$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef252f4f-38b8-348a-92ea-6e442da7e159.roa File: ef252f4f-38b8-348a-92ea-6e442da7e159.roa (raw, json) Hash identifier: Evcy+9QjBmhTlvYVbBTnRJZG9ybq2m7ZcPRYuV/s85Q= Subject key identifier: EE:1F:72:4D:C2:9C:BC:DA:5C:DC:25:DA:98:68:C4:A7:10:6F:E2:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0C68A2E78C05C08066080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef252f4f-38b8-348a-92ea-6e442da7e159.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 67.162.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:c6:8a:2e:78:c0:5c:08:06:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bdd89652-8aaa-4bb3-91b0-c0dac63a1311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:08:da:90:f0:2d:a8:61:69:49:7e:a0:32: 34:db:c4:ed:ae:88:84:d3:02:1e:83:4a:cb:2c:64: 11:9c:da:34:6d:c6:4b:83:08:58:3b:0c:f8:f2:dd: 33:94:81:26:8f:b0:40:89:47:d0:4a:36:35:8a:24: 60:c7:d0:39:4f:b1:d5:b5:a1:c3:65:56:f1:fe:4c: d8:70:7b:84:ae:ee:af:8a:48:bf:4b:c1:c6:8c:2d: 53:44:06:88:a2:0f:78:8e:cc:ad:1d:d3:df:32:82: 07:36:a5:62:0f:42:90:96:eb:59:43:13:51:bb:31: a2:bf:26:e1:6a:14:b2:b6:dd:0d:d0:d7:c3:b9:d6: db:75:2e:9b:f2:9d:be:b0:c7:34:25:36:d2:46:ca: 67:b5:f9:59:f5:5f:6a:f9:91:88:1d:a0:8b:4f:db: ec:43:dc:de:b4:80:7a:73:9b:27:4a:06:9a:80:46: ea:f9:01:5a:7b:36:b4:97:9f:22:6f:c3:b1:4e:90: fe:7f:b0:5c:4a:42:c8:60:3b:1a:fb:49:9c:34:66: 2d:3e:bb:d3:e4:3b:f5:5a:cb:9b:ab:b5:2f:9b:8e: ae:8e:54:8f:08:03:6f:f0:86:8e:6b:cd:45:75:d1: 9a:41:6f:b9:3b:f8:7c:12:6f:c8:f8:22:9e:e8:fd: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:72:4D:C2:9C:BC:DA:5C:DC:25:DA:98:68:C4:A7:10:6F:E2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef252f4f-38b8-348a-92ea-6e442da7e159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.162.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ed:fd:71:23:13:dc:ce:10:28:bf:34:64:1c:d1:26:40:d9: 19:04:a5:47:23:ce:bb:ec:49:6a:3f:a0:10:7f:8c:aa:71:17: e4:13:00:1e:61:62:71:01:33:a0:4a:50:bc:45:0e:09:61:ba: 61:bc:ed:ae:32:ee:e7:a3:98:45:14:05:ea:08:30:e3:0e:39: 62:fb:ab:54:92:6a:05:37:6a:89:92:f3:41:5f:0e:24:cf:83: cd:77:fb:88:c0:53:a6:31:ea:cf:88:29:76:7d:af:20:f5:7e: 2a:c3:86:ed:50:37:1e:c6:c9:3d:95:98:f1:ab:ea:f9:06:4b: 7b:64:51:69:06:78:81:24:9b:7b:4c:ca:7a:17:f5:a1:a8:e9: aa:5e:e3:6d:25:36:eb:84:9b:16:00:d4:9e:16:f1:63:eb:02: 3c:2e:9d:40:df:86:9e:7f:97:43:49:2e:33:4e:81:70:6c:12: 7c:31:7f:db:8a:ae:20:d0:9d:00:16:b3:09:e0:63:60:8b:8b: 0a:81:ad:44:a5:bf:b6:a2:55:d8:d9:94:01:e7:95:0b:fa:35: c6:7a:4f:c5:62:04:c2:90:b1:e3:be:ad:bb:b1:78:86:f5:40: a3:5c:df:48:ca:2f:dd:9f:8f:5b:55:90:5f:83:61:43:10:14: 45:2d:db:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssMaKLnjAXAgGYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmRkODk2NTItOGFhYS00YmIzLTkxYjAtYzBkYWM2M2ExMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqoI2pDwLahhaUl+oDI028TtroiE0wIeg0rL LGQRnNo0bcZLgwhYOwz48t0zlIEmj7BAiUfQSjY1iiRgx9A5T7HVtaHDZVbx/kzY cHuEru6viki/S8HGjC1TRAaIog94jsytHdPfMoIHNqViD0KQlutZQxNRuzGivybh ahSytt0N0NfDudbbdS6b8p2+sMc0JTbSRspntflZ9V9q+ZGIHaCLT9vsQ9zetIB6 c5snSgaagEbq+QFaeza0l58ib8OxTpD+f7BcSkLIYDsa+0mcNGYtPrvT5Dv1Wsub q7Uvm46ujlSPCANv8IaOa81FddGaQW+5O/h8Em/I+CKe6P23KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4fck3CnLzaXNwl2phoxKcQb+J3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWYyNTJmNGYtMzhiOC0z NDhhLTkyZWEtNmU0NDJkYTdlMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvt/XEjE9zOECi/NGQc0SZA2RkEpUcjzrvsSWo/oBB/jKpxF+QTAB5h YnEBM6BKULxFDglhumG87a4y7uejmEUUBeoIMOMOOWL7q1SSagU3aomS80FfDiTP g813+4jAU6Yx6s+IKXZ9ryD1firDhu1QNx7GyT2VmPGr6vkGS3tkUWkGeIEkm3tM ynoX9aGo6ape420lNuuEmxYA1J4W8WPrAjwunUDfhp5/l0NJLjNOgXBsEnwxf9uK riDQnQAWswngY2CLiwqBrUSlv7aiVdjZlAHnlQv6NcZ6T8ViBMKQseO+rbuxeIb1 QKNc30jKL92fj1tVkF+DYUMQFEUt2+0= -----END CERTIFICATE-----Generated at Tue Apr 29 07:28:40 2025 by rpki-client