$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d9ce6-54fc-366b-ae9f-f3107630d619.roa File: f99d9ce6-54fc-366b-ae9f-f3107630d619.roa (raw, json) Hash identifier: GXDfLJTkRdEZsgXignwFf7b12L8iJASPyYz9Teuj2x4= Subject key identifier: CB:66:0F:02:9E:A8:AF:D7:24:B0:55:B7:C3:61:C3:D9:09:91:EC:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFE7AD4864746290B19BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d9ce6-54fc-366b-ae9f-f3107630d619.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 67.170.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:e7:ad:48:64:74:62:90:b1:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ca97c6c6-3f1a-4535-8c08-2855b52418d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:e4:1d:9e:49:7b:9b:34:d9:5c:05:2c:da: 4f:cd:f2:06:fe:65:28:62:9e:5d:dd:ac:d2:8a:22: 60:e4:10:ea:b1:8c:23:e5:24:7c:3a:c7:69:62:4e: f7:3d:b0:b8:af:0f:34:f6:06:86:c8:0f:ea:f4:5a: 71:26:93:de:67:18:cb:09:54:f5:cf:06:ee:c2:f7: f6:85:68:ae:1a:a4:e1:5e:2f:ef:1e:1d:36:f8:8a: e5:05:dc:87:6c:07:fc:63:de:d5:0a:d3:d5:fb:e9: 4c:19:64:b5:f9:ab:fb:c2:c0:92:00:2b:85:08:fb: c5:63:f6:42:0e:aa:a9:d3:00:a3:fb:c8:59:e4:bf: 94:9e:bd:d3:0b:c7:97:28:eb:dd:c6:e4:fa:0c:80: e2:72:04:c9:70:6e:2f:ac:14:85:3d:f2:34:5a:a8: ed:d4:73:06:f2:86:e1:2d:96:df:61:3b:55:ed:b8: 93:41:b4:bf:2c:a1:f0:e7:fb:e5:7f:e3:51:6d:00: af:b6:60:14:a5:d5:af:4c:74:8e:ec:17:87:a9:35: 2b:83:23:e6:e8:c7:20:e3:14:44:90:a7:2f:02:23: b0:49:ef:77:9a:02:aa:6d:fb:1f:26:a3:bd:01:29: 15:4c:07:fd:47:cc:e4:68:ad:60:76:f6:2b:95:5e: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:0F:02:9E:A8:AF:D7:24:B0:55:B7:C3:61:C3:D9:09:91:EC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d9ce6-54fc-366b-ae9f-f3107630d619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:58:34:6a:5d:85:87:d1:20:dd:a1:5c:07:5b:e9:d6:3f:46: 36:f0:1d:35:2d:c2:02:f2:de:de:f1:22:11:d3:27:ff:50:cb: 63:24:2d:dc:ba:a8:c3:70:4c:41:36:ed:c1:9e:11:37:01:01: d9:8a:90:c1:42:6b:73:0f:da:f9:78:bc:fc:32:f0:5f:22:c9: dd:79:ad:cc:ce:d1:a3:c7:4b:e2:44:80:65:7b:09:d9:e6:ce: fd:94:0e:d9:52:6b:6e:31:cb:76:16:10:6a:49:59:fb:29:5a: 37:31:52:a7:d8:40:c1:e5:74:e4:10:9c:f7:5e:b6:fe:cd:b1: 6c:a7:14:71:b4:e5:d8:5e:1b:d1:76:04:5b:72:92:fa:bd:86: 30:9e:61:08:44:80:10:4d:38:b1:0e:b6:06:e4:df:14:ac:b3: 04:4f:1d:dc:a1:e7:1d:ef:61:fc:12:42:8a:9f:db:f5:d6:b9: 24:64:8b:fc:ec:b9:54:cc:cc:fd:72:e0:db:6a:25:2f:65:18: 46:27:37:4f:9a:af:ff:dc:d6:a0:a6:0e:ac:a1:09:fb:2c:f6: 87:bc:2a:c4:9c:8f:85:40:bc:63:da:a7:ea:68:fd:f2:e9:8e: 1a:60:46:05:71:a6:ce:a5:80:37:97:c4:7c:34:9d:6f:1f:de: dc:a8:ef:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+etSGR0YpCxm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2E5N2M2YzYtM2YxYS00NTM1LThjMDgtMjg1NWI1MjQxOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhnkHZ5Je5s02VwFLNpPzfIG/mUoYp5d3azS iiJg5BDqsYwj5SR8OsdpYk73PbC4rw809gaGyA/q9FpxJpPeZxjLCVT1zwbuwvf2 hWiuGqThXi/vHh02+IrlBdyHbAf8Y97VCtPV++lMGWS1+av7wsCSACuFCPvFY/ZC Dqqp0wCj+8hZ5L+Unr3TC8eXKOvdxuT6DIDicgTJcG4vrBSFPfI0Wqjt1HMG8obh LZbfYTtV7biTQbS/LKHw5/vlf+NRbQCvtmAUpdWvTHSO7BeHqTUrgyPm6Mcg4xRE kKcvAiOwSe93mgKqbfsfJqO9ASkVTAf9R8zkaK1gdvYrlV5fNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtmDwKeqK/XJLBVt8Nhw9kJkeziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk5ZDljZTYtNTRmYy0z NjZiLWFlOWYtZjMxMDc2MzBkNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhYNGpdhYfRIN2hXAdb6dY/RjbwHTUtwgLy3t7xIhHTJ/9Qy2MkLdy6 qMNwTEE27cGeETcBAdmKkMFCa3MP2vl4vPwy8F8iyd15rczO0aPHS+JEgGV7Cdnm zv2UDtlSa24xy3YWEGpJWfspWjcxUqfYQMHldOQQnPdetv7NsWynFHG05dheG9F2 BFtykvq9hjCeYQhEgBBNOLEOtgbk3xSsswRPHdyh5x3vYfwSQoqf2/XWuSRki/zs uVTMzP1y4NtqJS9lGEYnN0+ar//c1qCmDqyhCfss9oe8KsScj4VAvGPap+po/fLp jhpgRgVxps6lgDeXxHw0nW8f3tyo79w= -----END CERTIFICATE-----Generated at Mon Apr 28 02:03:04 2025 by rpki-client