$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/9164f908-4fe0-386b-b086-3a700a7526ed.roa File: 9164f908-4fe0-386b-b086-3a700a7526ed.roa (raw, json) Hash identifier: dTvSiJnoghy9z8FFI6oKOFn14qpDzVwPt2q7Tc5J+ag= Subject key identifier: 9A:A3:BD:A6:79:F5:67:B9:D8:53:14:33:0F:3F:E7:6D:34:83:E0:62 Certificate issuer: /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d Certificate serial: 010D0C9F432858499F2497A03AA6011AD93AAB00 Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/9164f908-4fe0-386b-b086-3a700a7526ed.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 11711 IP address blocks: 67.211.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:97:a0:3a:a6:01:1a:d9:3a:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=16b0e7c9-1d64-4ce3-8a52-98be78f5c9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:89:23:be:d4:68:e1:e8:9d:ab:21:bf:ed: d6:19:01:8b:db:dd:9a:3e:14:cd:ef:88:84:6d:4c: 07:10:73:c1:85:f3:0a:6f:04:eb:f0:bc:9f:12:04: 88:91:69:bb:07:82:7c:bf:2c:3a:4b:5a:f7:98:3b: c2:9a:a6:89:66:a8:07:a2:b5:be:e9:56:17:a2:f2: 6d:ce:60:3c:82:fd:7b:75:3a:be:4d:16:c3:3c:e0: a3:f5:42:ad:b2:03:97:a9:b6:d8:9b:0f:6b:ed:02: 1b:ce:81:c3:a1:7c:c6:2b:50:8a:0d:47:a6:98:43: 88:35:41:ce:77:02:3d:ce:c5:14:21:ca:4b:91:5c: d4:66:ea:1e:71:cb:8c:bb:29:f2:1d:83:49:47:cf: 1c:22:03:9c:f8:bd:66:cc:24:3f:9f:ca:02:23:1a: 88:51:1b:57:ef:ab:b3:e7:f7:31:e5:6a:8d:b6:0c: 53:93:6d:ad:ad:d8:87:67:35:a1:02:bb:3b:08:ef: 7e:c6:3c:de:aa:45:51:78:29:31:74:7b:e0:d2:8b: 78:7a:f0:9e:8a:61:a5:b3:97:8a:38:66:0e:c0:94: 6e:ca:3d:f7:6c:7e:9f:d9:7e:40:60:f7:a7:99:d5: a6:82:a4:aa:e4:54:e1:82:b0:b1:f0:ec:2d:c7:2b: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:BD:A6:79:F5:67:B9:D8:53:14:33:0F:3F:E7:6D:34:83:E0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/9164f908-4fe0-386b-b086-3a700a7526ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl X509v3 Authority Key Identifier: keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer sbgp-ipAddrBlock: critical IPv4: 67.211.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:64:df:85:8a:4b:ca:75:7a:e9:b6:a0:ff:f2:b5:e1:a1:92: 89:84:90:c2:04:2b:ba:45:0a:6b:ba:01:3e:10:9e:9b:69:13: 63:1b:33:1c:51:1f:6a:45:9f:72:14:fc:44:78:93:54:67:9d: 90:2f:06:6e:a4:c1:85:6a:a2:f4:15:0c:c3:bb:84:b0:56:93: 06:c0:b6:81:4b:d5:73:ea:f6:e4:bf:24:3a:cc:0f:c0:19:3b: 36:99:0a:03:1b:f4:5f:80:9b:c2:f1:bb:5f:db:4c:49:f0:fc: 5f:29:98:df:12:bf:a6:d5:4f:00:94:dc:19:dc:40:99:17:ed: cb:ec:87:f2:df:7d:9f:c7:d7:28:64:de:93:a9:40:4f:7d:3e: b3:75:5b:70:6c:69:3c:0a:82:dd:07:82:1c:bd:24:5f:08:ff: 0e:5b:b2:fc:2d:23:04:5c:07:03:cf:4d:04:6a:c7:62:22:63: 2e:3a:d9:d3:4e:5c:14:02:d9:52:a2:7e:5a:35:02:10:d4:a0: ba:05:ca:49:12:c0:66:92:af:9f:70:be:f4:8d:34:ae:5d:8c: 88:ff:70:d2:97:49:82:87:9f:c6:5e:82:f2:f5:bb:fb:83:75: 41:9d:59:9d:20:98:d2:e8:ad:f9:48:cf:1f:fe:42:9f:30:b6: a8:1e:5a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJegOqYBGtk6qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc4MGY1OWQtZWZhMS00ZDhlLWI3YzAtNjY3NzM3MzVh MzFkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MTZiMGU3YzktMWQ2NC00Y2UzLThhNTItOThiZTc4ZjVjOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7OJI77UaOHonashv+3WGQGL292aPhTN74iE bUwHEHPBhfMKbwTr8LyfEgSIkWm7B4J8vyw6S1r3mDvCmqaJZqgHorW+6VYXovJt zmA8gv17dTq+TRbDPOCj9UKtsgOXqbbYmw9r7QIbzoHDoXzGK1CKDUemmEOINUHO dwI9zsUUIcpLkVzUZuoeccuMuynyHYNJR88cIgOc+L1mzCQ/n8oCIxqIURtX76uz 5/cx5WqNtgxTk22trdiHZzWhArs7CO9+xjzeqkVReCkxdHvg0ot4evCeimGls5eK OGYOwJRuyj33bH6f2X5AYPenmdWmgqSq5FThgrCx8OwtxyvtsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqjvaZ59We52FMUMw8/5200g+BiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Nzgw ZjU5ZC1lZmExLTRkOGUtYjdjMC02Njc3MzczNWEzMWQvOTE2NGY5MDgtNGZlMC0z ODZiLWIwODYtM2E3MDBhNzUyNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc4MGY1OWQtZWZhMS00ZDhlLWI3 YzAtNjY3NzM3MzVhMzFkLzg3ODBmNTlkLWVmYTEtNGQ4ZS1iN2MwLTY2NzczNzM1 YTMxZC5jcmwwHwYDVR0jBBgwFoAUbqo4+oEm/bnxO/ynHvl0/E5t1JIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzgwZjU5ZC1lZmExLTRkOGUtYjdjMC02Njc3 MzczNWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9NQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxk34WKS8p1eum2oP/yteGhkomEkMIEK7pFCmu6AT4QnptpE2MbMxxR H2pFn3IU/ER4k1RnnZAvBm6kwYVqovQVDMO7hLBWkwbAtoFL1XPq9uS/JDrMD8AZ OzaZCgMb9F+Am8Lxu1/bTEnw/F8pmN8Sv6bVTwCU3BncQJkX7cvsh/LffZ/H1yhk 3pOpQE99PrN1W3BsaTwKgt0Hghy9JF8I/w5bsvwtIwRcBwPPTQRqx2IiYy462dNO XBQC2VKiflo1AhDUoLoFykkSwGaSr59wvvSNNK5djIj/cNKXSYKHn8ZegvL1u/uD dUGdWZ0gmNLorflIzx/+Qp8wtqgeWjM= -----END CERTIFICATE-----Generated at Tue Apr 29 07:00:37 2025 by rpki-client