$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a080b6b-3328-38c3-9ab3-9fd2b3e3137c.roa File: 6a080b6b-3328-38c3-9ab3-9fd2b3e3137c.roa (raw, json) Hash identifier: 8jHaZ4xo8BPFMOKXZCkbSKqOFm7cLPrH5UV7EM57Wl4= Subject key identifier: 62:B4:A4:15:34:31:53:3C:D0:45:66:C3:C5:BF:D4:94:E2:B9:20:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F77B084C792DF179FD9400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a080b6b-3328-38c3-9ab3-9fd2b3e3137c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 67.167.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:7b:08:4c:79:2d:f1:79:fd:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=85a6c6a2-2b51-4da5-b11c-80d04f4f0f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:66:a6:27:aa:fe:aa:b8:ad:52:99:5c:3e: 2d:50:8f:9e:f5:7c:93:6c:e9:09:42:a2:ef:2c:7f: 70:bc:40:24:f1:2a:c2:14:61:57:99:da:5b:b7:28: d3:03:0f:75:59:e4:cf:de:25:c1:4e:a2:7c:b1:ba: 9c:7f:83:b3:21:19:59:3f:38:ef:32:75:5b:51:f9: e8:65:5d:ea:f1:f7:e0:74:63:40:0b:05:9f:00:8a: f0:76:4b:28:eb:f8:ac:68:e9:69:06:0c:e7:43:46: 42:39:bb:a1:3b:75:74:b4:8b:56:6c:10:a4:06:70: 1c:69:6a:a1:28:17:79:46:4b:4b:42:11:27:f5:88: 84:96:22:51:cb:a6:6b:cf:3b:e9:15:33:fc:8d:07: 91:4f:b5:2c:ec:28:b5:f1:c7:56:41:f8:70:99:0c: 2c:bd:df:bd:a7:dc:d8:8a:ef:a2:bd:3f:9d:c3:6b: 1a:5d:ed:c2:95:c7:b8:1c:24:40:4c:1b:d3:22:1a: 58:30:cd:62:ab:13:cd:fb:44:84:42:4b:9b:75:9a: 71:4b:ab:12:b7:36:b0:4d:ad:5f:db:e1:a9:1c:a1: 8f:a7:9b:56:a5:1e:e3:35:0a:bf:44:30:c7:77:2c: 0a:f8:16:6d:2c:13:1d:d8:0f:2d:69:bb:30:ba:91: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B4:A4:15:34:31:53:3C:D0:45:66:C3:C5:BF:D4:94:E2:B9:20:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a080b6b-3328-38c3-9ab3-9fd2b3e3137c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:48:bb:bc:5c:da:72:f3:24:43:f9:e4:b1:5b:a4:8c:aa:1d: b1:2c:05:86:85:ba:c0:f3:b3:04:63:f1:1f:52:5a:7a:e6:1a: f0:31:5b:44:6e:15:ec:31:95:5a:9e:f2:77:99:0f:7d:6a:e9: 2a:a0:5b:16:7c:25:b2:fa:d8:5f:85:34:c4:f2:3a:3b:8e:68: 49:27:3e:1c:c8:d0:c9:f1:c9:7b:df:35:23:3c:c4:d9:72:c8: 12:4b:56:af:70:a7:cd:8b:ca:a8:fa:56:19:f1:fe:8e:3f:be: f7:28:42:d6:b5:b2:4f:1e:46:d1:01:53:6f:a2:dc:c2:f8:35: 9f:0a:74:c4:6e:da:11:b1:1a:b2:c1:bd:c2:f9:86:9a:59:16: b9:39:b8:c4:d5:52:af:ab:13:17:a3:93:93:df:d2:ba:30:57: 65:80:d0:d0:4a:d3:e5:f0:98:02:62:9c:8a:84:97:c5:b1:49: 82:13:81:1b:2a:61:b2:90:f9:b2:db:02:86:cb:a4:f4:16:ad: 66:64:b2:2f:07:ea:27:a6:0e:05:1b:72:2c:15:76:f3:d5:07: f7:42:bc:5b:f8:65:ed:b6:78:dd:da:4d:dc:68:1e:49:ea:14: cc:75:24:f7:0a:2e:10:45:9b:93:0a:dd:c6:5d:e1:c4:e7:93: aa:43:6d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj093sITHkt8Xn9lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ODVhNmM2YTItMmI1MS00ZGE1LWIxMWMtODBkMDRmNGYwZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkChmpieq/qq4rVKZXD4tUI+e9XyTbOkJQqLv LH9wvEAk8SrCFGFXmdpbtyjTAw91WeTP3iXBTqJ8sbqcf4OzIRlZPzjvMnVbUfno ZV3q8ffgdGNACwWfAIrwdkso6/isaOlpBgznQ0ZCObuhO3V0tItWbBCkBnAcaWqh KBd5RktLQhEn9YiEliJRy6ZrzzvpFTP8jQeRT7Us7Ci18cdWQfhwmQwsvd+9p9zY iu+ivT+dw2saXe3Clce4HCRATBvTIhpYMM1iqxPN+0SEQkubdZpxS6sStzawTa1f 2+GpHKGPp5tWpR7jNQq/RDDHdywK+BZtLBMd2A8tabswupH0WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK0pBU0MVM80EVmw8W/1JTiuSArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmEwODBiNmItMzMyOC0z OGMzLTlhYjMtOWZkMmIzZTMxMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6eUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBIu7xc2nLzJEP55LFbpIyqHbEsBYaFusDzswRj8R9SWnrmGvAxW0Ru FewxlVqe8neZD31q6SqgWxZ8JbL62F+FNMTyOjuOaEknPhzI0MnxyXvfNSM8xNly yBJLVq9wp82Lyqj6Vhnx/o4/vvcoQta1sk8eRtEBU2+i3ML4NZ8KdMRu2hGxGrLB vcL5hppZFrk5uMTVUq+rExejk5Pf0rowV2WA0NBK0+XwmAJinIqEl8WxSYITgRsq YbKQ+bLbAobLpPQWrWZksi8H6iemDgUbciwVdvPVB/dCvFv4Ze22eN3aTdxoHknq FMx1JPcKLhBFm5MK3cZd4cTnk6pDbSw= -----END CERTIFICATE-----Generated at Sun Apr 27 13:02:41 2025 by rpki-client