$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa File: 7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa (raw, json) Hash identifier: LX5UsnUMi1i9kh9Iaf1lNIuh+B/QpLN/MOenGbiNZBk= Subject key identifier: 3D:8E:B1:75:F9:84:44:BF:31:81:41:AC:CA:09:3A:30:92:03:BE:06 Certificate issuer: /CN=d3f01860-198d-4531-89a3-a4dc5f296657 Certificate serial: 010D0C9F432858499829CCA6F5557025F56A7B00 Authority key identifier: A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 67.158.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cc:a6:f5:55:70:25:f5:6a:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f01860-198d-4531-89a3-a4dc5f296657 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=992162a6-a2a0-456f-bf5c-184df10a9f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:f7:a7:92:ff:9d:b6:29:d4:65:84:e7:1f: d5:20:12:f9:00:e8:1b:e0:a8:89:87:6e:67:95:80: 1f:a1:8e:eb:8b:33:dd:b6:1f:a3:cb:94:88:d9:da: b1:ad:79:54:ce:d9:e1:20:82:55:09:f1:fe:eb:b4: 2a:e2:be:7d:16:a4:e7:82:8d:4f:1d:5d:69:f4:2b: cb:dc:a9:85:30:3b:65:80:a1:53:6e:e2:f5:c3:52: bd:63:9c:7c:59:44:81:ef:4e:1c:ef:f7:6b:d1:b1: 99:19:66:b1:0c:ba:de:38:26:58:24:3b:ff:91:51: d1:06:ef:d0:7c:47:a2:eb:a7:7c:fa:8e:dc:76:74: d9:21:79:e6:4d:64:63:e5:ff:3f:48:b1:99:89:83: 5e:88:27:3c:0e:57:52:37:1c:88:5c:9a:f2:04:da: 2c:f3:d0:c2:f8:dc:db:56:b2:29:97:b5:01:1c:04: 59:f6:e4:c0:50:7e:1f:f6:2e:b8:26:07:47:f3:9a: 65:98:37:fb:e4:99:d6:5a:91:f3:39:6c:5c:f2:0e: d6:90:0c:eb:50:7e:98:f3:33:92:2b:a0:90:80:d8: 8e:cb:ae:ca:73:f9:f2:4f:92:f9:df:a6:3e:d9:39: ca:e4:b1:dd:f3:b9:71:07:49:7c:85:00:1f:f6:29: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8E:B1:75:F9:84:44:BF:31:81:41:AC:CA:09:3A:30:92:03:BE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/7df4d8cd-7d5c-376f-9c0d-cf50feee5690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl X509v3 Authority Key Identifier: keyid:A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer sbgp-ipAddrBlock: critical IPv4: 67.158.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:90:c6:d3:8b:99:1a:a3:69:a5:ce:99:44:7e:f3:4d:94:cc: d7:4c:f3:32:b7:52:e6:54:a2:fa:52:32:19:5f:10:2a:c8:93: c5:b1:b2:fb:17:7a:0b:55:1e:74:bc:01:86:16:6f:bb:32:82: 80:1d:48:fe:50:21:47:0c:7b:30:4f:5a:2c:6a:a3:df:23:c2: e1:3b:95:6a:a5:f0:25:c6:fc:92:43:29:bf:63:46:3c:7a:a9: a6:2b:e2:ca:6f:c0:36:56:5a:e6:a9:1f:15:31:d0:33:d6:97: 40:69:8c:bf:9c:da:34:2b:83:b3:46:81:47:0a:d2:d9:c7:58: 10:9b:3e:f0:71:82:41:f6:d9:b4:09:24:f7:e7:95:7c:a0:13: 50:d2:48:03:5c:8e:53:e5:af:17:ac:0a:f1:88:8f:43:0c:0c: 69:3e:2f:bc:5b:a0:5f:62:6f:f5:d6:f7:e6:2e:2d:4f:ec:e9: d9:4d:72:b9:8b:19:59:5c:06:8d:39:cf:7b:37:67:57:48:ea: c2:2a:a3:a9:af:4f:7c:cc:9e:5a:c8:be:ce:40:57:3e:72:54: 0d:43:8c:43:4c:d6:c9:51:c4:94:7c:74:0e:05:5a:01:01:e8: 04:b0:75:35:8c:1d:c0:b3:a3:17:0d:8b:0f:0d:8a:04:59:96: 24:ee:7b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcym9VVwJfVqewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNmMDE4NjAtMTk4ZC00NTMxLTg5YTMtYTRkYzVmMjk2 NjU3MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OTkyMTYyYTYtYTJhMC00NTZmLWJmNWMtMTg0ZGYxMGE5ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWf3p5L/nbYp1GWE5x/VIBL5AOgb4KiJh25n lYAfoY7rizPdth+jy5SI2dqxrXlUztnhIIJVCfH+67Qq4r59FqTngo1PHV1p9CvL 3KmFMDtlgKFTbuL1w1K9Y5x8WUSB704c7/dr0bGZGWaxDLreOCZYJDv/kVHRBu/Q fEei66d8+o7cdnTZIXnmTWRj5f8/SLGZiYNeiCc8DldSNxyIXJryBNos89DC+Nzb VrIpl7UBHARZ9uTAUH4f9i64JgdH85plmDf75JnWWpHzOWxc8g7WkAzrUH6Y8zOS K6CQgNiOy67Kc/nyT5L536Y+2TnK5LHd87lxB0l8hQAf9ingtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2OsXX5hES/MYFBrMoJOjCSA74GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2Yw MTg2MC0xOThkLTQ1MzEtODlhMy1hNGRjNWYyOTY2NTcvN2RmNGQ4Y2QtN2Q1Yy0z NzZmLTljMGQtY2Y1MGZlZWU1NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDNmMDE4NjAtMTk4ZC00NTMxLTg5 YTMtYTRkYzVmMjk2NjU3L2QzZjAxODYwLTE5OGQtNDUzMS04OWEzLWE0ZGM1ZjI5 NjY1Ny5jcmwwHwYDVR0jBBgwFoAUpEUjo3ktGYlWmQx4U4fM7aXHnNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kM2YwMTg2MC0xOThkLTQ1MzEtODlhMy1hNGRj NWYyOTY2NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ545MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiQxtOLmRqjaaXOmUR+802UzNdM8zK3UuZUovpSMhlfECrIk8WxsvsX egtVHnS8AYYWb7sygoAdSP5QIUcMezBPWixqo98jwuE7lWql8CXG/JJDKb9jRjx6 qaYr4spvwDZWWuapHxUx0DPWl0BpjL+c2jQrg7NGgUcK0tnHWBCbPvBxgkH22bQJ JPfnlXygE1DSSANcjlPlrxesCvGIj0MMDGk+L7xboF9ib/XW9+YuLU/s6dlNcrmL GVlcBo05z3s3Z1dI6sIqo6mvT3zMnlrIvs5AVz5yVA1DjENM1slRxJR8dA4FWgEB 6ASwdTWMHcCzoxcNiw8NigRZliTuey8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:40 2025 by rpki-client