$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cf910fc-eb38-3102-a2a7-bcdc3a8ec9a7.roa File: 5cf910fc-eb38-3102-a2a7-bcdc3a8ec9a7.roa (raw, json) Hash identifier: Y+v5oCbv28lsh1PEygTghoTYyziPBxVBS3d9ISuwBEY= Subject key identifier: 3A:E4:7A:48:EB:C2:9F:5B:60:16:D7:98:DD:4A:28:1F:1F:4F:73:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5BB55DC50F7CE674F5280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cf910fc-eb38-3102-a2a7-bcdc3a8ec9a7.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 67.172.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:bb:55:dc:50:f7:ce:67:4f:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5f0e418c-5b7b-4a23-a353-38a4d285ac5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:01:d8:eb:d4:72:16:a6:38:3b:20:e1:5d: 3d:cf:97:01:a1:c9:51:46:82:f6:a2:d9:6c:96:4d: e6:89:03:08:a8:a6:fc:1e:57:e5:ef:a8:8b:5f:f6: f7:3b:19:35:3c:55:a2:1b:d6:6d:d5:7d:36:85:1e: 4f:14:ca:a7:fb:c3:4e:2a:09:98:f2:87:4c:27:e7: 5f:cd:1f:73:cb:3e:c2:96:b9:f3:15:23:4e:07:de: 33:47:1d:25:8e:92:ea:01:30:55:5c:de:73:99:15: 42:c8:ba:61:4b:32:8f:bb:f8:e3:59:19:21:ca:26: ec:d9:53:ab:02:65:5c:95:07:01:6a:c2:aa:ed:62: 66:29:32:2b:48:8f:f4:e3:7a:88:ed:05:77:66:60: 50:78:ee:d5:29:42:22:10:dc:9c:85:4b:6c:d9:71: e5:53:5f:7b:67:fc:ae:3e:21:07:24:bf:46:a5:e3: b3:37:91:6f:85:d7:84:7f:54:4c:cb:03:b1:1d:68: 18:65:bc:78:90:c4:7a:09:5b:c3:25:2a:ef:a1:bf: 62:02:0f:1a:df:68:95:5c:ff:32:41:00:ab:6b:fd: 75:ff:3e:35:d1:5e:43:3c:81:51:8e:ca:83:0b:d4: 8c:de:d9:6f:23:5a:3f:9a:3e:84:00:8c:1e:5a:6b: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:7A:48:EB:C2:9F:5B:60:16:D7:98:DD:4A:28:1F:1F:4F:73:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cf910fc-eb38-3102-a2a7-bcdc3a8ec9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.172.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:41:df:78:43:1f:04:4e:e9:9d:3c:bf:80:be:eb:c4:47:95: 21:7f:b6:a4:e9:2b:6f:be:43:3c:81:dd:04:b3:ed:05:a6:7a: 07:3d:54:9a:b6:0e:04:cb:b9:a1:65:82:e0:b2:18:ef:cc:0b: 84:5f:6d:74:34:53:ac:b3:93:4e:6b:39:88:79:ee:ce:8b:d1: 63:3b:db:da:e5:1a:79:da:96:61:5a:cf:b9:b6:25:26:ae:53: 4b:20:9b:a0:82:3a:1f:1a:a0:3b:20:5d:03:a8:7e:1f:89:c5: 0a:7c:d2:f6:4e:4d:e8:d3:fb:fd:36:94:9e:6e:29:e7:71:d9: 14:91:b2:5f:5a:61:0d:ce:94:5a:ad:82:10:cd:11:dd:c3:da: b1:a7:46:07:a4:03:2f:6d:c7:cc:1a:40:29:b9:33:34:05:a2: 76:68:de:37:1c:88:df:9c:19:47:a4:94:60:af:e4:6c:9d:f6: c0:97:f0:9b:ef:0c:0d:e0:b8:80:49:72:4b:1a:b9:7e:1b:f9: b7:2e:70:d9:d2:2b:bd:db:1f:bc:74:16:46:91:ed:a2:c3:48: 41:8e:af:16:1a:3a:a3:db:b4:ad:ee:47:f1:11:92:db:98:40: cd:f0:f8:66:53:9b:69:85:c4:c4:a8:fe:af:81:71:a7:d1:d3: b7:f7:d5:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pbtV3FD3zmdPUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWYwZTQxOGMtNWI3Yi00YTIzLWEzNTMtMzhhNGQyODVhYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArowB2OvUchamODsg4V09z5cBoclRRoL2otls lk3miQMIqKb8Hlfl76iLX/b3Oxk1PFWiG9Zt1X02hR5PFMqn+8NOKgmY8odMJ+df zR9zyz7ClrnzFSNOB94zRx0ljpLqATBVXN5zmRVCyLphSzKPu/jjWRkhyibs2VOr AmVclQcBasKq7WJmKTIrSI/043qI7QV3ZmBQeO7VKUIiENychUts2XHlU197Z/yu PiEHJL9GpeOzN5FvhdeEf1RMywOxHWgYZbx4kMR6CVvDJSrvob9iAg8a32iVXP8y QQCra/11/z410V5DPIFRjsqDC9SM3tlvI1o/mj6EAIweWmuyfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrkekjrwp9bYBbXmN1KKB8fT3MJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNmOTEwZmMtZWIzOC0z MTAyLWEyYTctYmNkYzNhOGVjOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6xmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRB33hDHwRO6Z08v4C+68RHlSF/tqTpK2++QzyB3QSz7QWmegc9VJq2 DgTLuaFlguCyGO/MC4RfbXQ0U6yzk05rOYh57s6L0WM729rlGnnalmFaz7m2JSau U0sgm6CCOh8aoDsgXQOofh+JxQp80vZOTejT+/02lJ5uKedx2RSRsl9aYQ3OlFqt ghDNEd3D2rGnRgekAy9tx8waQCm5MzQFonZo3jcciN+cGUeklGCv5Gyd9sCX8Jvv DA3guIBJcksauX4b+bcucNnSK73bH7x0FkaR7aLDSEGOrxYaOqPbtK3uR/ERktuY QM3w+GZTm2mFxMSo/q+BcafR07f31Sg= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:03 2025 by rpki-client