$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa File: 17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa (raw, json) Hash identifier: +drMl3iYW8PoUdax20wpp1FsiTv77Vk90R8sjMQe9MU= Subject key identifier: 29:A4:62:76:18:D0:28:34:76:C3:79:C1:C6:4C:B2:F8:75:B6:8B:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4F24071B3EB9C97E59D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33652 IP address blocks: 67.164.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:f2:40:71:b3:eb:9c:97:e5:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=df76f03d-872a-493b-a3fd-dd03a304ee49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0c:63:d4:45:1f:ac:8a:68:86:01:8b:ac:c6: 3f:80:ab:74:9e:df:e4:d5:b3:ad:e9:f5:07:89:eb: c4:11:3e:56:ab:16:cc:9a:b6:b0:9e:44:97:f3:68: 70:41:1b:d0:69:ab:ec:9c:26:41:97:56:5f:6a:e6: 17:5d:fe:d8:a5:af:f3:cc:50:ef:85:17:6c:5d:04: 5a:b2:5b:f8:51:c2:29:be:a8:a5:65:9c:58:bd:29: 77:05:f9:a1:b5:93:6c:62:c2:bc:87:16:de:e5:92: ee:25:c3:bb:c8:e9:1a:58:7f:1c:34:1d:eb:0d:bd: 4c:7e:34:01:fd:18:c8:6c:8c:f1:0f:b2:59:e9:12: 7c:c7:dd:35:ed:32:cb:31:07:b4:50:8a:c5:20:f9: 44:38:3c:f0:ef:a0:53:62:a9:00:31:1a:ae:56:fe: ac:c9:5d:a5:28:eb:91:19:af:9d:77:41:8f:4d:29: 69:e3:32:06:2e:08:0c:ed:13:46:14:5d:10:65:2f: 60:c7:3f:a2:11:6e:d7:f2:4a:dd:14:99:79:c5:e4: 3b:b3:f2:2a:14:a3:39:97:6f:d4:4a:f7:1d:1f:37: 1a:a4:8d:cd:2c:8e:51:a9:48:43:fc:a1:1a:47:4c: dd:5f:a8:9f:e0:97:cf:6e:83:15:7f:8b:01:04:20: 69:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:62:76:18:D0:28:34:76:C3:79:C1:C6:4C:B2:F8:75:B6:8B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17bd498a-8bcb-37a2-8230-2322b3f8f6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.164.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:12:95:b9:de:cd:33:32:33:38:00:fc:44:5c:6f:86:9f:7c: d6:8c:4b:55:cf:59:73:34:27:27:4d:8a:d2:8d:bc:cd:68:39: 39:60:be:cb:56:99:7f:ef:a7:38:07:a1:2e:f0:86:28:21:7c: 3d:f4:3e:4f:4e:c3:38:4b:b2:e6:8a:a0:fc:a8:36:3f:39:0f: 24:53:58:78:8b:db:0f:22:9f:da:f1:70:bc:70:e2:42:50:3d: 1d:7e:fb:8d:c7:e1:89:bf:30:76:df:0b:9e:1a:20:6c:bd:5b: 23:e2:cd:ec:bf:96:6e:00:6c:b6:28:2d:aa:79:5e:14:71:66: b1:46:4e:ce:aa:5f:a6:0b:3b:68:c7:ca:02:08:fe:02:94:c3: 44:1f:9d:37:52:22:0e:a2:74:50:1a:be:e5:b1:13:6a:28:86: b4:7e:0c:33:34:2b:90:c3:5f:4a:09:91:cd:ca:bb:8a:b2:ff: 2b:a8:61:7b:e5:e6:dd:5b:c7:a2:20:cb:c4:4c:f3:95:68:ff: 02:5a:56:ac:2e:cf:83:b1:e9:c0:6b:7d:30:90:b9:fa:4b:b1: 30:9a:34:2e:6a:11:c0:3f:b3:0e:92:e1:05:a0:29:ed:25:0c: 44:50:0f:15:b7:65:bc:3c:93:25:5d:40:ec:2c:c0:c6:49:82: 34:7e:45:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pPJAcbPrnJflnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGY3NmYwM2QtODcyYS00OTNiLWEzZmQtZGQwM2EzMDRlZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wxj1EUfrIpohgGLrMY/gKt0nt/k1bOt6fUH ievEET5WqxbMmrawnkSX82hwQRvQaavsnCZBl1ZfauYXXf7Ypa/zzFDvhRdsXQRa slv4UcIpvqilZZxYvSl3BfmhtZNsYsK8hxbe5ZLuJcO7yOkaWH8cNB3rDb1MfjQB /RjIbIzxD7JZ6RJ8x9017TLLMQe0UIrFIPlEODzw76BTYqkAMRquVv6syV2lKOuR Ga+dd0GPTSlp4zIGLggM7RNGFF0QZS9gxz+iEW7X8krdFJl5xeQ7s/IqFKM5l2/U SvcdHzcapI3NLI5RqUhD/KEaR0zdX6if4JfPboMVf4sBBCBp3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmkYnYY0Cg0dsN5wcZMsvh1touGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTdiZDQ5OGEtOGJjYi0z N2EyLTgyMzAtMjMyMmIzZjhmNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoSlbnezTMyMzgA/ERcb4affNaMS1XPWXM0JydNitKNvM1oOTlgvstW mX/vpzgHoS7whighfD30Pk9OwzhLsuaKoPyoNj85DyRTWHiL2w8in9rxcLxw4kJQ PR1++43H4Ym/MHbfC54aIGy9WyPizey/lm4AbLYoLap5XhRxZrFGTs6qX6YLO2jH ygII/gKUw0QfnTdSIg6idFAavuWxE2oohrR+DDM0K5DDX0oJkc3Ku4qy/yuoYXvl 5t1bx6Igy8RM85Vo/wJaVqwuz4Ox6cBrfTCQufpLsTCaNC5qEcA/sw6S4QWgKe0l DERQDxW3Zbw8kyVdQOwswMZJgjR+Rfo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:43:27 2025 by rpki-client