$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4223335-d3ee-3690-a721-b4d05f3b1dd1.roa File: d4223335-d3ee-3690-a721-b4d05f3b1dd1.roa (raw, json) Hash identifier: +TAnDxwT7T7qWeDeaXid/wQf/ZuR8cXs4kB90kcAYTo= Subject key identifier: 99:B3:BE:49:EE:7A:4A:6F:9A:D6:BD:CC:65:37:F4:78:34:26:42:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8D70CF68D795DB9DCC028 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4223335-d3ee-3690-a721-b4d05f3b1dd1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 67.167.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:d7:0c:f6:8d:79:5d:b9:dc:c0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ab2840db-834d-4278-9196-55a02fddca51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:9d:f8:1e:21:42:66:b5:0b:3a:dc:fd:04: e7:59:38:74:36:42:49:d4:99:d1:ad:0e:ea:88:96: 7f:b0:d0:8f:28:55:29:da:f1:76:b8:16:e3:e3:9c: 5e:cd:c5:7f:b7:d3:e0:a0:54:a8:82:3a:26:5b:ff: 83:3c:c8:62:30:eb:ea:83:91:e9:94:c9:ca:98:11: 91:03:eb:ec:e6:0e:2a:7d:46:f1:07:5b:e0:8e:fe: bc:e9:97:17:40:f0:3a:2e:f5:ef:68:33:d2:20:eb: 67:f9:89:0e:50:d8:77:56:dc:0d:68:34:a3:20:49: f9:f6:1f:ec:2c:6b:00:2f:bf:69:10:06:ef:19:e0: a9:14:f8:08:c2:46:56:40:3f:9b:eb:a3:c7:c1:84: 05:0e:4b:6f:b8:33:49:38:b5:3b:25:1e:5d:bc:bb: 34:4e:37:9f:13:3e:0e:ca:df:1d:e5:9b:a8:8e:8b: cb:a3:ad:15:7d:3c:7a:fd:c5:63:7d:6e:3c:72:cc: f8:17:10:4e:35:f6:20:90:10:20:95:4e:35:8c:97: 98:b7:88:b8:31:27:98:87:5d:58:36:a4:76:05:51: 9a:ba:d1:7e:d2:f1:23:b5:bd:b2:28:d3:1a:c8:e4: 3c:90:71:ae:73:6a:a9:21:57:fb:fd:8e:e2:46:9d: e2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B3:BE:49:EE:7A:4A:6F:9A:D6:BD:CC:65:37:F4:78:34:26:42:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4223335-d3ee-3690-a721-b4d05f3b1dd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a7:78:a7:30:6e:f6:0e:4c:02:ac:60:e3:f1:2f:69:27:e4: 26:11:7e:6c:04:3d:a0:29:f6:1b:ce:a3:77:95:64:fb:f4:7e: de:8b:e8:0e:9b:23:53:b3:0c:e0:f6:47:c8:88:f5:2c:b3:02: 72:95:7e:c6:af:68:3e:fd:33:06:3d:a6:48:4f:fd:eb:4d:22: 43:d0:6a:56:50:33:3a:e2:68:87:54:ce:82:b7:00:05:34:07: b9:b5:2f:e4:3b:c0:c3:9d:09:67:4c:ef:93:9d:1e:56:28:33: 0e:47:56:84:21:0c:e8:04:3e:c7:80:cd:3f:c3:88:b0:e2:f8: fb:3b:e5:bf:d4:b7:72:b8:6a:a2:0e:96:f3:3a:31:47:52:90: 34:3f:17:b8:7f:3f:b5:f7:44:eb:b2:6d:2a:c1:ef:d4:a7:dd: fc:cf:70:63:3a:18:4c:a4:ee:a4:f7:70:53:ac:02:e8:53:c4: a9:02:83:d5:fc:d7:6c:a1:5b:77:17:18:10:0e:45:b3:22:cb: ae:67:b0:a8:14:f2:15:d7:c9:39:e9:8e:90:5e:b5:5f:1b:87: b7:9a:9f:9a:5a:5c:52:80:de:2a:91:47:0a:18:26:e9:95:66: be:ef:89:11:14:42:82:3e:14:cb:6e:3f:a7:28:e7:e0:a2:91: 31:17:c7:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+NcM9o15XbncwCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWIyODQwZGItODM0ZC00Mjc4LTkxOTYtNTVhMDJmZGRjYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKed+B4hQma1Czrc/QTnWTh0NkJJ1JnRrQ7q iJZ/sNCPKFUp2vF2uBbj45xezcV/t9PgoFSogjomW/+DPMhiMOvqg5HplMnKmBGR A+vs5g4qfUbxB1vgjv686ZcXQPA6LvXvaDPSIOtn+YkOUNh3VtwNaDSjIEn59h/s LGsAL79pEAbvGeCpFPgIwkZWQD+b66PHwYQFDktvuDNJOLU7JR5dvLs0TjefEz4O yt8d5ZuojovLo60VfTx6/cVjfW48csz4FxBONfYgkBAglU41jJeYt4i4MSeYh11Y NqR2BVGautF+0vEjtb2yKNMayOQ8kHGuc2qpIVf7/Y7iRp3idwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmzvknuekpvmta9zGU39Hg0JkJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQyMjMzMzUtZDNlZS0z NjkwLWE3MjEtYjRkMDVmM2IxZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6ekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaneKcwbvYOTAKsYOPxL2kn5CYRfmwEPaAp9hvOo3eVZPv0ft6L6A6b I1OzDOD2R8iI9SyzAnKVfsavaD79MwY9pkhP/etNIkPQalZQMzriaIdUzoK3AAU0 B7m1L+Q7wMOdCWdM75OdHlYoMw5HVoQhDOgEPseAzT/DiLDi+Ps75b/Ut3K4aqIO lvM6MUdSkDQ/F7h/P7X3ROuybSrB79Sn3fzPcGM6GEyk7qT3cFOsAuhTxKkCg9X8 12yhW3cXGBAORbMiy65nsKgU8hXXyTnpjpBetV8bh7ean5paXFKA3iqRRwoYJumV Zr7viREUQoI+FMtuP6co5+CikTEXx7c= -----END CERTIFICATE-----Generated at Sun Apr 27 22:12:00 2025 by rpki-client