:5f:5f:b6:ff:46:59:0a:16: fe:59:f2:ed:64:f7:77:70:16:cb:cb:d1:1e:7e:d5: 35:2f:2d:06:40:e3:99:d2:5e:5f:e4:a4:1b:53:7f: cb:6a:3a:c3:c4:5c:ab:ea:8e:77:30:11:90:84:20: 6d:4b:17:ff:f5:cb:ec:67:05:e4:c5:f4:60:0b:63: a4:43:a5:d5:c1:04:d4:95:89:e4:3a:61:7c:8f:e2: 91:0f:be:5d:32:dc:79:00:16:07:3f:ba:f7:09:e3: 91:e3:77:1c:48:f3:66:9d:bd:75:b8:d5:59:51:c4: 31:8c:7f:8b:84:2f:a9:c9:a9:61:96:b8:e7:83:96: 25:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:40:BF:D9:9F:D0:86:F2:4A:F5:B6:54:55:03:45:C5:39:8A:D2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:07:69:d8:79:d6:69:7c:87:b5:da:6c:4e:16:49:ad:67:74: de:b7:64:51:8c:dd:9b:e5:ad:da:88:fa:71:b4:40:c7:9c:b7: 55:b6:6c:a5:de:74:44:79:e5:60:87:b8:33:69:fe:fc:92:00: a4:50:e4:21:0e:1b:cd:b5:77:08:7f:d3:4e:90:54:f5:bb:47: 50:97:10:75:04:82:d1:a5:63:51:96:03:b8:c7:ce:cf:ed:a1: 7d:31:6e:ba:0c:90:dc:bd:2d:9c:b6:27:2b:86:12:79:26:b6: 1c:d2:ff:2e:a4:13:8c:b2:2b:98:20:b6:93:48:fe:83:3a:cd: 63:71:3d:45:3c:4c:e6:45:31:51:f6:b2:34:54:9f:06:bc:49: 7e:13:07:d9:c6:34:89:3d:18:79:79:78:9e:75:68:54:74:80: 9a:1c:a1:9c:60:a0:d0:55:ac:68:c9:39:80:d3:a5:ce:d1:5c: 76:69:5b:4a:40:54:16:08:e4:83:8f:5f:67:a1:71:61:83:95: 07:8b:54:03:65:1e:1b:8d:6a:99:06:08:2e:2f:b3:54:f7:53: 33:17:78:b0:dc:e8:33:0e:9d:5b:95:45:a3:35:83:68:5f:4f: 5d:a0:1e:e9:73:f7:9f:14:68:33:d5:34:9c:3d:ba:13:b2:39: a8:8a:c9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpk14Q6anUtOc+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk M2FjM2YwMDUtN2NmNi00YjFjLTlhZTgtYjFjNGEyZDFlOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8OVZbd10uz6vpokSRRSi8JGR3NQgU4C+7EG 8eVMipUhHdA2WTLysch8RGSIKsMTVTUb7uqjPj+AE204Cr7BEshvc4jPX6SfA31v IOAtlJeaNAN9UIf8mEVQO+urolLDm6AF1HR72np7fGxvJ5aGvbsUB8DqZbgw+Mx1 9qdOX1+2/0ZZChb+WfLtZPd3cBbLy9EeftU1Ly0GQOOZ0l5f5KQbU3/LajrDxFyr 6o53MBGQhCBtSxf/9cvsZwXkxfRgC2OkQ6XVwQTUlYnkOmF8j+KRD75dMtx5ABYH P7r3CeOR43ccSPNmnb11uNVZUcQxjH+LhC+pyalhlrjng5YlyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtAv9mf0IbySvW2VFUDRcU5itKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNWU5YzhjN2UtMjE1NC0z ZTNkLWE3ZWMtNjJiZjY5NDYyNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0Hadh51ml8h7XabE4WSa1ndN63ZFGM3ZvlrdqI+nG0QMect1W2bKXe dER55WCHuDNp/vySAKRQ5CEOG821dwh/006QVPW7R1CXEHUEgtGlY1GWA7jHzs/t oX0xbroMkNy9LZy2JyuGEnkmthzS/y6kE4yyK5ggtpNI/oM6zWNxPUU8TOZFMVH2 sjRUnwa8SX4TB9nGNIk9GHl5eJ51aFR0gJocoZxgoNBVrGjJOYDTpc7RXHZpW0pA VBYI5IOPX2ehcWGDlQeLVANlHhuNapkGCC4vs1T3UzMXeLDc6DMOnVuVRaM1g2hf T12gHulz958UaDPVNJw9uhOyOaiKyYk= -----END CERTIFICATE-----Generated at Mon Apr 28 21:36:30 2025 by rpki-client