$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa File: 89fdbba5-c305-3bf1-be38-0d9990f5f655.roa (raw, json) Hash identifier: D3Q2nVV/wUB73joAPjot+OwdI62VDF+HjGLR36Dcqes= Subject key identifier: 71:7B:E2:7F:21:F6:C1:96:32:28:18:C7:27:81:0D:04:71:30:BC:4A Certificate issuer: /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Certificate serial: 010D0C9F432858494303E982751D64ACECC49B40 Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 393966 IP address blocks: 204.239.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:e9:82:75:1d:64:ac:ec:c4:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=151d9651-4c82-419b-ba38-319a4db4783b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:1e:64:9e:fa:f5:5b:5a:71:4f:fc:16:e3: 0e:fa:79:1b:55:4f:72:16:48:61:04:a2:77:8b:fa: ea:29:4a:15:6d:34:4a:37:04:66:6e:2c:92:bc:42: 3e:fa:ab:17:d7:0d:a1:da:da:d7:cb:52:e8:42:95: 63:6b:67:5f:e4:e3:20:de:6b:39:fe:b7:12:e6:85: e9:06:cd:6c:27:b0:dd:a4:2c:ca:69:14:ec:bf:d6: 11:ef:9c:35:d5:45:2a:3f:62:e2:0a:1d:db:bd:b3: ca:28:31:e1:d8:f8:98:6a:88:63:9a:46:d5:94:81: 86:38:26:6c:7d:37:6e:a9:da:f5:59:7e:7e:c7:b3: 08:e4:32:12:01:69:d1:06:a6:ee:35:2a:ec:f0:65: 2c:fc:0a:d9:ad:00:5b:3b:8b:2f:65:f9:ab:b8:c0: 03:a6:44:a1:05:95:c9:61:1f:49:c3:a6:db:06:96: ee:21:6f:dc:f1:34:50:9c:1e:ad:18:3c:e6:47:6a: 39:1a:d2:c9:e2:23:c9:cb:38:ca:c2:f5:bc:82:ce: 3e:ee:56:5d:48:e3:0e:aa:2e:31:d0:3b:89:d1:0c: ed:bb:66:6a:5d:c9:1e:0d:ef:2c:19:95:90:3a:73: e4:66:92:98:39:28:11:f9:03:06:03:6c:aa:37:0e: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7B:E2:7F:21:F6:C1:96:32:28:18:C7:27:81:0D:04:71:30:BC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl X509v3 Authority Key Identifier: keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer sbgp-ipAddrBlock: critical IPv4: 204.239.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:82:62:d7:b5:ed:e0:c7:e1:8f:04:c1:e4:00:43:aa:d9:5a: 72:ff:04:fa:eb:c8:f3:5d:10:09:7a:40:2f:92:c7:69:20:bd: 70:f4:22:de:93:14:7e:5c:6e:3d:be:a9:f0:62:34:ea:8d:86: bc:34:db:c8:10:50:f4:4c:a2:ea:b0:01:30:8b:6b:da:84:8b: 0a:e0:79:28:45:19:2f:3e:64:2e:8d:69:40:33:c5:85:c7:6d: 23:c8:7c:bd:16:89:bd:01:c0:53:4e:46:4f:a8:49:c3:c1:ff: cb:90:85:58:ef:81:fc:75:1a:57:5a:8b:2b:eb:97:ce:19:43: 91:80:79:21:8e:6b:e0:ec:c0:68:d2:e3:fc:41:f3:24:66:96: fb:bc:5b:55:94:07:79:3f:10:80:57:40:1a:bd:51:4b:97:b9: 0c:d3:27:54:0d:0f:c7:99:53:d5:f7:1f:6b:c8:73:1d:be:a7: 49:fe:09:cf:6d:87:1d:70:90:36:0d:71:4a:97:77:04:04:c3: 20:90:54:34:ac:2a:5c:c6:f5:57:bd:eb:28:0c:74:8b:50:0c: f6:64:fb:35:1f:99:25:f5:d3:db:cd:ca:d3:c0:c2:88:43:f2: 51:51:a5:10:05:e3:c0:57:3a:77:53:68:02:81:c2:8f:5f:d7: 79:8b:e1:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA+mCdR1krOzEm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA2N2UxMTEtOWQxOS00YzFlLWExZWYtODZmMTMzNjY5 YThlMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk MTUxZDk2NTEtNGM4Mi00MTliLWJhMzgtMzE5YTRkYjQ3ODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPgeZJ769VtacU/8FuMO+nkbVU9yFkhhBKJ3 i/rqKUoVbTRKNwRmbiySvEI++qsX1w2h2trXy1LoQpVja2df5OMg3ms5/rcS5oXp Bs1sJ7DdpCzKaRTsv9YR75w11UUqP2LiCh3bvbPKKDHh2PiYaohjmkbVlIGGOCZs fTduqdr1WX5+x7MI5DISAWnRBqbuNSrs8GUs/ArZrQBbO4svZfmruMADpkShBZXJ YR9Jw6bbBpbuIW/c8TRQnB6tGDzmR2o5GtLJ4iPJyzjKwvW8gs4+7lZdSOMOqi4x 0DuJ0Qztu2ZqXckeDe8sGZWQOnPkZpKYOSgR+QMGA2yqNw5tcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF74n8h9sGWMigYxyeBDQRxMLxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMDY3 ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYxMzM2NjlhOGUvODlmZGJiYTUtYzMwNS0z YmYxLWJlMzgtMGQ5OTkwZjVmNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDA2N2UxMTEtOWQxOS00YzFlLWEx ZWYtODZmMTMzNjY5YThlLzAwNjdlMTExLTlkMTktNGMxZS1hMWVmLTg2ZjEzMzY2 OWE4ZS5jcmwwHwYDVR0jBBgwFoAUlskWWwf6rfza/VMJjgMSFtSDko4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMDY3ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYx MzM2NjlhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICCYte17eDH4Y8EweQAQ6rZWnL/BPrryPNdEAl6QC+Sx2kgvXD0It6T FH5cbj2+qfBiNOqNhrw028gQUPRMouqwATCLa9qEiwrgeShFGS8+ZC6NaUAzxYXH bSPIfL0Wib0BwFNORk+oScPB/8uQhVjvgfx1Gldaiyvrl84ZQ5GAeSGOa+DswGjS 4/xB8yRmlvu8W1WUB3k/EIBXQBq9UUuXuQzTJ1QND8eZU9X3H2vIcx2+p0n+Cc9t hx1wkDYNcUqXdwQEwyCQVDSsKlzG9Ve96ygMdItQDPZk+zUfmSX109vNytPAwohD 8lFRpRAF48BXOndTaAKBwo9f13mL4UA= -----END CERTIFICATE-----Generated at Sun Apr 27 23:50:35 2025 by rpki-client