$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa File: f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa (raw, json) Hash identifier: CJJMl9Yg7458ZWH2A+BQqoJsJtlh6JXapZX5IPC/qug= Subject key identifier: 00:81:33:28:89:B3:46:B2:81:38:77:DC:EE:16:DD:87:EA:E1:F7:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEA2D331A7BCA07B0A8C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 67.166.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:a2:d3:31:a7:bc:a0:7b:0a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b44130bd-47de-4864-a857-1770b71d8eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:fb:77:fa:f9:fc:63:a9:74:35:d3:b0:62: e4:73:64:3a:b5:94:8e:07:4c:c6:a0:3d:56:5b:7a: b4:2e:16:cd:67:62:9f:0c:ca:77:3d:18:74:ac:77: 4e:f8:f5:6a:5f:38:d7:32:03:3f:99:57:26:1e:d0: 43:e4:25:f6:63:25:8a:9e:79:9f:ae:36:b2:f6:9f: 84:4a:d6:dc:8f:4c:37:d2:5b:6c:a9:5f:ef:6a:d5: ab:bd:4d:b7:75:7c:ae:8e:d6:da:4e:95:34:47:c0: 49:c5:67:33:8f:9f:f8:c1:5e:08:7c:ac:77:7f:3c: a0:d4:eb:b8:2d:c9:63:8d:7f:80:7b:52:18:ef:9b: 7e:64:1c:88:8e:94:b5:a7:0b:97:ce:54:20:84:9a: 5c:60:2c:39:06:06:64:4a:ea:6b:12:ac:5d:64:36: 1e:b6:c8:cb:af:8b:ef:92:72:68:d5:16:7d:ff:e9: 58:fe:bd:f9:4f:4c:c5:b7:c3:56:45:df:71:f4:29: 51:94:15:f7:7e:e5:35:7e:63:8e:92:57:e7:29:c9: e9:0e:54:9b:68:10:c1:8a:39:f2:f7:7b:06:e5:27: 31:d7:c6:f1:6d:a0:23:cc:56:ba:52:dc:61:7b:fc: ac:13:95:0d:e8:54:49:8e:2e:ef:28:56:90:0a:a8: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:81:33:28:89:B3:46:B2:81:38:77:DC:EE:16:DD:87:EA:E1:F7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f872e7d3-40cd-3dd0-a43a-39d09b1b4050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.166.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:25:c1:b3:e6:6c:13:37:64:a2:bd:36:8e:63:33:a3:aa:cf: 9a:09:fb:6a:3b:ae:be:df:c2:78:87:37:19:8d:30:86:69:33: c9:58:2f:70:c4:ef:88:77:1e:71:df:76:d4:92:c4:8a:fe:d5: 91:2d:49:71:b2:c7:a8:3f:68:8b:28:2d:03:d8:4f:17:62:32: dc:96:2d:d1:ce:a0:95:d4:df:4f:8e:e6:ba:5c:3d:dc:0b:8c: c0:56:69:c6:d9:31:eb:15:ea:6c:a9:58:d3:b4:57:66:03:b5: 00:1b:2c:cc:99:0e:62:ad:50:70:8b:31:14:cb:11:da:7d:39: 71:31:6d:2f:39:0e:49:8a:50:96:12:9f:61:df:50:a1:cc:76: bb:0e:d0:fc:e6:2b:fe:a9:df:20:89:da:2f:67:ac:d4:5e:66: d6:32:03:97:91:86:c4:11:8e:03:bc:be:10:cb:25:eb:aa:88: 0f:8f:05:8d:5e:87:ad:40:b4:85:3a:c8:81:b2:3f:d3:9b:8b: 99:4d:25:40:7a:15:51:e6:7b:d2:97:aa:09:cb:79:ad:54:6d: b9:5f:bf:80:4e:ed:8c:55:7f:1d:3d:8e:40:74:4d:fb:61:9c: 84:62:ad:57:fe:40:76:4b:57:15:62:16:db:af:a7:f3:42:d1: 44:8b:98:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrqLTMae8oHsKjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjQ0MTMwYmQtNDdkZS00ODY0LWE4NTctMTc3MGI3MWQ4ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9j7d/r5/GOpdDXTsGLkc2Q6tZSOB0zGoD1W W3q0LhbNZ2KfDMp3PRh0rHdO+PVqXzjXMgM/mVcmHtBD5CX2YyWKnnmfrjay9p+E Stbcj0w30ltsqV/vatWrvU23dXyujtbaTpU0R8BJxWczj5/4wV4IfKx3fzyg1Ou4 LcljjX+Ae1IY75t+ZByIjpS1pwuXzlQghJpcYCw5BgZkSuprEqxdZDYetsjLr4vv knJo1RZ9/+lY/r35T0zFt8NWRd9x9ClRlBX3fuU1fmOOklfnKcnpDlSbaBDBijny 93sG5Scx18bxbaAjzFa6Utxhe/ysE5UN6FRJji7vKFaQCqi43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACBMyiJs0aygTh33O4W3Yfq4fdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg3MmU3ZDMtNDBjZC0z ZGQwLWE0M2EtMzlkMDliMWI0MDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6ZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEklwbPmbBM3ZKK9No5jM6Oqz5oJ+2o7rr7fwniHNxmNMIZpM8lYL3DE 74h3HnHfdtSSxIr+1ZEtSXGyx6g/aIsoLQPYTxdiMtyWLdHOoJXU30+O5rpcPdwL jMBWacbZMesV6mypWNO0V2YDtQAbLMyZDmKtUHCLMRTLEdp9OXExbS85DkmKUJYS n2HfUKHMdrsO0PzmK/6p3yCJ2i9nrNReZtYyA5eRhsQRjgO8vhDLJeuqiA+PBY1e h61AtIU6yIGyP9Obi5lNJUB6FVHme9KXqgnLea1Ubblfv4BO7YxVfx09jkB0Tfth nIRirVf+QHZLVxViFtuvp/NC0USLmDk= -----END CERTIFICATE-----Generated at Mon Apr 28 14:28:27 2025 by rpki-client